$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: AZsl8DkOrOAua9wywxrJ9ybQYNyvTEzwyElWDrVHGPA= Subject key identifier: F9:E5:CA:E1:EC:DE:A2:E8:82:41:3F:4E:CB:5D:9B:ED:26:20:7F:4D Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 015E Signing time: Wed 23 Sep 2026 05:06:29 +0000 Manifest this update: Wed 23 Sep 2026 05:06:29 +0000 Manifest next update: Wed 30 Sep 2026 05:06:29 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: 1o3+cQ4jnD+cZZLKSnP/k4WzDjqOcxGyOUzota3uMkk=) 2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=) 3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Sep 23 05:06:29 2026 GMT Not After : Sep 30 05:06:29 2026 GMT Subject: CN=6ab35e55-204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:d1:49:fc:f9:2a:d0:52:c7:d5:be:1f:27: d3:eb:c9:86:5f:db:c5:44:06:19:71:5f:6a:6a:64: aa:96:3a:2a:3a:5b:ff:bb:da:00:04:3c:a8:fd:f4: 5f:e8:75:e7:eb:b4:78:70:78:92:26:90:5d:3f:f2: 22:76:5b:28:22:d8:18:e1:20:35:75:af:1d:8e:41: db:f3:f4:4c:78:ca:3d:75:7f:79:68:cc:08:d3:4a: a1:f1:08:f8:dd:73:bb:c3:59:d7:df:07:21:31:9b: 3c:cb:59:e0:ef:ec:c0:54:ed:f3:7c:a0:7c:3a:b5: 22:56:7f:4e:c7:48:36:4a:dc:c8:20:e2:5b:5c:40: d3:c8:6c:7e:59:0b:a1:c1:34:3a:0f:fb:4c:1f:be: 07:37:7c:c9:f7:f3:78:f3:6c:8b:31:5b:ec:3a:d3: e4:99:73:06:e4:22:b1:50:cc:d5:67:ca:b0:58:51: 56:b9:b9:89:d5:91:ac:18:ee:5d:39:fa:a1:51:5e: ed:1e:63:83:20:88:3e:9b:c6:07:10:02:d7:35:e1: 57:13:b9:97:e3:09:ab:f9:12:6b:1b:5f:61:00:df: 9f:8e:0c:0b:56:4b:ce:80:c1:1e:37:2e:93:c2:c6: db:73:77:08:4e:dc:d3:6d:72:99:c0:21:2b:f9:a8: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E5:CA:E1:EC:DE:A2:E8:82:41:3F:4E:CB:5D:9B:ED:26:20:7F:4D X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:33:75:bd:f3:62:8e:23:5e:3b:d2:9b:2d:17:db:c6:e6:5c: 5c:9a:d8:f4:50:ef:30:b6:a2:18:08:e4:30:97:cc:5e:0a:ba: e5:b0:86:e5:e2:6d:7e:f7:67:70:ac:43:31:3c:cc:44:01:86: 5b:75:2a:39:eb:f2:1f:2f:32:e5:47:6b:4c:ee:31:fe:cf:1b: 11:b3:0a:8d:22:93:d0:2d:44:71:2a:c0:6a:80:52:7a:cc:73: f4:d4:03:47:ed:c6:ca:a6:aa:59:67:0a:c7:f7:a1:b0:84:e9: b8:32:a9:4f:bf:58:35:f9:e3:01:26:63:46:0f:16:91:24:bc: 8a:30:d7:a9:fd:c9:74:e6:08:73:7f:52:7a:ef:66:ec:b9:0b: c7:c8:52:8d:88:f8:07:33:04:cb:95:d7:4c:ea:72:2f:7c:83: 28:58:40:b1:2c:22:31:ea:a5:49:01:42:8c:4a:bf:3d:53:f7: 2a:57:0e:74:59:a7:9b:23:80:c2:f4:89:cc:57:45:dd:0b:35: 9a:db:b1:df:22:37:0f:56:60:4d:85:69:e1:bc:5d:9f:cf:c3: 3a:07:6e:64:11:bf:40:5d:79:55:13:6c:7c:c8:ac:a9:55:2b: e5:31:15:28:e9:e9:cc:8b:d8:0b:f9:4e:4d:bc:c7:b3:aa:a3: e7:3c:c4:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjYwOTIzMDUwNjI5WhcNMjYwOTMwMDUwNjI5WjAYMRYwFAYD VQQDEw02YWIzNWU1NS0yMDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLjRSfz5KtBSx9W+HyfT68mGX9vFRAYZcV9qamSqljoqOlv/u9oABDyo/fRf 6HXn67R4cHiSJpBdP/IidlsoItgY4SA1da8djkHb8/RMeMo9dX95aMwI00qh8Qj4 3XO7w1nX3wchMZs8y1ng7+zAVO3zfKB8OrUiVn9Ox0g2StzIIOJbXEDTyGx+WQuh wTQ6D/tMH74HN3zJ9/N482yLMVvsOtPkmXMG5CKxUMzVZ8qwWFFWubmJ1ZGsGO5d OfqhUV7tHmODIIg+m8YHEALXNeFXE7mX4wmr+RJrG19hAN+fjgwLVkvOgMEeNy6T wsbbc3cITtzTbXKZwCEr+aiqgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPnlyuHs 3qLogkE/Tstdm+0mIH9NMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTN1vfNijiNeO9KbLRfbxuZcXJrY9FDvMLaiGAjkMJfMXgq65bCG5eJtfvdn cKxDMTzMRAGGW3UqOevyHy8y5UdrTO4x/s8bEbMKjSKT0C1EcSrAaoBSesxz9NQD R+3GyqaqWWcKx/ehsITpuDKpT79YNfnjASZjRg8WkSS8ijDXqf3JdOYIc39Seu9m 7LkLx8hSjYj4BzMEy5XXTOpyL3yDKFhAsSwiMeqlSQFCjEq/PVP3KlcOdFmnmyOA wvSJzFdF3Qs1mtux3yI3D1ZgTYVp4bxdn8/DOgduZBG/QF15VRNsfMisqVUr5TEV KOnpzIvYC/lOTbzHs6qj5zzEkQ== -----END CERTIFICATE-----Generated at Wed Sep 23 21:42:32 2026 by rpki-client