
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json)
Hash identifier: cOAGCuAKwwwuB/BZ1E3hDIb2T3+gM1kN/t4ypysDQJQ=
Subject key identifier: 27:39:C6:A3:F6:49:34:27:02:0C:01:89:BE:19:27:7B:66:9E:A3:4E
Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Certificate serial: 0451
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
Manifest number: 0428
Signing time: Mon 21 Sep 2026 00:07:44 +0000
Manifest this update: Mon 21 Sep 2026 00:07:44 +0000
Manifest next update: Mon 28 Sep 2026 00:07:44 +0000
Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: uYf77GBA1laxPBDDPOtYdi73BK8kbWToPI898jYN4/o=)
2: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=)
3: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=)
4: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=)
5: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=)
6: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=)
7: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D
Validity
Not Before: Sep 21 00:07:44 2026 GMT
Not After : Sep 28 00:07:44 2026 GMT
Subject: CN=6ab07550-5e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:92:76:ef:bd:37:13:0a:89:4d:87:99:f3:99:
53:c5:1c:3d:b3:d8:1a:7f:76:af:d7:18:ab:2b:23:
3a:a8:7c:7c:f4:c6:7d:4b:10:d2:a4:f3:00:51:b7:
62:d8:01:2b:88:e0:42:11:5f:fa:98:df:e4:30:e7:
7b:52:b9:5d:b4:47:46:b7:ed:c9:34:39:86:c1:db:
98:dc:65:1f:e9:a0:be:76:6e:9f:94:ba:e5:53:f3:
da:8c:23:85:7c:03:8a:81:cd:ff:61:24:f5:ac:31:
15:c3:09:eb:89:d2:fd:f8:bc:c6:2e:55:7f:5a:67:
d5:49:5e:6a:e2:1f:10:4b:69:3c:4f:94:d5:eb:1d:
88:b6:03:4b:d5:12:b9:7a:9c:c0:f0:10:89:e5:d8:
64:7b:4d:cb:04:22:8c:27:4b:8f:9e:23:af:18:ee:
a7:59:d7:63:82:a4:02:0d:91:e7:82:15:e4:77:ed:
10:5f:e5:d0:5c:3d:a8:16:16:78:0e:54:97:c4:9d:
0f:1f:bf:7b:b3:d7:f9:bf:76:2c:79:f5:cf:41:a1:
fe:7a:e0:60:9a:21:f0:4d:76:5c:8c:3a:18:02:f1:
ea:76:3b:d5:a1:43:b5:73:9d:1b:6c:0c:f1:f1:d4:
0a:13:10:1a:94:b4:96:ec:44:95:65:29:dc:96:96:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:39:C6:A3:F6:49:34:27:02:0C:01:89:BE:19:27:7B:66:9E:A3:4E
X509v3 Authority Key Identifier:
keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:df:0a:11:21:d7:a1:4b:fd:3e:a7:07:9a:d6:03:e7:5f:79:
a3:52:d0:71:7c:4e:90:44:58:0e:fb:36:12:19:03:8a:4d:ff:
3d:aa:f4:9d:20:6f:3a:de:ab:73:35:05:f9:7d:cc:a9:4b:4e:
09:60:5d:89:c7:7d:6e:9b:d4:4c:9c:fb:c2:ab:10:db:fa:77:
e0:12:9f:1e:c2:94:95:fa:af:f2:fc:75:1a:8b:cb:15:a1:7e:
b3:62:9c:b2:14:99:ba:81:a9:ff:ed:22:2c:ce:58:81:da:6f:
30:a8:4a:b0:70:cd:14:8d:9b:4d:6c:2a:af:88:97:ab:05:3c:
be:26:5f:54:d6:4b:7e:06:d4:0d:41:22:ea:a2:e2:e0:8b:d0:
65:af:e3:ba:b6:75:ed:85:03:d2:38:7d:7f:74:02:e9:b9:3a:
48:29:21:4a:3f:b4:68:fc:3c:5e:29:83:7f:38:a6:0c:36:71:
1a:30:9f:41:b6:53:53:e2:f6:5e:dc:1f:67:a0:53:bd:b8:db:
9a:16:2f:58:60:db:e7:b8:f2:3a:89:ed:65:4f:a1:f6:69:8f:
b1:92:cf:c4:47:19:b0:bb:87:fe:7b:61:7b:08:75:af:de:9e:
3d:96:b8:a8:ca:09:d7:39:e7:cb:e7:53:69:63:80:e6:79:a7:
2d:68:3a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:37:44 2026 by rpki-client