
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: SVYYuRNzIX67jWiMDu7YfAyxSsqgE6ucUFfaCpYf3L0=
Subject key identifier: 75:0A:C3:34:55:24:54:80:AF:00:15:93:5A:C3:ED:97:B0:CD:8B:5A
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 0107
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: F6
Signing time: Sun 01 Mar 2026 23:49:11 +0000
Manifest this update: Sun 01 Mar 2026 23:49:09 +0000
Manifest next update: Sun 08 Mar 2026 23:49:09 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: AdKPwVqQLsqP98hnz2fjzjqU31iMhpbMUqNQFGOYwuU=)
2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Mar 1 23:49:09 2026 GMT
Not After : Mar 8 23:49:09 2026 GMT
Subject: CN=69a4d077-fcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:57:76:25:19:a3:57:c9:65:7d:dd:0d:eb:
27:45:4c:a3:68:d9:7d:11:3f:c3:14:ea:12:2d:9a:
aa:9a:5e:e3:22:21:d5:2a:84:b4:9d:df:52:e3:f6:
bf:d8:6e:8f:de:57:d1:87:c0:2a:7d:ed:47:08:b3:
0d:5f:9f:a1:8f:77:9a:cc:79:9d:11:7a:03:2f:e5:
c8:7c:80:af:d5:90:ff:04:60:c4:93:2b:2d:6b:cd:
fd:de:99:6b:a2:6e:38:3c:c3:1a:1f:71:fc:13:76:
91:73:de:72:15:62:a4:66:b2:b4:8b:4b:d4:ec:b0:
47:a0:77:9f:fa:ba:ef:2d:f5:f2:b8:4d:3d:10:6f:
44:4a:a9:cc:13:b4:fd:89:28:2d:12:58:b0:a4:40:
19:a4:68:12:1d:25:c2:1f:0a:49:8a:66:fd:5e:f5:
75:c3:f4:21:91:7c:a2:c4:97:95:aa:64:5a:67:2d:
71:9e:23:a6:7c:72:35:2d:89:80:14:6d:83:52:0b:
2c:4c:10:7e:91:bf:61:81:ad:14:04:2c:45:e3:f6:
57:a4:37:18:20:52:39:a0:b8:33:31:20:29:98:f5:
fe:4c:93:63:12:35:07:a8:6c:c2:aa:b0:ae:83:d7:
bf:8d:fa:64:17:a3:98:11:84:ac:c8:0b:d0:b1:0a:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:C3:34:55:24:54:80:AF:00:15:93:5A:C3:ED:97:B0:CD:8B:5A
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0d:fd:41:51:4a:18:5c:29:d1:73:b5:bd:28:cc:e5:56:27:
41:28:ec:86:45:68:81:32:77:06:92:24:7a:54:65:53:b2:38:
3b:74:06:3e:a1:e9:80:86:07:70:07:8b:96:8e:7d:3c:a0:23:
64:58:00:8f:4e:be:09:a4:23:5c:dd:32:c2:2f:32:7e:73:28:
e5:f2:68:d0:ba:87:21:12:52:76:ae:9d:72:52:23:60:ed:7c:
62:25:4f:e7:b2:1e:3a:9a:ff:c8:d6:f1:58:fe:1a:10:18:eb:
2b:31:eb:36:c0:29:85:d5:b3:5a:de:3f:90:53:d0:e2:b0:9f:
2c:d9:ef:ea:6f:a6:f5:40:cf:d7:7e:3e:27:7d:87:87:ce:7a:
e3:cd:d4:2e:cb:3d:10:c8:d2:80:a0:79:ec:38:a1:1b:bf:67:
76:b7:3f:05:33:19:96:e6:9e:94:90:09:8b:c3:d4:31:cc:f4:
f8:58:df:2b:bb:a6:9c:1b:44:09:53:11:80:95:f9:50:d8:bc:
f0:54:47:df:7a:22:8f:ed:4f:ad:b6:1f:fe:ee:e8:f6:b5:00:
15:26:0b:17:c6:52:54:16:3a:27:af:75:79:d5:d9:e8:eb:c5:
02:2f:2f:3d:1b:2f:46:6e:37:d7:9b:41:96:ad:08:8e:ef:74:
aa:40:f8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:18 2026 by rpki-client