$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: MI9xIyjZVzHIkznvB007AV3EldNNgvvxtWoZ4O4Lv1g= Subject key identifier: 80:E2:A5:3A:0C:4B:D8:BE:C3:97:91:95:FE:6A:C2:4B:D2:CA:2E:60 Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 046D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0444 Signing time: Sun 15 Nov 2026 00:00:11 +0000 Manifest this update: Sun 15 Nov 2026 00:00:11 +0000 Manifest next update: Sun 22 Nov 2026 00:00:11 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: QuJALhsEnabRjUnouZPkOLMFEZyQsuQlSN485Kp3kGw=) 2: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=) 3: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=) 4: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=) 5: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=) 6: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=) 7: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 00:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1133 (0x46d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Nov 15 00:00:11 2026 GMT Not After : Nov 22 00:00:11 2026 GMT Subject: CN=6af8f60b-2303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:89:31:26:0b:43:7b:a5:ad:60:29:6f:bf:e6: 63:d7:bc:15:b2:ff:45:a7:3d:1a:29:8e:15:f7:c8: b9:8b:50:99:9b:fa:0b:b3:0a:58:a9:98:df:07:b5: 70:48:5c:f6:89:09:58:2f:7c:4c:61:16:2a:14:51: 24:6c:a7:91:95:7c:c5:e3:4e:28:03:5b:e9:43:23: a5:7a:1e:4f:43:94:25:7f:f6:53:db:37:08:49:b4: a8:71:f8:07:6a:6e:97:07:84:d1:bc:8b:12:95:85: bf:6f:dc:99:c6:8c:30:63:c0:f3:e1:ec:45:bf:1a: 87:97:43:bf:63:54:ea:cd:2d:58:b6:8e:ef:76:77: ca:b1:e3:3a:b4:40:c2:ee:f1:a8:ce:a8:04:63:d7: 05:ab:26:37:61:1c:e2:a3:89:ce:ab:53:5e:35:67: 02:05:b8:ca:39:84:a6:d0:ea:a6:40:5f:6a:17:0c: 57:54:5d:34:92:49:00:ad:90:1c:d2:73:04:fe:af: 0d:70:e4:ff:89:b3:aa:02:ea:e2:e4:39:70:e5:8e: dd:5f:34:38:26:9a:c0:8e:48:c6:bc:8f:37:e1:a1: 27:b4:bd:24:da:f5:fc:71:1d:ed:53:9c:5e:09:4b: 7d:05:44:0b:a1:25:e2:8b:01:e9:3d:d2:fb:a6:1b: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E2:A5:3A:0C:4B:D8:BE:C3:97:91:95:FE:6A:C2:4B:D2:CA:2E:60 X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:53:92:33:0f:7a:36:0e:10:53:c8:6a:ea:a1:f7:f9:87: 4a:ad:34:dc:41:96:3b:fc:8c:dc:e6:1c:6c:0b:16:a5:52:c4: 89:6c:b0:d0:c6:ab:31:17:6e:0c:53:b5:4e:dc:df:5c:49:94: b0:ae:dc:43:53:17:28:bc:00:67:bc:55:02:b2:0a:0d:0d:cb: e7:d3:61:1f:f6:dc:b4:d7:ab:a6:0f:c6:48:41:ab:d0:07:b9: b4:f0:f1:99:f5:61:88:a8:d0:b9:6f:6c:d4:89:97:80:79:d1: 98:d5:4d:47:99:21:08:27:0a:de:7b:60:2f:35:6e:2d:bf:e7: 45:7e:32:87:59:e4:8a:45:4f:3e:f9:4d:97:11:94:ef:b9:9f: 46:9c:86:34:e3:f0:7c:ef:36:ab:63:be:53:d3:de:a2:78:41: 0f:61:23:90:e7:2d:cd:7c:77:2a:74:1e:34:0f:b2:71:91:6c: 61:30:24:87:72:95:82:3b:65:58:c3:de:27:99:fe:f3:3e:77: 61:f7:1d:62:59:19:22:33:a2:76:94:39:64:15:98:f3:c7:61: 70:26:61:d9:94:2b:06:b2:79:1d:3a:59:4c:0e:34:b3:02:fa: a5:fa:d1:b6:73:37:af:90:9d:85:75:94:05:cc:dd:5d:77:fd: 0e:c5:d6:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjYxMTE1MDAwMDExWhcNMjYxMTIyMDAwMDExWjAYMRYwFAYD VQQDEw02YWY4ZjYwYi0yMzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4kxJgtDe6WtYClvv+Zj17wVsv9Fpz0aKY4V98i5i1CZm/oLswpYqZjfB7Vw SFz2iQlYL3xMYRYqFFEkbKeRlXzF404oA1vpQyOleh5PQ5Qlf/ZT2zcISbSocfgH am6XB4TRvIsSlYW/b9yZxowwY8Dz4exFvxqHl0O/Y1TqzS1Yto7vdnfKseM6tEDC 7vGozqgEY9cFqyY3YRzio4nOq1NeNWcCBbjKOYSm0OqmQF9qFwxXVF00kkkArZAc 0nME/q8NcOT/ibOqAuri5Dlw5Y7dXzQ4JprAjkjGvI834aEntL0k2vX8cR3tU5xe CUt9BUQLoSXiiwHpPdL7pht0xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIDipToM S9i+w5eRlf5qwkvSyi5gMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEDJTkjMPejYOEFPIauqh9/mHSq003EGWO/yM3OYcbAsWpVLEiWyw0MarMRdu DFO1TtzfXEmUsK7cQ1MXKLwAZ7xVArIKDQ3L59NhH/bctNerpg/GSEGr0Ae5tPDx mfVhiKjQuW9s1ImXgHnRmNVNR5khCCcK3ntgLzVuLb/nRX4yh1nkikVPPvlNlxGU 77mfRpyGNOPwfO82q2O+U9PeonhBD2EjkOctzXx3KnQeNA+ycZFsYTAkh3KVgjtl WMPeJ5n+8z53YfcdYlkZIjOidpQ5ZBWY88dhcCZh2ZQrBrJ5HTpZTA40swL6pfrR tnM3r5CdhXWUBczdXXf9DsXWqA== -----END CERTIFICATE-----Generated at Sun Nov 15 17:00:21 2026 by rpki-client