
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: Tez6xHYUGQaGZHfDVHnHt6qK4/G5vFIXgHRlH5YGsJI=
Subject key identifier: 5E:D2:C2:83:A1:3D:16:8A:4F:8E:CF:2A:99:39:4A:F8:18:F7:A7:A4
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 042C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 0403
Signing time: Sat 11 Jul 2026 00:57:15 +0000
Manifest this update: Sat 11 Jul 2026 00:57:15 +0000
Manifest next update: Sat 18 Jul 2026 00:57:15 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: YET9NPrc9rHvkcJWp+4m93LFoRx2vHc2nNrkci1P9AQ=)
2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=)
3: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=)
4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=)
5: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=)
6: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=)
7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 00:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Jul 11 00:57:15 2026 GMT
Not After : Jul 18 00:57:15 2026 GMT
Subject: CN=6a5194eb-c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:ba:a7:2b:9c:20:88:e4:3e:4c:06:f5:7c:
b5:64:bc:2c:43:3a:c7:2c:95:0c:85:23:76:fb:d8:
fe:74:f6:09:16:3e:8f:f2:75:30:93:3e:b6:54:8e:
55:3b:62:c9:5f:a3:b9:9d:b8:4a:f9:52:fa:a4:7c:
49:43:7e:ac:77:20:11:5f:fd:76:47:c9:53:6c:03:
46:23:d1:5d:14:01:4a:4d:2a:aa:7c:a6:fd:cc:9c:
82:ae:3f:c9:d8:50:30:b7:1a:a4:76:ac:12:fd:07:
07:42:f8:49:d5:79:eb:0b:7a:e0:55:42:48:0e:97:
11:d4:ee:97:82:47:8c:e5:6d:31:72:c0:1f:a1:27:
33:93:aa:06:7b:63:70:89:ea:c8:dd:0d:7c:f9:44:
e7:ca:b0:85:65:ff:46:0f:dd:95:63:fc:e8:55:ba:
1a:67:61:fb:56:7c:60:3f:a8:7a:fd:c5:e9:97:6a:
e9:84:47:5e:93:e7:65:30:d8:85:34:32:d6:24:b0:
15:52:61:59:98:b5:af:8e:6b:fc:6e:23:fd:f4:c0:
c4:08:13:4b:a9:4d:d4:3b:16:26:fb:27:9a:8b:ab:
67:ce:fd:b1:a0:33:64:ef:66:15:ab:67:83:33:27:
cd:fb:54:73:b8:ea:6a:8d:b7:28:d8:b8:a0:ef:83:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D2:C2:83:A1:3D:16:8A:4F:8E:CF:2A:99:39:4A:F8:18:F7:A7:A4
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cb:dd:32:ce:4e:8b:24:1f:5e:98:25:e7:1d:a1:66:9d:57:
51:06:9c:dd:d0:37:f9:11:83:62:d3:f7:86:af:2b:4f:34:c8:
b7:11:6c:d2:6d:ab:8d:a7:b4:4f:71:f0:77:43:57:6a:9d:96:
39:ef:38:34:4a:23:cf:1d:80:38:9d:c9:60:b1:f1:09:48:cb:
a1:b3:a9:92:cb:07:cf:15:54:1d:70:d8:f2:ea:fd:12:ec:98:
9a:3a:e1:e4:aa:8a:8b:3a:89:a6:33:54:a6:27:ac:49:81:62:
76:93:1f:a2:0b:3a:ce:67:c1:e4:63:a0:e8:89:5e:e9:e7:e3:
ab:9b:bb:bc:b9:f3:4f:7b:28:1f:27:ad:18:aa:e6:b6:b6:a1:
fd:e2:9d:4a:71:2a:2b:1f:e2:76:98:73:ec:a3:1c:84:69:9e:
d0:52:d4:f1:a5:79:c1:3c:e8:9d:33:51:c5:a8:68:37:81:79:
a2:1d:21:5b:52:77:0a:88:9b:d0:30:e8:19:91:fb:14:b3:26:
d8:97:c8:fa:87:09:3f:e0:22:a0:d4:06:1b:2a:e7:0f:21:17:
19:79:1d:3e:c4:58:ef:23:d0:93:91:66:0e:af:52:37:11:a1:
81:66:67:c9:e8:57:33:eb:80:61:12:51:6d:63:74:3c:76:04:
c7:cf:2a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 03:23:47 2026 by rpki-client