
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: nx5k/p08M9uoAfs2bdHix7bAZEh+0VUpxsUuUU9Xdp0=
Subject key identifier: 6E:BC:11:AA:A3:C5:87:8B:86:DD:8B:D2:3C:5D:81:D8:01:80:B3:BE
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 03F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 03D6
Signing time: Fri 17 Apr 2026 00:30:11 +0000
Manifest this update: Fri 17 Apr 2026 00:30:10 +0000
Manifest next update: Fri 24 Apr 2026 00:30:10 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: PmxYZCQ90B4NnN61UcIsrRxhuvnC4QGWgE/YCpKz+IY=)
2: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: x8bKQKIGGYpVJdPt4d/VDGjCgjjQWty2TiceRTQ2uc8=)
3: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: JemyuaQDjHeY1di2zgfRaozPBBp6AKJDwCiNDrOXXtY=)
4: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: N0TjFJkvf+ed3++3uS+fobOsE9yA9suGjNRtYv3RVww=)
5: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: tJBweslwmTaqQ0Ia890DY6u4RFfwxNggcx6jj5pPmS0=)
6: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: nPZgAe3RYdNQbfwZCXPjsbX0zEiQsaa52eoyPnZdEgY=)
7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: 9XpDqx6Xcy610EWPbcuBIhNi9mO9u1+/rkKxHtaBMFk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1017 (0x3f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Apr 17 00:30:10 2026 GMT
Not After : Apr 24 00:30:10 2026 GMT
Subject: CN=69e17f12-041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:72:a9:83:82:ef:9a:0a:06:31:8f:29:13:2c:
f6:b5:dd:18:5f:60:9f:e2:02:01:41:5a:8e:1b:2a:
10:86:1b:21:ca:24:21:a8:2b:6c:ac:24:18:9e:93:
fe:95:39:39:2d:fa:5f:79:58:60:9c:22:e0:90:d4:
a1:6e:85:6b:fa:fa:b0:0e:92:f5:8c:c0:03:a4:6c:
8c:44:87:c6:83:8f:3d:b7:11:d2:b1:a4:d7:fe:40:
28:d2:ca:20:84:64:56:42:dd:87:23:5c:47:9e:85:
05:ca:11:48:05:03:0c:4d:23:87:72:3a:b7:0e:7d:
10:3f:a5:85:8f:c5:ef:e3:47:9b:92:a5:0b:76:82:
52:6f:56:5f:ad:5a:79:81:50:c4:af:72:71:f3:5a:
d8:a9:c5:76:72:3a:26:ad:54:e3:43:49:ed:c4:23:
26:eb:3a:7c:ab:ea:62:b5:cd:26:a0:c1:9d:a1:6e:
9b:de:ff:f5:5a:19:6a:f8:a4:f2:45:87:d8:38:c2:
11:42:90:51:45:1e:77:42:98:3d:98:12:4f:51:04:
75:19:46:4d:78:8d:1e:e0:f1:0b:88:97:03:f5:e8:
28:9b:66:fe:3b:70:e4:cd:36:0b:6f:e7:89:32:59:
ec:63:bc:6c:3b:80:09:e3:50:39:39:9e:c8:c6:9e:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:BC:11:AA:A3:C5:87:8B:86:DD:8B:D2:3C:5D:81:D8:01:80:B3:BE
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:39:82:8b:1a:12:fa:73:70:20:b7:3a:68:34:be:fc:1a:c0:
ed:40:c5:cf:27:a1:54:14:52:dd:96:50:99:75:c6:ca:9c:da:
04:a2:4a:08:2e:d4:e2:49:4c:cf:e6:a7:ba:3b:dd:36:66:88:
ee:42:a5:a0:f9:6d:0f:da:93:4a:12:13:7f:4a:2a:88:8e:07:
d7:3c:1b:84:ca:10:63:ba:d3:b3:56:4c:3f:f8:09:4f:54:a0:
67:46:2c:17:5b:fb:49:71:73:67:d5:75:19:2c:f4:d4:4d:f3:
40:b1:88:df:1c:20:b9:f8:bd:14:3c:68:11:df:4f:ea:9e:5a:
5b:42:5a:5d:0c:36:5c:01:5b:9f:9f:a7:09:ae:fa:d3:f9:83:
76:fe:95:4d:41:15:aa:37:a8:9e:e8:a7:b9:ce:5e:e6:c0:c7:
9e:01:27:2f:d2:6f:bc:c2:fe:d7:e7:3d:07:e3:78:47:78:27:
7e:29:a3:af:d5:fc:ad:89:90:68:3c:86:8d:c6:25:d5:b9:c0:
33:a5:c6:56:17:1a:2b:fc:36:3b:13:7c:00:34:34:df:3d:a9:
c6:83:75:e1:cf:2f:a9:5f:1b:12:22:4a:01:75:6a:6c:5a:93:
2c:b9:b1:aa:7f:02:42:78:d2:c0:bf:b5:b4:db:fb:d0:5f:bf:
96:ad:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:58 2026 by rpki-client