
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: y3WlhLsoAGsBwZsQQtywDArhijJeX7cX1gyKuJ03NDo=
Subject key identifier: 52:B0:3F:CC:B4:4D:85:D7:18:8C:C4:43:05:B3:2D:0F:70:DF:C2:03
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 03D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 03BC
Signing time: Sun 01 Mar 2026 01:31:04 +0000
Manifest this update: Sun 01 Mar 2026 01:31:03 +0000
Manifest next update: Sun 08 Mar 2026 01:31:03 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: RUqF7m0q2fOMlWad9pCemfoYNDe3SH0MsMeCrQWAWcg=)
2: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: ltQE1ACHFxJalS/0k3q+Ig8nBgWVEoOtVPpdjQ0C1JE=)
3: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: 30Bcwfo746beL6TG9snvEW7O1ZgFuTW1IVMwb8hxmH4=)
4: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: OEjS5qz+Y094b9NXZxpyHneMicv8/wejwLKQ2tC/qNg=)
5: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: ZWFeBQWegvf7qjSa6jsoNEGGn0IO7ig3HT5bMFUTusg=)
6: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: ch9EflhL7C1jP+s1ylPiL9Gffg36ErkYooxoRNvgmEE=)
7: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: M3qPmduTKgomQOiC6svBksITDFFBnsH7ow1jxrTPAmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Mar 1 01:31:03 2026 GMT
Not After : Mar 8 01:31:03 2026 GMT
Subject: CN=69a396d8-5e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:fa:ee:72:15:ba:e0:00:b6:36:c2:a7:20:
45:cd:9b:04:91:50:a2:c0:82:55:4b:db:7e:7f:4d:
0d:e7:8e:fe:f2:7e:61:e1:84:48:7b:4a:1f:52:0c:
9e:29:db:73:e4:95:ca:4e:b1:6d:21:02:c6:94:aa:
cb:cc:c6:5f:10:0b:8a:0d:ed:4c:57:d8:fb:1c:3f:
a6:06:28:f5:d0:58:47:4c:3e:8a:7d:77:c3:98:f9:
d0:12:38:60:5d:64:f1:3e:50:77:0a:d9:e6:59:f0:
24:b0:a0:91:94:7a:4a:a6:3b:3e:8e:d3:27:1d:2b:
42:b3:b1:0f:1a:6a:15:03:99:97:84:02:8d:5a:84:
78:84:29:54:64:f8:b9:bf:90:3f:75:d2:fa:26:4d:
75:e6:36:e2:e2:3a:27:77:81:d3:b8:b5:bf:61:cb:
61:61:2e:6a:72:4e:76:59:fa:46:75:0a:06:dc:94:
92:f3:07:6c:d7:11:c1:b3:d9:bf:27:2e:71:20:24:
6c:78:ef:1c:d9:44:e0:f4:df:c4:67:fa:17:b1:f5:
b0:6c:18:2e:fe:10:3d:29:1f:e7:0f:bc:12:66:00:
61:f1:05:c2:96:17:77:0d:4b:d1:b0:f7:6b:4a:73:
0d:5b:2a:12:a7:cf:7e:d1:c6:93:56:54:af:46:ce:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B0:3F:CC:B4:4D:85:D7:18:8C:C4:43:05:B3:2D:0F:70:DF:C2:03
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:11:08:45:2b:4b:43:53:5f:a0:11:5f:00:d9:99:16:72:b8:
67:6c:38:da:d7:12:09:43:dc:55:37:e6:2d:34:6e:b2:68:81:
a6:b0:ae:ba:d0:c8:d5:d9:fa:19:32:b2:4f:3d:b5:d2:64:a3:
9d:57:69:83:f9:03:f5:8e:0f:16:c1:20:f0:f2:0d:80:5f:67:
73:dd:d6:f1:30:0b:8d:0a:08:fa:7f:f8:ef:97:56:94:2d:0b:
be:86:c6:83:60:91:fc:d0:ca:54:cc:5a:20:2e:3b:35:47:44:
d3:c2:0f:77:4e:3e:2d:19:5f:7e:5f:58:6d:be:45:6b:df:3a:
a9:6f:e2:a9:59:14:aa:a3:65:af:a5:a3:89:ba:4f:02:b1:ed:
f7:a7:a9:10:32:ce:b2:d8:04:4f:94:1d:45:6a:76:36:70:38:
a4:37:bc:06:ac:e7:ac:96:78:56:9a:c0:69:35:60:8f:58:2e:
0d:51:fe:3f:82:93:d0:eb:02:ed:2a:c0:eb:95:90:67:71:12:
1c:b3:2a:cb:7a:4d:ef:a3:0c:34:73:d8:9a:e8:3a:f9:46:9f:
28:ce:a9:02:ce:92:e5:21:58:7c:6a:25:2b:9e:75:b2:98:5e:
fd:0e:84:5a:f6:69:84:af:83:4c:eb:78:0f:a9:60:64:f5:4d:
f0:50:cd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:36 2026 by rpki-client