
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: 3Y83R3lFnyrX3Zy5GnGiOuXy/EPFT9Gj55NL3w+t6/4=
Subject key identifier: CB:F0:D9:4C:5A:51:CC:AE:CD:C0:39:02:9C:6A:28:BA:C0:3D:E2:D8
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 0434
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 040B
Signing time: Mon 27 Jul 2026 01:29:19 +0000
Manifest this update: Mon 27 Jul 2026 01:29:19 +0000
Manifest next update: Mon 03 Aug 2026 01:29:19 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: TPokFSBF7hm6/9nJY2k6xZYPoc489BZLfYuVqzMdsyE=)
2: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=)
3: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=)
4: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=)
5: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=)
6: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=)
7: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1076 (0x434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Jul 27 01:29:19 2026 GMT
Not After : Aug 3 01:29:19 2026 GMT
Subject: CN=6a66b46f-b2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:41:b7:c4:fa:d8:84:1c:54:bd:38:bd:88:
84:77:9a:9e:fc:4e:bc:47:50:dc:48:f3:20:55:1f:
dd:84:1d:ea:09:f5:44:e8:92:78:01:ef:fd:20:a9:
9b:da:af:da:79:a1:07:41:12:82:29:f0:61:51:dc:
61:18:d0:dc:bb:a2:3f:e5:a5:9e:25:5d:e0:98:87:
7a:91:93:4d:90:fd:86:45:8a:6c:55:67:02:91:5c:
18:b5:39:41:c8:f1:a3:58:71:08:c6:81:bb:8d:22:
68:de:ad:67:e7:a4:f0:90:6d:93:ef:f6:c0:1d:bb:
ed:38:89:46:de:23:ae:2b:5f:59:53:e9:6c:f1:3a:
46:73:17:aa:3d:e0:ef:4d:04:95:78:8c:0e:ee:e4:
82:9a:2c:95:64:72:8c:85:a9:89:7d:fe:1f:c4:fe:
8c:15:93:f1:12:73:fa:08:ee:56:35:0d:d6:26:86:
1b:78:b3:da:46:7f:df:f6:c6:c7:97:4f:ff:7d:6a:
3b:ec:68:8a:46:a3:e8:be:25:18:1f:02:a5:a0:a3:
df:98:11:f1:dd:cc:76:c4:ff:68:e8:e8:05:bb:32:
ba:a6:5b:11:c7:5d:be:e4:d0:bd:b6:57:ba:c6:f1:
cc:9f:10:65:c4:15:e6:48:55:58:0f:4b:fc:ae:4f:
b4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:D9:4C:5A:51:CC:AE:CD:C0:39:02:9C:6A:28:BA:C0:3D:E2:D8
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:92:73:e7:e1:c1:fe:22:a5:e9:30:63:90:a8:59:97:af:c3:
b1:22:d2:96:77:1f:39:fb:d0:71:eb:97:0d:a5:ac:6e:3a:60:
dc:36:ce:f6:fb:c3:0a:88:53:ad:ea:b5:0c:86:36:f5:f7:a5:
d7:20:45:11:ea:41:59:d5:68:38:2a:7a:74:83:2a:62:eb:e8:
9c:24:44:fa:dc:e0:8e:80:31:48:08:ae:81:3d:c8:75:5e:5b:
ae:79:9f:5f:08:51:30:70:ce:c7:46:71:2e:c8:f7:c3:67:de:
d5:82:b8:42:d3:39:68:17:c3:b2:86:fa:42:a4:d7:d0:4f:ca:
72:9e:14:4d:db:bf:a4:fe:17:9d:1f:33:51:cc:42:7f:7d:63:
08:7e:cd:11:ad:b3:7e:f5:f9:75:1c:96:62:7e:55:9b:03:ff:
99:b1:62:4d:83:c6:6c:35:91:2a:88:8b:c3:7d:dd:5b:5b:b9:
81:eb:aa:a5:6e:11:65:eb:09:84:d9:15:78:5c:4d:80:fb:95:
e9:38:0d:8c:ce:5a:38:71:bc:d2:42:0f:e5:4b:f4:70:68:6c:
d1:24:1f:81:bf:cc:90:48:da:84:cd:a1:88:65:d1:fb:7f:18:
68:f8:d0:35:71:86:cd:5d:99:a8:01:47:ca:f1:df:11:04:05:
f8:bd:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:17:11 2026 by rpki-client