$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft File: LHMz280_ygeHgDg3tsuuMawMS2U.mft (raw, json) Hash identifier: jzX5oOnXSwozKncGnBsFzJLfikSSl1tSI9psHOAMAcw= Subject key identifier: AC:1B:4B:25:81:FD:C7:6E:71:3F:01:7D:69:41:9A:49:B1:0F:34:01 Authority key identifier: 2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 Certificate issuer: /CN=A91E3FD3/serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Certificate serial: 0E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft Manifest number: 0DFE Signing time: Wed 20 May 2026 17:52:07 +0000 Manifest this update: Wed 20 May 2026 17:52:07 +0000 Manifest next update: Wed 27 May 2026 17:52:07 +0000 Files and hashes: 1: LHMz280_ygeHgDg3tsuuMawMS2U.crl (hash: tweBxSqtDw4IaQHtAIUBdO58xSHF5DqgBbVSb0tSmh8=) 2: 62BA539C48ED11EDBC251337C4F9AE02.roa (hash: 6dBwoytRH7N2p3z59t26vsmmZ8suypwfNSdSsbkrs/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3600 (0xe10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3FD3, serialNumber=2C7333DBCD3FCA0787803837B6CBAE31AC0C4B65 Validity Not Before: May 20 17:52:07 2026 GMT Not After : May 27 17:52:07 2026 GMT Subject: CN=6a0df4c7-3e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:12:00:33:77:69:51:1a:7f:00:f4:32:74: af:41:e4:2e:92:1a:f8:14:ec:c1:01:f6:a6:cb:8e: 06:03:50:49:e7:33:c0:ff:16:e9:52:ea:8c:0e:62: 83:a7:44:5a:ed:f1:3a:d9:33:f1:d2:84:6d:64:34: 39:cc:e3:5f:d5:99:46:82:6f:63:47:58:49:26:c0: 55:f4:a6:aa:eb:57:8c:d4:ef:ac:38:70:9c:52:77: 7b:01:9d:6c:35:fc:ba:99:49:65:2a:6c:48:aa:3b: d4:0e:b7:b9:89:4f:68:23:2e:90:dd:2f:08:ec:27: 11:69:5b:c7:40:c2:4a:a5:bf:6d:06:9b:63:e6:d7: 09:1f:04:20:1d:2d:85:78:94:b8:8a:1d:67:81:81: 93:78:f2:e1:5b:cb:dd:af:2a:d8:39:3f:7a:8b:67: ae:27:6b:c3:3f:cd:29:06:fd:3e:3b:d5:44:c1:4b: 39:0c:30:95:dd:af:d3:4d:81:b1:a5:68:4e:5f:48: 21:78:dc:1f:80:dc:a4:59:69:c0:65:03:32:54:81: 71:09:49:bc:90:e7:10:6a:2d:3f:f9:45:3e:f5:b8: 79:e2:83:45:3d:37:e8:54:60:80:97:40:5f:d5:6b: bc:a3:55:4a:40:e2:69:7b:05:2c:51:68:6a:06:10: a2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1B:4B:25:81:FD:C7:6E:71:3F:01:7D:69:41:9A:49:B1:0F:34:01 X509v3 Authority Key Identifier: keyid:2C:73:33:DB:CD:3F:CA:07:87:80:38:37:B6:CB:AE:31:AC:0C:4B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LHMz280_ygeHgDg3tsuuMawMS2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3FD3/21DE5B9AD49511E9A27DC92FC4F9AE02/LHMz280_ygeHgDg3tsuuMawMS2U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:78:15:8e:66:17:c2:9b:14:37:54:5d:1f:c4:56:05:bd:1b: