$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft File: LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft (raw, json) Hash identifier: w7U7YQuERt5BDkubdRKT98vu+umEBRxi32WJw6dymUY= Subject key identifier: E7:EA:83:1C:10:87:7B:67:8F:E8:F2:CB:FC:5D:94:6A:A0:22:4B:30 Authority key identifier: 2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C Certificate issuer: /CN=A91D0B40/serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft Manifest number: 01AA Signing time: Wed 07 Oct 2026 04:34:53 +0000 Manifest this update: Wed 07 Oct 2026 04:34:52 +0000 Manifest next update: Wed 14 Oct 2026 04:34:52 +0000 Files and hashes: 1: LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl (hash: Yu9dTBiUbX4ocRtaxsB5SNaYKTFRrRkeMPSh3LHEFLw=) 2: F9C8081E4CB511F0B121AE45C4F9AE02.roa (hash: PtbtJlcJRwUkYVZTTdhAVrVCAYKXUtPXtxl26TpZjBg=) 3: F8CD5EAA4CB511F0B121AE45C4F9AE02.roa (hash: zAdUeLORZiO4f/KSBL4alxYSI+DmbONmLsqQbgHi324=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 04:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B40, serialNumber=2D7484A17F4E9E69410051EF53B7BE71937F9F9C Validity Not Before: Oct 7 04:34:52 2026 GMT Not After : Oct 14 04:34:52 2026 GMT Subject: CN=6ac5cbec-1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:de:fa:c5:fc:4f:c4:04:ec:ef:e2:17:fb: 4b:55:f1:d8:23:ba:f9:01:f7:c7:d3:9f:9a:1c:16: 5c:81:ee:a9:ee:4c:fd:07:40:5d:59:3a:82:b1:1a: 8e:86:4c:f4:f8:d6:d9:f2:9e:3e:7b:b9:d4:27:5b: 5e:cf:8a:9a:ee:42:d7:28:d7:2f:9d:31:5f:05:65: 89:71:7f:f7:78:d5:0c:5d:41:74:65:f6:a3:2e:b9: 29:26:64:b2:24:48:f6:69:36:a9:6c:59:92:61:5c: 74:68:c1:fd:ee:be:07:ad:9e:74:fb:f8:3c:fe:d8: d7:d5:d7:8d:61:45:45:bb:ac:21:4a:9b:42:db:04: b5:ff:93:47:b2:5b:39:97:dc:d7:7f:1e:ef:ab:27: 5b:33:96:5b:e1:f4:b3:0f:04:20:1e:34:ff:e0:1d: 65:6f:6d:27:e2:b7:19:cf:cc:83:e7:2d:1d:3c:34: b0:8e:30:2c:f5:5e:c2:b4:c7:4d:94:a9:f1:d2:85: ab:e5:92:47:cb:23:7c:be:50:c7:c0:59:5a:be:99: 80:f7:dc:3a:44:f3:57:07:30:ac:34:ca:1c:57:bb: 30:b0:b7:48:ab:e4:68:3f:62:dd:ea:0c:35:0a:a5: dd:c9:da:8c:26:2f:ba:88:1a:05:e9:f1:cd:c8:d7: 52:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:83:1C:10:87:7B:67:8F:E8:F2:CB:FC:5D:94:6A:A0:22:4B:30 X509v3 Authority Key Identifier: keyid:2D:74:84:A1:7F:4E:9E:69:41:00:51:EF:53:B7:BE:71:93:7F:9F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LXSEoX9OnmlBAFHvU7e-cZN_n5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/1FA0225038E011EF94B84D7FC4F9AE02/LXSEoX9OnmlBAFHvU7e-cZN_n5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:48:61:9b:23:c7:8d:e6:aa:e7:a4:4f:75:20:00:95:f8:b3: