
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: 3rfhXhVpPRMNwUtY6xBVedSa9MZ502zsYaklLxjcqUI=
Subject key identifier: ED:96:B5:DC:4B:96:CF:5E:01:21:7E:FF:FD:C8:A9:B6:93:F7:79:56
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: F7
Signing time: Tue 03 Mar 2026 06:04:41 +0000
Manifest this update: Tue 03 Mar 2026 06:04:41 +0000
Manifest next update: Tue 10 Mar 2026 06:04:41 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: L2Vf2KEd2SA9WHD/zsXCyPKO1c3FK/PJ1CTOAOAgRpw=)
2: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
3: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 06:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Mar 3 06:04:41 2026 GMT
Not After : Mar 10 06:04:41 2026 GMT
Subject: CN=69a679f9-9d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:5f:af:22:22:da:47:36:dd:b5:96:8b:b4:
3d:15:b1:e5:cd:45:96:29:8c:bc:7b:bd:b4:00:6c:
de:e7:da:2b:89:f9:dc:83:4c:dc:4b:b3:c6:d5:7f:
ff:8e:cd:19:f8:66:6c:5b:5b:31:5b:a2:8d:9c:e9:
7f:a5:30:ba:70:97:8d:73:6a:f6:25:77:7b:e8:44:
f7:04:31:87:89:27:cf:93:e8:2b:aa:7b:6f:c5:94:
54:9b:bc:71:d3:ba:bb:8d:94:41:17:3b:9b:ad:cd:
c6:72:34:fe:a7:05:3b:4d:39:fa:da:51:a3:80:cd:
5d:86:78:98:80:61:25:22:45:a2:b8:15:67:30:73:
ff:10:c4:c0:1e:8a:f4:ff:ea:aa:02:7f:0e:5f:fc:
07:88:20:91:5c:f2:fe:4e:0e:2a:d0:b2:e6:de:03:
10:9d:08:ab:63:af:98:fb:e0:40:da:26:f2:66:01:
e3:b2:b6:92:9f:6e:88:32:01:4c:5d:8c:52:69:b0:
42:c5:d9:dd:0a:41:23:64:e9:3e:58:a1:dc:22:8e:
e1:02:fa:4e:ac:fd:34:70:64:8c:4a:b5:37:39:27:
c5:f4:04:b9:a0:c3:1c:73:0a:22:8c:6b:31:de:2c:
25:b4:37:e8:fb:16:dd:d7:2b:ea:3e:b4:df:63:6a:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:B5:DC:4B:96:CF:5E:01:21:7E:FF:FD:C8:A9:B6:93:F7:79:56
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:42:b1:26:6d:b9:be:57:cc:15:d8:cb:1f:01:59:c3:56:df:
78:0c:45:60:a4:b7:a2:4c:01:cf:01:ce:a6:8a:0d:7c:f2:22:
ec:a8:d5:d7:52:36:aa:d8:f9:f8:a3:cc:a3:66:06:9f:ec:29:
31:d6:bd:c7:2a:20:88:18:a5:2c:5d:f7:26:07:ec:79:b1:00:
3c:ce:04:2a:2f:20:e3:8d:55:70:27:5c:19:d7:f9:90:64:4d:
e4:7c:41:18:5e:65:fd:4a:45:b1:56:64:f2:83:d3:45:2a:be:
93:0a:80:b4:23:7b:d7:f8:fe:c3:fb:79:3d:d5:fc:40:ee:c3:
25:e4:33:ed:ea:1c:71:76:69:8d:a5:f6:0e:38:3b:d0:cb:28:
a6:55:b2:43:89:71:b4:61:0d:02:12:df:96:bb:a8:ba:67:44:
b9:24:02:61:91:d0:68:45:e1:9d:25:b6:a6:90:d3:2b:a2:33:
cc:22:fb:84:70:65:fe:b1:df:ec:6f:07:6a:f8:5e:46:33:5b:
98:00:c8:c7:ca:ac:6a:dc:99:c3:8d:13:24:bb:20:10:92:f6:
e7:fd:fc:71:d4:f6:39:c3:e9:1e:c2:2f:56:78:5a:7b:0f:7e:
b6:37:ab:6f:ce:06:5c:f1:c5:07:10:b8:fb:7f:2c:de:03:c1:
ca:b2:a1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:28:30 2026 by rpki-client