$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: BXbnch1AJ8QR/mZ40t23WYHTrq0mkA5UJ+3KQx7UG3k= Subject key identifier: 8E:E7:C0:3F:CB:F9:31:2D:C7:42:A8:24:C1:98:E4:30:C0:E3:BD:C3 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 03F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 03D0 Signing time: Sun 05 Apr 2026 00:23:22 +0000 Manifest this update: Sun 05 Apr 2026 00:23:21 +0000 Manifest next update: Sun 12 Apr 2026 00:23:21 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: s7LKjmbZ0KSQ5/fak7TtM+wli3lCsbyKZllCR6JZ9l0=) 2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: N0TjFJkvf+ed3++3uS+fobOsE9yA9suGjNRtYv3RVww=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: x8bKQKIGGYpVJdPt4d/VDGjCgjjQWty2TiceRTQ2uc8=) 4: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: tJBweslwmTaqQ0Ia890DY6u4RFfwxNggcx6jj5pPmS0=) 5: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: 9XpDqx6Xcy610EWPbcuBIhNi9mO9u1+/rkKxHtaBMFk=) 6: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: JemyuaQDjHeY1di2zgfRaozPBBp6AKJDwCiNDrOXXtY=) 7: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: nPZgAe3RYdNQbfwZCXPjsbX0zEiQsaa52eoyPnZdEgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1011 (0x3f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Apr 5 00:23:21 2026 GMT Not After : Apr 12 00:23:21 2026 GMT Subject: CN=69d1ab7a-4f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:fb:29:ad:f4:d5:6c:95:6c:96:53:fb:84: e0:34:1b:1d:5c:f4:be:3a:5e:2d:bf:ff:c0:ef:65: 7a:b1:03:dd:be:ee:74:9e:62:92:15:86:50:87:76: 27:c7:27:1e:fb:f3:85:45:09:fc:60:0e:2a:ba:07: ac:3e:96:05:56:5c:b2:7b:dc:93:f2:dd:51:e6:c9: 21:88:15:a5:e1:16:a7:03:4f:66:8b:89:bb:b3:e8: 5c:5d:23:4a:09:28:a8:03:34:8a:a1:83:2c:b4:1a: e9:84:51:1a:28:6e:0f:db:35:f1:dd:17:e8:c5:f5: f5:92:e8:61:da:5f:dc:4e:e8:ea:4f:68:cd:4f:01: 06:5f:9f:3b:a4:18:cd:d7:ae:46:64:b0:17:de:d1: 49:df:2d:80:36:fa:ad:53:bf:58:95:87:48:a4:ac: 82:d6:87:c5:1d:4f:06:91:4f:0b:60:36:0f:b0:c1: 86:dd:55:8b:4e:bb:c4:e2:8a:f4:0f:8d:1f:cc:b2: bf:c8:93:ab:14:4d:b0:44:4a:23:d9:09:05:b8:8e: 70:12:32:30:b7:3b:63:32:20:14:c5:ce:01:cf:dd: 3f:b5:03:52:b2:4f:af:e0:5d:4f:cf:5d:a5:ea:2e: b3:9c:f7:46:fd:cd:33:62:01:ef:31:cd:dd:b4:95: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:C0:3F:CB:F9:31:2D:C7:42:A8:24:C1:98:E4:30:C0:E3:BD:C3 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b9:9f:98:67:99:93:49:ce:f2:32:ce:ff:af:26:80:c4:e2: 31:dc:0b:6a:be:4f:5e:46:71:25:8e:8c:40:01:33:d0:f1:bb: 29:f1:8e:92:79:58:37:f2:8e:cd:b8:70:02:5e:85:76:a6:e2: 83:ed:08:ad:c9:6b:64:5d:c6:e8:e1:8c:d6:ac:ee:c6:8b:d0: 56:f1:34:ad:31:36:9d:b3:e0:6d:65:6b:1b:e0:a2:e7:0a:61: b8:0d:a0:27:7d:1f:ef:ce:be:1a:61:0e:93:50:2e:ef:d5:45: 8c:ac:80:50:ed:fc:ad:7c:7c:18:c7:1e:74:64:13:a3:06:83: 52:de:e0:76:c8:3d:81:51:6f:af:9e:84:34:3f:e2:e7:bb:33: ec:ee:9c:54:58:2e:8b:0f:a4:f2:fd:3f:04:e4:a2:d0:ff:37: 42:90:ac:98:22:32:34:ea:b0:8e:61:f8:e0:fe:c7:03:3f:b1: a7:22:b1:c7:13:a6:5b:de:b0:2b:a9:59:a2:2e:22:32:46:92: d5:82:12:e3:dc:a4:04:28:6d:a5:ec:b3:e3:4f:0d:84:f8:d8: e5:8f:a7:82:a3:93:56:84:fc:34:b6:36:5e:fb:4d:35:41:e1: b2:d0:82:40:2b:ca:ae:b9:fe:a7:c1:80:9c:e4:2b:3d:f2:4f: 51:b1:ec:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjYwNDA1MDAyMzIxWhcNMjYwNDEyMDAyMzIxWjAYMRYwFAYD VQQDEw02OWQxYWI3YS00ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTv7Ka301WyVbJZT+4TgNBsdXPS+Ol4tv//A72V6sQPdvu50nmKSFYZQh3Yn xyce+/OFRQn8YA4qugesPpYFVlyye9yT8t1R5skhiBWl4RanA09mi4m7s+hcXSNK CSioAzSKoYMstBrphFEaKG4P2zXx3RfoxfX1kuhh2l/cTujqT2jNTwEGX587pBjN 165GZLAX3tFJ3y2ANvqtU79YlYdIpKyC1ofFHU8GkU8LYDYPsMGG3VWLTrvE4or0 D40fzLK/yJOrFE2wREoj2QkFuI5wEjIwtztjMiAUxc4Bz90/tQNSsk+v4F1Pz12l 6i6znPdG/c0zYgHvMc3dtJWIewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7nwD/L +TEtx0KoJMGY5DDA473DMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAibmfmGeZk0nO8jLO/68mgMTiMdwLar5PXkZxJY6MQAEz0PG7KfGOknlYN/KO zbhwAl6Fdqbig+0IrclrZF3G6OGM1qzuxovQVvE0rTE2nbPgbWVrG+Ci5wphuA2g J30f786+GmEOk1Au79VFjKyAUO38rXx8GMcedGQTowaDUt7gdsg9gVFvr56END/i 57sz7O6cVFguiw+k8v0/BOSi0P83QpCsmCIyNOqwjmH44P7HAz+xpyKxxxOmW96w K6lZoi4iMkaS1YIS49ykBChtpeyz408NhPjY5Y+ngqOTVoT8NLY2XvtNNUHhstCC QCvKrrn+p8GAnOQrPfJPUbHsCQ== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:24 2026 by rpki-client