
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: 4DfYfN+BdZzNdDngiyMKEcEZruG5dkJ82SA/lC3el8M=
Subject key identifier: 08:AF:3F:E3:BA:CE:15:6F:C5:A5:35:C7:96:E6:51:1C:10:DC:C5:7F
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 013B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: 012A
Signing time: Sat 13 Jun 2026 05:59:04 +0000
Manifest this update: Sat 13 Jun 2026 05:59:03 +0000
Manifest next update: Sat 20 Jun 2026 05:59:03 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: Mir4R0u2Ko+DdIHVPp4MEhNcK98FSyZsAOB5T4NjTOc=)
2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 05:59:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 315 (0x13b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Jun 13 05:59:03 2026 GMT
Not After : Jun 20 05:59:03 2026 GMT
Subject: CN=6a2cf1a8-4ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:79:03:cc:d4:2f:1c:4e:37:25:46:3f:36:
6e:68:d6:3d:e9:04:70:78:db:e4:70:d4:61:b7:49:
1d:a6:85:91:4c:b7:30:36:e6:85:23:37:3c:28:cd:
f5:20:bf:c8:7f:c5:be:6d:82:eb:5e:82:48:8f:85:
ea:3d:42:82:f4:cb:b9:9b:da:4b:85:e1:ed:09:70:
36:8c:30:29:f3:a1:f9:2e:3e:47:ff:22:71:c2:37:
af:2b:03:40:ef:63:dc:a6:5c:ee:9a:49:9f:ea:78:
11:13:13:91:11:af:54:0d:3b:90:1d:82:74:d2:db:
81:2d:66:90:8f:f1:39:76:a2:21:7c:28:ec:84:49:
aa:d3:4c:9c:e4:35:17:25:f9:0a:f8:24:1c:46:d3:
90:30:31:44:b8:aa:77:6d:8c:d1:47:0e:e3:ec:6c:
d7:f0:2f:28:6c:b8:d3:61:57:57:08:c9:bf:72:38:
72:76:d1:7b:de:c4:e3:9d:73:a0:8d:de:90:3a:fa:
33:a9:c0:b0:aa:9f:9a:c1:e0:49:3c:66:0f:12:a7:
b5:e2:b0:da:fc:db:00:ce:5a:81:0c:c4:ec:c4:d0:
f0:4d:54:4f:62:04:92:aa:05:95:3b:3a:dd:9d:d5:
6d:1e:60:b1:e2:53:9c:02:ac:ca:dc:9c:1c:17:38:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:3F:E3:BA:CE:15:6F:C5:A5:35:C7:96:E6:51:1C:10:DC:C5:7F
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:d3:69:0f:12:2a:e4:cc:91:15:4a:a1:b2:b6:ef:0d:6d:
5a:43:6b:19:a1:bb:d1:0f:7a:3e:34:b3:47:56:34:e5:91:4a:
e5:1a:59:76:ae:19:09:25:5f:e4:f4:e0:84:5a:4e:23:10:a3:
b5:b0:e3:a5:cf:2d:7b:7a:1f:8e:77:c2:57:2c:7a:22:4e:20:
8b:a4:4d:42:c6:e8:88:2a:2a:94:4d:a4:e6:87:26:67:3a:30:
4e:f8:18:79:94:94:2f:6a:d5:5b:e5:07:33:0a:96:c4:32:92:
1c:50:cd:31:c0:1b:65:81:d8:ff:45:94:57:a9:ae:95:94:85:
71:07:f1:7e:33:57:01:3e:a9:b1:d2:90:36:4e:5f:ee:97:55:
40:6c:c3:eb:5a:a2:af:76:68:54:4b:71:4c:a9:b4:36:27:b0:
95:ad:38:b7:a9:4d:ca:24:e0:2d:ab:57:53:68:40:75:40:df:
2d:20:49:49:13:15:86:1e:b6:45:7c:00:f9:13:85:af:52:d6:
87:61:5e:60:91:57:3b:05:a6:a9:9c:d3:ac:36:ac:62:67:88:
2b:c7:99:ed:af:14:d5:2e:8a:23:38:97:b3:95:1e:30:dd:3c:
7c:8c:17:ca:28:e8:32:9e:4b:83:bb:d7:5b:d6:4f:42:98:aa:
40:d2:d7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:37:22 2026 by rpki-client