e2:d0:68:bd:d3:01:9e:ba:d1:da:1d:65:aa:b7:23:6a:83:ff: 4b:24:f7:b5:ac:cb:b3:cd:3a:44:5a:5b:cf:bd:2b:af:82:af: e7:f3:1f:ea:c2:e5:16:a8:0d:31:1d:e4:bc:d1:b4:7e:9f:33: f4:4d:7a:dc:68:bb:1a:96:91:4d:bc:d0:e8:78:fe:15:b9:ee: 77:aa:24:fe:d9:5d:7b:7b:f6:2c:7c:78:45:9d:3d:44:bd:bb: a9:4f:4a:cc:d8:5e:0c:9b:cc:4a:34:98:8c:55:05:91:73:6d: 46:f9:7b:14:74:eb:e2:59:38:2b:aa:99:16:8e:02:07:56:0b: cf:30:5c:9f:c6:cc:4b:f6:b5:7f:54:8a:f0:2e:0c:38:a3:a0: 8d:a8:4b:6c:69:57:26:44:f1:c6:29:b3:b8:68:13:6b:a7:da: 7c:8c:0d:a1:c6:9a:52:79:2d:b6:ba:1c:ec:b3:d5:fa:47:9d: fb:62:32:5b:39:ef:09:a0:07:7a:ef:77:c3:0c:dd:c7:7e:b7: 61:64:c2:b8:14:e8:da:73:3a:05:9f:ca:93:ae:a6:cd:c2:b7: 58:dd:fd:70:7d:f9:05:1c:ba:e6:9a:ee:90:93:72:d3:3f:55: 6e:d1:fd:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCNDAxMTAvBgNVBAUTKDJENzQ4NEExN0Y0RTlFNjk0MTAwNTFFRjUzQjdCRTcx OTM3RjlGOUMwHhcNMjYxMDA3MDQzNDUyWhcNMjYxMDE0MDQzNDUyWjAYMRYwFAYD VQQDEw02YWM1Y2JlYy0xNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rXe+sX8T8QE7O/iF/tLVfHYI7r5AffH05+aHBZcge6p7kz9B0BdWTqCsRqO hkz0+NbZ8p4+e7nUJ1tez4qa7kLXKNcvnTFfBWWJcX/3eNUMXUF0ZfajLrkpJmSy JEj2aTapbFmSYVx0aMH97r4HrZ50+/g8/tjX1deNYUVFu6whSptC2wS1/5NHsls5 l9zXfx7vqydbM5Zb4fSzDwQgHjT/4B1lb20n4rcZz8yD5y0dPDSwjjAs9V7CtMdN lKnx0oWr5ZJHyyN8vlDHwFlavpmA99w6RPNXBzCsNMocV7swsLdIq+RoP2Ld6gw1 CqXdydqMJi+6iBoF6fHNyNdSuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfqgxwQ h3tnj+jyy/xdlGqgIkswMB8GA1UdIwQYMBaAFC10hKF/Tp5pQQBR71O3vnGTf5+c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEI0MC8xRkEwMjI1MDM4 RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25tbEJBRkh2VTdlLWNaTl9u NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xYU0VvWDlPbm1sQkFGSHZVN2UtY1pOX241dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEI0MC8xRkEwMjI1MDM4RTAxMUVGOTRCODREN0ZDNEY5QUUwMi9MWFNFb1g5T25t bEJBRkh2VTdlLWNaTl9uNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI0hhmyPHjeaq56RPdSAAlfiz4tBovdMBnrrR2h1lqrcjaoP/SyT3tazLs806 RFpbz70rr4Kv5/Mf6sLlFqgNMR3kvNG0fp8z9E163Gi7GpaRTbzQ6Hj+Fbnud6ok /tlde3v2LHx4RZ09RL27qU9KzNheDJvMSjSYjFUFkXNtRvl7FHTr4lk4K6qZFo4C B1YLzzBcn8bMS/a1f1SK8C4MOKOgjahLbGlXJkTxximzuGgTa6fafIwNocaaUnkt troc7LPV+ked+2IyWznvCaAHeu93wwzdx363YWTCuBTo2nM6BZ/Kk66mzcK3WN39 cH35BRy65prukJNy0z9VbtH97A== -----END CERTIFICATE-----Generated at Thu Oct 8 16:07:28 2026 by rpki-client