$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: mW8McEAJ5+tIWAzeXDZVwWhOZKT5YhmotJnY3eMTLsY= Subject key identifier: AF:2C:FF:A8:9A:EB:4F:1B:5B:0B:7B:DF:1D:9B:B4:02:22:B5:16:6A Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 0412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 03E9 Signing time: Thu 21 May 2026 00:38:11 +0000 Manifest this update: Thu 21 May 2026 00:38:11 +0000 Manifest next update: Thu 28 May 2026 00:38:11 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: 2jQ5ina/ufAevTqoRwphmQJOxpBm6iJ6Wx71SZ/4ul4=) 2: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=) 3: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=) 4: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=) 5: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=) 6: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=) 7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 00:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1042 (0x412) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: May 21 00:38:11 2026 GMT Not After : May 28 00:38:11 2026 GMT Subject: CN=6a0e53f3-5cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:45:1b:52:41:24:2b:4f:49:9f:8e:df:ee: 7f:81:76:ff:d2:2f:f4:d4:15:c6:c3:75:b4:be:3f: d6:96:fa:37:5a:8c:2b:37:04:32:5c:87:cb:c8:3d: a6:b9:c2:f9:bf:35:13:c6:60:8e:91:9d:82:08:f0: bb:80:24:e4:77:af:75:be:aa:16:0b:03:7e:d1:66: dc:38:66:9b:bc:26:92:ac:8f:44:04:a0:6d:af:6b: dd:51:4c:2d:09:5c:93:ad:1d:20:b4:8f:82:b4:18: 84:5f:dc:b3:73:b8:23:fd:43:8b:d5:c0:c4:bd:21: 19:cc:41:c7:cf:a1:bd:1f:17:4f:9d:1d:50:ae:14: 5e:13:03:3d:cb:d7:6c:6e:92:c3:1d:c7:4f:61:31: b7:5c:b9:46:4e:3d:2d:73:67:80:e6:a8:33:fb:51: 97:3c:69:90:32:06:75:54:63:6d:7b:1f:f1:46:e2: 0f:82:46:a8:b3:4e:95:25:38:6a:b4:56:97:69:c0: 9e:fa:f2:81:32:a7:9c:26:fb:8a:c5:6b:99:67:ee: 04:a5:af:9b:79:e8:93:22:28:37:57:81:6e:b5:30: 28:62:dc:60:1c:31:56:fc:57:00:f7:8f:f2:f2:a6: 1c:b5:56:51:6e:f5:c1:a9:36:ea:45:5c:95:68:d7: 59:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2C:FF:A8:9A:EB:4F:1B:5B:0B:7B:DF:1D:9B:B4:02:22:B5:16:6A X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:c4:3d:27:3f:0b:bd:1a:ad:02:8e:a7:b3:60:40:cd:ba:76: 7f:77:53:dd:81:69:ef:b4:03:f1:ed:c9:70:76:b6:93:d4:02: ee:d3:f8:1d:a5:03:cd:b3:67:8b:31:5a:61:1a:63:25:7d:7a: cc:41:cf:45:e0:29:f9:3b:79:a6:cb:fc:e9:e2:c5:b1:f3:a8: 1e:bb:8e:49:7d:dc:eb:b7:e5:43:fd:a3:31:e2:e7:3b:aa:8d: 0c:fe:04:ee:8a:3b:7b:fa:4e:3d:67:f8:e9:da:81:25:d6:70: 24:56:eb:6a:45:80:82:d1:c3:45:aa:8e:28:f9:6b:01:41:28: f5:1c:0b:0a:9e:84:fa:52:26:49:ed:53:9f:e1:bb:1e:da:c1: fc:b9:25:cd:a4:db:ec:50:06:dc:b1:5a:8c:88:67:21:ce:1d: 22:bd:07:fa:63:da:a5:81:f5:d9:96:37:78:c1:5c:56:3c:b7: ec:02:63:9e:90:6b:18:4b:ad:2a:a2:40:ae:b9:5d:22:82:cd: 84:a1:b1:fb:91:41:76:ab:dc:1d:ff:0d:10:95:03:c7:50:b9: 83:70:4f:49:b9:21:7f:c8:24:b8:3c:26:25:5b:3b:7e:fd:6b: 49:37:5d:76:62:c5:a9:e3:e4:64:92:6d:3c:de:ce:ef:74:bd: 27:24:9f:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjYwNTIxMDAzODExWhcNMjYwNTI4MDAzODExWjAYMRYwFAYD VQQDEw02YTBlNTNmMy01Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFdFG1JBJCtPSZ+O3+5/gXb/0i/01BXGw3W0vj/Wlvo3WowrNwQyXIfLyD2m ucL5vzUTxmCOkZ2CCPC7gCTkd691vqoWCwN+0WbcOGabvCaSrI9EBKBtr2vdUUwt CVyTrR0gtI+CtBiEX9yzc7gj/UOL1cDEvSEZzEHHz6G9HxdPnR1QrhReEwM9y9ds bpLDHcdPYTG3XLlGTj0tc2eA5qgz+1GXPGmQMgZ1VGNtex/xRuIPgkaos06VJThq tFaXacCe+vKBMqecJvuKxWuZZ+4Epa+beeiTIig3V4FutTAoYtxgHDFW/FcA94/y 8qYctVZRbvXBqTbqRVyVaNdZ7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8s/6ia 608bWwt73x2btAIitRZqMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2sQ9Jz8LvRqtAo6ns2BAzbp2f3dT3YFp77QD8e3JcHa2k9QC7tP4HaUDzbNn izFaYRpjJX16zEHPReAp+Tt5psv86eLFsfOoHruOSX3c67flQ/2jMeLnO6qNDP4E 7oo7e/pOPWf46dqBJdZwJFbrakWAgtHDRaqOKPlrAUEo9RwLCp6E+lImSe1Tn+G7 HtrB/LklzaTb7FAG3LFajIhnIc4dIr0H+mPapYH12ZY3eMFcVjy37AJjnpBrGEut KqJArrldIoLNhKGx+5FBdqvcHf8NEJUDx1C5g3BPSbkhf8gkuDwmJVs7fv1rSTdd dmLFqePkZJJtPN7O73S9JySfBw== -----END CERTIFICATE-----Generated at Thu May 21 12:49:27 2026 by rpki-client