
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: 3w+4lRgePbMnotaU7HbYEg32GrfdLwX9sJL+a+txKAQ=
Subject key identifier: B9:16:C1:F4:F4:EA:6F:AE:54:24:E4:04:BB:AD:F6:77:84:F8:92:EC
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 0165
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: 0154
Signing time: Thu 03 Sep 2026 05:34:59 +0000
Manifest this update: Thu 03 Sep 2026 05:34:59 +0000
Manifest next update: Thu 10 Sep 2026 05:34:59 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: TjVzj824UWzQhhowD1XTkR6BQR33U4POSsXWTKuLdnU=)
2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 05:34:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Sep 3 05:34:59 2026 GMT
Not After : Sep 10 05:34:59 2026 GMT
Subject: CN=6a990703-6e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:24:bf:b7:02:a8:9e:ba:65:3f:fe:2f:e5:
00:96:90:f4:0b:0e:95:b3:80:39:b6:a7:7a:cf:fa:
67:03:85:79:9b:07:bd:b7:0b:66:bb:f7:52:4d:64:
e1:03:87:42:90:7a:86:2c:8b:cb:73:cd:6c:1f:27:
f3:f7:12:3e:68:10:92:f0:17:5e:85:05:20:ae:2f:
64:9c:57:75:72:26:cc:c0:bb:38:2b:37:eb:21:cc:
6d:75:0d:d9:a7:58:08:4a:83:fa:b0:92:78:c0:5d:
c3:0a:68:9e:69:ff:74:0b:31:09:22:12:4b:58:91:
37:3b:ce:8b:08:dc:04:20:46:1e:01:1e:79:64:57:
ed:57:59:e7:fd:b6:1a:3a:b0:1b:2b:0a:b1:4f:b0:
20:d1:6a:39:18:21:e1:7b:3b:15:ac:13:68:ef:bd:
fa:44:8d:8d:d6:04:49:0a:62:cc:eb:89:c5:35:5e:
51:25:08:cd:b5:69:5f:d2:85:19:02:f8:c7:65:26:
45:fe:ef:09:3a:4a:46:52:8c:3d:7b:2b:55:f9:44:
60:00:66:7d:e3:42:00:21:fe:a3:21:99:59:aa:fa:
11:03:68:19:2d:d5:0f:43:8d:f3:9c:06:52:6e:96:
02:10:e1:25:ab:1e:25:fa:81:63:ac:af:11:48:a6:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:C1:F4:F4:EA:6F:AE:54:24:E4:04:BB:AD:F6:77:84:F8:92:EC
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:ea:b5:ae:26:ce:67:92:43:6a:c2:86:17:57:d7:bc:d5:
17:77:77:bd:ee:4a:c9:75:75:3c:c2:ff:bb:75:b1:b8:7e:40:
8e:fb:dc:27:af:f6:ff:bb:1b:f1:e6:37:f2:2d:7e:61:5b:93:
dc:8a:93:b9:34:31:4e:c7:dc:7b:a7:3e:d6:b7:a1:07:4b:a8:
a4:22:10:f7:23:f0:ae:11:cd:fb:ae:86:7c:2f:71:48:1b:02:
93:ba:aa:ed:ca:35:bf:a4:f8:52:14:e7:f1:93:af:cf:e8:00:
56:e2:31:97:a7:01:ed:2f:82:77:0c:f2:86:87:f8:7a:e5:e0:
75:0d:4e:40:dd:ab:d1:b2:86:aa:67:55:7e:08:77:9a:4d:9c:
a7:32:1b:f6:4a:b7:3a:0d:9f:a1:c1:3f:f4:26:b3:4c:9a:f4:
e3:7b:6c:72:42:8b:98:4c:0f:6e:38:3d:98:36:d3:c5:1f:0c:
8e:68:c4:a4:83:f9:98:a9:9e:7e:01:9c:c7:8d:41:ea:41:7a:
dd:25:7d:bd:87:de:23:42:79:d6:58:b3:44:8d:58:db:20:a8:
d5:b8:a6:0f:37:42:ca:81:d1:97:d5:7f:6e:8a:1c:a2:08:01:
b3:d1:a4:d2:7c:96:c8:1f:3f:aa:df:b9:24:91:39:d9:63:9d:
03:86:7e:3b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5
NDJFNkE1MUEwHhcNMjYwOTAzMDUzNDU5WhcNMjYwOTEwMDUzNDU5WjAYMRYwFAYD
VQQDEw02YTk5MDcwMy02ZTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2V0kv7cCqJ66ZT/+L+UAlpD0Cw6Vs4A5tqd6z/pnA4V5mwe9twtmu/dSTWTh
A4dCkHqGLIvLc81sHyfz9xI+aBCS8BdehQUgri9knFd1cibMwLs4KzfrIcxtdQ3Z
p1gISoP6sJJ4wF3DCmieaf90CzEJIhJLWJE3O86LCNwEIEYeAR55ZFftV1nn/bYa
OrAbKwqxT7Ag0Wo5GCHhezsVrBNo7736RI2N1gRJCmLM64nFNV5RJQjNtWlf0oUZ
AvjHZSZF/u8JOkpGUow9eytV+URgAGZ940IAIf6jIZlZqvoRA2gZLdUPQ43znAZS
bpYCEOElqx4l+oFjrK8RSKaxvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkWwfT0
6m+uVCTkBLut9neE+JLsMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD
MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky
TkdTakYzcXpJUUdVTG1wUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGGLqta4mzmeSQ2rChhdX17zVF3d3ve5KyXV1PML/u3WxuH5AjvvcJ6/2/7sb
8eY38i1+YVuT3IqTuTQxTsfce6c+1rehB0uopCIQ9yPwrhHN+66GfC9xSBsCk7qq
7co1v6T4UhTn8ZOvz+gAVuIxl6cB7S+Cdwzyhof4euXgdQ1OQN2r0bKGqmdVfgh3
mk2cpzIb9kq3Og2focE/9CazTJr043tsckKLmEwPbjg9mDbTxR8MjmjEpIP5mKme
fgGcx41B6kF63SV9vYfeI0J51lizRI1Y2yCo1bimDzdCyoHRl9V/boocoggBs9Gk
0nyWyB8/qt+5JJE52WOdA4Z+Ow==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:25:19 2026 by rpki-client