df:9c:67:df:0b:a8:0b:e3:72:55:bb:d5:ee:c1:e0:b6:e8:31: 89:eb:d0:ef:39:73:1b:e1:e2:9a:6b:7d:77:21:97:87:b2:5c: 76:4a:bb:a3:2a:99:ad:01:0e:58:e3:5a:7a:63:12:db:31:1f: 15:43:e5:96:e7:23:2f:af:bc:79:7c:59:26:16:bb:37:db:22: 84:6b:04:ff:ec:28:e1:a4:f2:a2:48:35:88:b3:6f:a9:bb:94: 40:91:bc:37:6f:1b:7e:95:cc:7e:9a:d8:e8:63:6a:ac:61:7b: eb:41:58:1f:67:36:d7:be:b3:a4:45:17:6e:f9:97:d7:6f:cb: 9b:3f:de:13:d5:2d:42:de:3a:bf:fb:8a:ce:d1:2d:91:2b:62: ec:6b:0f:84:4d:2c:86:f3:dd:77:29:b7:c9:be:6f:ec:12:7a: 19:14:b6:97:88:78:53:4b:dc:ac:52:d8:97:0a:cf:f7:dd:eb: be:91:9b:53:d7:ee:1c:55:87:22:81:0e:07:6d:ac:60:a8:e8: 6e:56:0a:3d:9a:51:b2:fe:50:40:2a:20:09:a8:62:2b:c9:c5: 79:52:15:34:91:0b:ac:d9:ff:41:79:69:51:c8:5b:8e:a3:7f: 70:75:40:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGRDMxMTAvBgNVBAUTKDJDNzMzM0RCQ0QzRkNBMDc4NzgwMzgzN0I2Q0JBRTMx QUMwQzRCNjUwHhcNMjYwNTIwMTc1MjA3WhcNMjYwNTI3MTc1MjA3WjAYMRYwFAYD VQQDEw02YTBkZjRjNy0zZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q8SADN3aVEafwD0MnSvQeQukhr4FOzBAfamy44GA1BJ5zPA/xbpUuqMDmKD p0Ra7fE62TPx0oRtZDQ5zONf1ZlGgm9jR1hJJsBV9Kaq61eM1O+sOHCcUnd7AZ1s Nfy6mUllKmxIqjvUDre5iU9oIy6Q3S8I7CcRaVvHQMJKpb9tBptj5tcJHwQgHS2F eJS4ih1ngYGTePLhW8vdryrYOT96i2euJ2vDP80pBv0+O9VEwUs5DDCV3a/TTYGx pWhOX0gheNwfgNykWWnAZQMyVIFxCUm8kOcQai0/+UU+9bh54oNFPTfoVGCAl0Bf 1Wu8o1VKQOJpewUsUWhqBhCiMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwbSyWB /cducT8BfWlBmkmxDzQBMB8GA1UdIwQYMBaAFCxzM9vNP8oHh4A4N7bLrjGsDEtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0ZEMy8yMURFNUI5QUQ0 OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3lnZUhnRGczdHN1dU1hd01T MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xITXoyODBfeWdlSGdEZzN0c3V1TWF3TVMyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0ZEMy8yMURFNUI5QUQ0OTUxMUU5QTI3REM5MkZDNEY5QUUwMi9MSE16MjgwX3ln ZUhnRGczdHN1dU1hd01TMlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP3gVjmYXwpsUN1RdH8RWBb0b35xn3wuoC+NyVbvV7sHgtugxievQ7zlzG+Hi mmt9dyGXh7Jcdkq7oyqZrQEOWONaemMS2zEfFUPllucjL6+8eXxZJha7N9sihGsE /+wo4aTyokg1iLNvqbuUQJG8N28bfpXMfprY6GNqrGF760FYH2c2176zpEUXbvmX 12/Lmz/eE9UtQt46v/uKztEtkSti7GsPhE0shvPddym3yb5v7BJ6GRS2l4h4U0vc rFLYlwrP993rvpGbU9fuHFWHIoEOB22sYKjoblYKPZpRsv5QQCogCahiK8nFeVIV NJELrNn/QXlpUchbjqN/cHVAYA== -----END CERTIFICATE-----Generated at Thu May 21 10:16:02 2026 by rpki-client