$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: I+WPM46+BBhtTxBMtwoiqrjBIMo/w+yUAvA7R9F4E4M= Subject key identifier: DC:2B:D4:52:12:AC:7B:98:9B:49:38:DA:AF:5A:E7:52:50:31:A8:FC Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0E55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0E43 Signing time: Fri 02 Oct 2026 17:59:19 +0000 Manifest this update: Fri 02 Oct 2026 17:59:19 +0000 Manifest next update: Fri 09 Oct 2026 17:59:19 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: Xn4bsXreBNlcIiVrT8rfjXLd5+DaJj1UK5tJvaPoxv0=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 17:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3669 (0xe55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: Oct 2 17:59:19 2026 GMT Not After : Oct 9 17:59:19 2026 GMT Subject: CN=6abff0f7-d0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:38:ac:34:95:74:69:ad:18:f5:68:33:7a: aa:94:0a:02:9b:fa:0a:ec:9a:70:a1:e1:a3:4c:0c: d1:d2:76:7c:58:a0:77:fa:bf:da:32:9d:1b:bd:96: d9:74:33:95:a9:3e:8b:b5:d2:c1:05:c9:97:93:d0: ef:50:0d:8b:f9:0f:98:80:43:9e:6f:88:b3:59:ba: e0:a3:5a:28:81:fb:43:53:1d:84:22:60:95:22:54: b8:0e:50:9a:57:5a:9a:8b:73:3b:f6:46:fd:26:9e: ad:6a:76:a2:54:52:56:3c:69:28:e1:86:a5:86:73: 60:02:60:77:66:c7:73:2c:8b:2e:75:8a:99:f9:1a: ee:fc:cc:f0:a5:0d:80:6c:ff:78:5c:af:46:cd:1d: 88:f7:23:ce:b5:9f:ab:ef:32:35:b7:5a:52:ab:9f: b4:f5:8c:cb:74:2b:df:b2:37:b0:6b:d8:91:af:af: e8:20:04:87:a6:ac:d5:ca:c5:ff:a6:40:2a:88:99: 37:5f:0d:da:19:e6:ff:bf:29:a3:57:7f:c9:a6:26: 43:34:e7:78:eb:1b:63:40:06:a8:8a:8f:f8:8d:d9: 1e:b4:5b:f7:11:19:33:ab:2e:6e:7f:06:20:c8:0f: 46:44:35:5e:48:6b:1c:82:1e:7a:61:fa:2d:4e:9a: df:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:2B:D4:52:12:AC:7B:98:9B:49:38:DA:AF:5A:E7:52:50:31:A8:FC X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b9:6e:64:8a:59:1d:fb:6e:ad:16:e2:07:b8:1c:05:b6:84: 6b:96:2b:f1:6e:66:ea:4a:7b:36:36:ef:1c:37:ce:71:6c:bf: 16:bc:00:1f:9a:a5:57:2e:25:b3:51:30:32:9e:2c:3e:45:f2: fa:df:7f:32:bc:4a:dd:ea:8f:47:15:7e:d3:34:3e:f9:3d:03: 97:aa:94:37:5f:ce:6f:05:2c:64:7d:14:e7:7b:9c:59:c6:3a: de:97:04:3b:ab:6e:4f:85:88:ad:e6:95:5b:ee:f6:1c:5f:7e: 7c:7c:e6:43:0c:7d:fb:29:85:f2:4b:5f:c8:34:6b:54:f3:f9: ee:d1:1b:3a:b4:13:7b:cf:ea:9c:5d:37:a0:35:f5:a3:19:2a: 9f:35:8f:20:c8:c2:f2:f2:bc:1d:6f:3e:7f:4b:18:45:54:ea: d6:a2:88:36:28:a5:a2:4d:41:49:44:37:66:f5:f7:75:9f:40: 1e:86:a0:90:a5:6e:a5:cd:cf:b9:c4:27:6e:3a:da:54:ca:23: c3:34:a8:d5:2f:cf:9b:8a:83:76:b8:b4:cb:8d:5f:eb:2c:e0: 70:c1:b9:9a:6a:ac:65:d8:79:0a:f6:11:b3:34:0c:36:25:63: 7e:39:1b:bd:7b:41:7c:f7:e5:5f:9e:a2:aa:ef:0b:0a:fa:f1: 96:d4:2c:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjYxMDAyMTc1OTE5WhcNMjYxMDA5MTc1OTE5WjAYMRYwFAYD VQQDEw02YWJmZjBmNy1kMGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rY4rDSVdGmtGPVoM3qqlAoCm/oK7JpwoeGjTAzR0nZ8WKB3+r/aMp0bvZbZ dDOVqT6LtdLBBcmXk9DvUA2L+Q+YgEOeb4izWbrgo1oogftDUx2EImCVIlS4DlCa V1qai3M79kb9Jp6tanaiVFJWPGko4YalhnNgAmB3ZsdzLIsudYqZ+Rru/MzwpQ2A bP94XK9GzR2I9yPOtZ+r7zI1t1pSq5+09YzLdCvfsjewa9iRr6/oIASHpqzVysX/ pkAqiJk3Xw3aGeb/vymjV3/JpiZDNOd46xtjQAaoio/4jdketFv3ERkzqy5ufwYg yA9GRDVeSGscgh56YfotTprfzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwr1FIS rHuYm0k42q9a51JQMaj8MB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWbluZIpZHfturRbiB7gcBbaEa5Yr8W5m6kp7NjbvHDfOcWy/FrwAH5qlVy4l s1EwMp4sPkXy+t9/MrxK3eqPRxV+0zQ++T0Dl6qUN1/ObwUsZH0U53ucWcY63pcE O6tuT4WIreaVW+72HF9+fHzmQwx9+ymF8ktfyDRrVPP57tEbOrQTe8/qnF03oDX1 oxkqnzWPIMjC8vK8HW8+f0sYRVTq1qKINiilok1BSUQ3ZvX3dZ9AHoagkKVupc3P ucQnbjraVMojwzSo1S/Pm4qDdri0y41f6yzgcMG5mmqsZdh5CvYRszQMNiVjfjkb vXtBfPflX56iqu8LCvrxltQsBA== -----END CERTIFICATE-----Generated at Sun Oct 4 10:23:49 2026 by rpki-client