$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: IDdpgHo75h7aRvudvNCuy1cHbuWHEU/bzMNFKg/nzEI= Subject key identifier: CD:A9:9C:3A:72:1A:86:33:B4:32:32:EE:F1:B4:8F:DC:D9:AE:E1:4E Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 0140 Signing time: Mon 27 Jul 2026 07:36:09 +0000 Manifest this update: Mon 27 Jul 2026 07:36:09 +0000 Manifest next update: Mon 03 Aug 2026 07:36:09 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: 6n9QMA2XTOL8gydz3Rcm631sTRbBEHlxful185uVBkk=) 2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=) 3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Jul 27 07:36:09 2026 GMT Not After : Aug 3 07:36:09 2026 GMT Subject: CN=6a670a69-b3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:0a:e8:d6:af:20:11:df:34:a7:38:a1:e9: 29:4a:a9:08:ad:42:72:0c:80:0f:42:64:6c:9e:e0: e1:56:f7:fd:50:9f:ba:68:a1:17:5f:db:56:44:09: 88:5d:fd:66:eb:6d:8d:39:3c:7c:a4:83:a4:8f:bf: 97:84:e3:df:2f:63:c9:7d:c5:5c:8b:70:bf:fd:89: 8a:dd:96:fb:a8:71:8a:26:d2:18:de:f2:85:65:2e: 00:2a:86:5d:7d:11:90:b5:cc:7b:28:f5:7e:6b:44: 4e:90:8a:74:17:e2:3b:a0:4c:b3:23:92:c7:37:72: 21:dd:26:3d:6d:92:a6:58:fa:74:9d:08:0c:b0:57: 41:fd:c5:29:eb:ea:ec:79:47:de:20:1a:7b:64:ae: f1:c4:c4:d6:6a:f9:ab:1d:4e:f4:2c:b9:f7:55:5a: 50:64:16:92:5f:c7:1b:ed:ee:ff:f7:b9:09:e3:66: 2b:c4:f6:5c:f9:3b:59:16:f9:aa:50:73:43:81:52: 17:cb:7f:30:13:41:f7:d6:54:f1:86:80:02:6b:86: eb:f7:98:36:0a:41:0d:40:ae:4b:0e:df:07:41:de: 22:c7:ed:1b:d2:14:06:7e:77:c4:6e:28:5a:72:37: e4:ac:ad:06:36:4b:8e:86:92:c5:8f:cb:6d:19:5c: 07:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:9C:3A:72:1A:86:33:B4:32:32:EE:F1:B4:8F:DC:D9:AE:E1:4E X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:28:cd:9b:ef:4c:26:bd:6b:ab:32:49:a6:cb:7d:a9:57:6a: 75:9f:5a:68:e5:c6:f8:9f:60:22:43:bd:8f:c8:cc:0d:34:c5: 2b:d2:39:71:a0:ce:c0:50:ed:59:81:d4:23:7f:f5:04:1d:67: 02:75:4f:ef:dc:25:b8:c3:06:d4:7b:88:4e:b4:0e:b0:c8:a1: c0:72:90:b6:7f:0e:ae:a6:b0:a9:ad:78:4a:10:c7:ee:52:2f: 09:e0:9e:aa:d1:9e:11:81:44:d0:d7:91:37:74:ea:ee:9d:8d: 39:b6:c7:6b:27:85:12:62:82:45:d1:02:46:e2:47:61:a9:5b: 17:49:b2:d7:96:e1:5e:06:35:15:5e:9d:c8:03:13:15:ff:6e: fa:c1:f4:cd:46:07:e5:d8:95:a3:81:6c:5d:05:d6:03:d8:6a: 17:dd:cc:18:d2:46:7e:9c:8e:7f:c1:03:cd:56:f3:54:b6:03: 88:b4:ca:70:64:5c:10:74:74:10:77:6f:2d:35:1f:98:8d:64: 81:20:74:18:f8:30:54:87:dc:9b:18:27:65:87:e6:da:84:60: 99:6d:8f:77:9a:8e:bf:85:16:c2:c0:42:ee:01:5b:7e:b3:87: 22:28:cd:d1:d1:95:ab:40:da:6c:c6:7d:4f:eb:89:21:09:58: 65:06:1c:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjYwNzI3MDczNjA5WhcNMjYwODAzMDczNjA5WjAYMRYwFAYD VQQDEw02YTY3MGE2OS1iM2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnpIK6NavIBHfNKc4oekpSqkIrUJyDIAPQmRsnuDhVvf9UJ+6aKEXX9tWRAmI Xf1m622NOTx8pIOkj7+XhOPfL2PJfcVci3C//YmK3Zb7qHGKJtIY3vKFZS4AKoZd fRGQtcx7KPV+a0ROkIp0F+I7oEyzI5LHN3Ih3SY9bZKmWPp0nQgMsFdB/cUp6+rs eUfeIBp7ZK7xxMTWavmrHU70LLn3VVpQZBaSX8cb7e7/97kJ42YrxPZc+TtZFvmq UHNDgVIXy38wE0H31lTxhoACa4br95g2CkENQK5LDt8HQd4ix+0b0hQGfnfEbiha cjfkrK0GNkuOhpLFj8ttGVwHywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2pnDpy GoYztDIy7vG0j9zZruFOMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYijNm+9MJr1rqzJJpst9qVdqdZ9aaOXG+J9gIkO9j8jMDTTFK9I5caDOwFDt WYHUI3/1BB1nAnVP79wluMMG1HuITrQOsMihwHKQtn8Orqawqa14ShDH7lIvCeCe qtGeEYFE0NeRN3Tq7p2NObbHayeFEmKCRdECRuJHYalbF0my15bhXgY1FV6dyAMT Ff9u+sH0zUYH5diVo4FsXQXWA9hqF93MGNJGfpyOf8EDzVbzVLYDiLTKcGRcEHR0 EHdvLTUfmI1kgSB0GPgwVIfcmxgnZYfm2oRgmW2Pd5qOv4UWwsBC7gFbfrOHIijN 0dGVq0DabMZ9T+uJIQlYZQYc7Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:34:50 2026 by rpki-client