$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: /xJ9ZP/OiFajIZgnHUYDiwUwG1NQIQ6w9WfuDI1N6cc= Subject key identifier: 78:EE:E2:8F:2E:B5:D5:24:9A:74:CD:23:24:0B:14:17:BD:70:46:AC Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 041B Signing time: Thu 27 Aug 2026 00:08:56 +0000 Manifest this update: Thu 27 Aug 2026 00:08:55 +0000 Manifest next update: Thu 03 Sep 2026 00:08:55 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: AMvjaJigMeEhlJLb2oETD7Q3uo988/8Ll40swu/JlX8=) 2: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=) 3: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=) 4: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=) 5: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=) 6: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=) 7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 00:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1092 (0x444) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Aug 27 00:08:55 2026 GMT Not After : Sep 3 00:08:55 2026 GMT Subject: CN=6a8f8018-918a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fa:32:72:90:94:40:c7:f9:c5:f9:6f:4a:10: ce:ac:8b:43:6f:f1:66:6d:e7:43:0d:82:99:39:d4: b0:ec:d0:a6:50:aa:6d:8a:37:2c:e0:83:b3:04:45: 2b:d9:ae:2b:20:ae:6f:26:3f:54:fe:40:ea:3b:f7: f8:0c:27:0b:0a:fc:de:00:41:2d:cd:73:3b:d6:92: b1:64:a3:b6:0b:36:09:9b:c2:5c:9f:3b:42:9a:9e: 31:bb:fe:3b:a7:d3:a3:81:2d:54:9a:10:4a:63:3e: 6e:37:3d:61:d6:4e:e2:52:8f:4c:b5:a1:7e:25:35: f6:9c:f6:d5:0c:9b:f6:ea:b5:08:29:46:56:a7:1a: 98:d7:50:26:15:bc:dc:4a:1f:94:99:28:10:06:3b: 32:f0:5a:5e:4e:d4:63:1c:60:88:30:ed:c0:72:66: 84:21:67:43:e4:e3:8d:75:af:0f:ed:10:59:22:4d: c0:79:9a:40:17:8c:4d:6f:cc:44:1e:ec:cd:03:88: 82:ac:e8:51:f5:35:dd:bd:b0:1e:57:1b:a2:8c:b3: f2:cd:bf:9b:1e:f8:5d:dd:bd:21:29:c8:02:3a:0b: 19:3d:3a:ad:1f:23:8a:b5:90:74:00:2a:b9:ab:d0: 0a:69:e5:2f:63:8f:68:8c:72:41:52:8d:85:d2:cb: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EE:E2:8F:2E:B5:D5:24:9A:74:CD:23:24:0B:14:17:BD:70:46:AC X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:29:01:ce:c4:a8:49:5d:d9:aa:ba:2b:e6:22:c3:3f:db:33: ed:28:a4:77:3c:31:84:01:be:73:26:76:af:0e:84:37:42:a7: 7d:34:f0:be:71:f5:a4:fa:0f:51:27:e5:e4:9d:60:ec:d9:14: 83:a9:36:74:aa:d4:58:6b:e5:25:5e:5d:1e:81:e4:a0:c1:38: a6:60:01:c7:a2:e6:ec:2e:cf:e8:16:50:9a:ca:ff:6c:42:8a: 00:53:8f:83:33:43:41:88:b6:eb:a1:18:c9:90:23:d8:95:09: 12:f6:5d:b8:cb:68:ad:5d:3f:c4:5b:65:2b:b9:64:27:c9:23: fe:df:5e:f5:5a:1d:e5:d6:50:ce:45:8d:b0:50:39:e7:ea:d9: 34:dc:a2:ce:d4:60:20:1f:47:7b:1a:08:ee:fb:fc:02:bd:4d: 84:fc:65:0b:c9:e2:22:ce:f3:2d:ea:cc:e0:01:60:bf:30:e9: 29:d0:ad:2c:b4:75:e0:db:f3:9d:a2:34:9e:8a:2b:89:04:16: 10:e3:70:a0:9a:bb:92:2c:bb:c1:26:9c:67:a4:8a:ca:eb:1a: cd:0d:84:a5:50:30:e7:94:7d:11:c2:72:ad:74:0c:df:8a:e4: 96:a9:7e:a8:13:7f:1b:4d:40:c4:31:ca:aa:a1:13:a1:d4:af: 67:a2:50:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjYwODI3MDAwODU1WhcNMjYwOTAzMDAwODU1WjAYMRYwFAYD VQQDEw02YThmODAxOC05MThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2foycpCUQMf5xflvShDOrItDb/FmbedDDYKZOdSw7NCmUKptijcs4IOzBEUr 2a4rIK5vJj9U/kDqO/f4DCcLCvzeAEEtzXM71pKxZKO2CzYJm8JcnztCmp4xu/47 p9OjgS1UmhBKYz5uNz1h1k7iUo9MtaF+JTX2nPbVDJv26rUIKUZWpxqY11AmFbzc Sh+UmSgQBjsy8FpeTtRjHGCIMO3AcmaEIWdD5OONda8P7RBZIk3AeZpAF4xNb8xE HuzNA4iCrOhR9TXdvbAeVxuijLPyzb+bHvhd3b0hKcgCOgsZPTqtHyOKtZB0ACq5 q9AKaeUvY49ojHJBUo2F0ssbYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHju4o8u tdUkmnTNIyQLFBe9cEasMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARykBzsSoSV3Zqror5iLDP9sz7SikdzwxhAG+cyZ2rw6EN0KnfTTwvnH1pPoP USfl5J1g7NkUg6k2dKrUWGvlJV5dHoHkoME4pmABx6Lm7C7P6BZQmsr/bEKKAFOP gzNDQYi266EYyZAj2JUJEvZduMtorV0/xFtlK7lkJ8kj/t9e9Vod5dZQzkWNsFA5 5+rZNNyiztRgIB9HexoI7vv8Ar1NhPxlC8niIs7zLerM4AFgvzDpKdCtLLR14Nvz naI0nooriQQWEONwoJq7kiy7wSacZ6SKyusazQ2EpVAw55R9EcJyrXQM34rklql+ qBN/G01AxDHKqqETodSvZ6JQHg== -----END CERTIFICATE-----Generated at Thu Aug 27 06:22:18 2026 by rpki-client