$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: eeEWbgYRfC+Xe3rDDA1Pm//YBd+ly4BkxNAMODqBgI4= Subject key identifier: 07:7C:19:F8:B3:3E:48:77:4E:D1:C6:30:27:08:6C:E2:C7:F4:3E:21 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 0151 Signing time: Mon 13 Apr 2026 04:45:14 +0000 Manifest this update: Mon 13 Apr 2026 04:45:14 +0000 Manifest next update: Mon 20 Apr 2026 04:45:14 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: UT26qx/6WlkOuPCsTV9ipN00ExAC6c3PZ9Tf95mJPUA=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Apr 13 04:45:14 2026 GMT Not After : Apr 20 04:45:14 2026 GMT Subject: CN=69dc74da-c72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:59:2f:31:f7:50:0b:d6:82:ff:19:1f:db:44: d7:7f:71:ec:73:42:b0:70:22:22:50:48:9b:1f:ec: 27:e0:fb:ee:ea:1e:b1:c2:82:f9:b9:29:d4:06:28: b0:4e:d2:53:41:89:db:0b:fa:79:c0:da:28:e9:14: 2b:c3:29:8e:55:5e:68:b2:ab:25:51:09:15:14:4e: ee:f5:86:ff:c8:7c:2e:26:db:0b:b1:a1:b2:bb:00: e1:9b:64:84:75:4e:37:12:9c:1a:0b:e5:66:2c:7d: ac:1a:7e:c5:60:61:5b:a4:d9:36:45:fb:ea:a5:e6: 4a:2d:0b:85:06:de:e1:6d:0e:87:18:07:5b:c7:95: 7c:4e:90:0c:89:f9:a2:41:d1:b4:0a:f3:26:e6:d5: 07:b3:35:f4:7c:63:e3:09:52:00:fd:04:bc:fd:25: e8:77:b1:83:01:de:49:57:34:24:de:34:7c:85:c3: 7e:ef:ec:a3:be:e0:57:69:c1:21:8d:08:d4:26:b1: 86:e3:d1:39:cc:5a:c2:a3:68:b3:ff:09:d3:b2:23: f1:74:d0:5d:ee:32:1f:e8:77:c4:06:99:38:fa:79: 9a:44:a4:db:92:3a:3e:6b:d4:eb:61:8a:1b:7e:1e: 7c:97:5e:3f:95:a5:cd:1b:5f:b1:54:5f:1d:a8:fe: 1c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:19:F8:B3:3E:48:77:4E:D1:C6:30:27:08:6C:E2:C7:F4:3E:21 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:49:a1:10:b7:39:07:0f:e0:54:f3:68:62:68:74:45:c7:e1: 29:d8:91:0b:93:11:cb:3e:12:cf:21:75:ae:85:97:3d:8f:b3: fe:e0:53:5e:04:ed:44:ae:8d:43:61:98:3f:e8:95:17:e7:b8: 2f:4f:eb:c1:4a:6a:3d:4e:3b:42:05:4e:0d:e6:a5:2b:94:9f: be:2e:b1:da:29:ee:11:ac:dc:5e:d0:b7:39:7a:01:fd:f7:c2: 4f:95:12:90:78:d8:22:e0:a8:8a:0d:33:8c:ee:f9:98:ac:fd: d2:72:44:f2:6f:aa:49:6b:40:b0:ae:7b:07:3b:2d:95:c5:76: d8:35:c8:f6:31:90:92:10:fc:1d:f6:89:1d:46:03:6d:30:5c: 0d:1b:50:b3:d8:6e:30:32:1e:e7:09:44:87:e3:e5:dd:9a:08: be:b0:e4:70:4b:a3:54:eb:ba:12:00:8f:61:b4:08:bd:a9:2a: 53:c4:7b:c3:07:cb:a7:45:b5:36:3f:97:e7:61:6c:b3:35:ef: bb:2b:74:9b:91:12:22:d3:d3:23:8c:62:fb:c9:6c:47:3a:7b: 6f:be:9e:b4:92:3b:62:9b:8a:7c:ca:be:93:1c:34:e6:89:b3: 8a:55:e3:0b:0f:ea:93:08:9f:db:b8:5a:ce:5d:da:8d:07:4f: 38:f9:b7:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYwNDEzMDQ0NTE0WhcNMjYwNDIwMDQ0NTE0WjAYMRYwFAYD VQQDEw02OWRjNzRkYS1jNzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1kvMfdQC9aC/xkf20TXf3Hsc0KwcCIiUEibH+wn4Pvu6h6xwoL5uSnUBiiw TtJTQYnbC/p5wNoo6RQrwymOVV5osqslUQkVFE7u9Yb/yHwuJtsLsaGyuwDhm2SE dU43EpwaC+VmLH2sGn7FYGFbpNk2RfvqpeZKLQuFBt7hbQ6HGAdbx5V8TpAMifmi QdG0CvMm5tUHszX0fGPjCVIA/QS8/SXod7GDAd5JVzQk3jR8hcN+7+yjvuBXacEh jQjUJrGG49E5zFrCo2iz/wnTsiPxdNBd7jIf6HfEBpk4+nmaRKTbkjo+a9TrYYob fh58l14/laXNG1+xVF8dqP4c4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAd8Gfiz Pkh3TtHGMCcIbOLH9D4hMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW0mhELc5Bw/gVPNoYmh0RcfhKdiRC5MRyz4SzyF1roWXPY+z/uBTXgTtRK6N Q2GYP+iVF+e4L0/rwUpqPU47QgVODealK5Sfvi6x2inuEazcXtC3OXoB/ffCT5US kHjYIuCoig0zjO75mKz90nJE8m+qSWtAsK57BzstlcV22DXI9jGQkhD8HfaJHUYD bTBcDRtQs9huMDIe5wlEh+Pl3ZoIvrDkcEujVOu6EgCPYbQIvakqU8R7wwfLp0W1 Nj+X52FsszXvuyt0m5ESItPTI4xi+8lsRzp7b76etJI7YpuKfMq+kxw05omzilXj Cw/qkwif27hazl3ajQdPOPm3dQ== -----END CERTIFICATE-----Generated at Mon Apr 13 08:08:19 2026 by rpki-client