$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: BB76uwhReNhBMe0ZI2QJo0H5sgqa5vK8NyTHCQApbFQ= Subject key identifier: D9:42:EA:F4:6D:A2:AD:D1:EF:8B:47:B0:36:9A:6B:28:1C:4A:21:34 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 011A Signing time: Mon 11 May 2026 06:10:21 +0000 Manifest this update: Mon 11 May 2026 06:10:21 +0000 Manifest next update: Mon 18 May 2026 06:10:21 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: MnjvWLHILOqxF7zoXICmwR0DvL5QQtvIcq7EOEhEwJo=) 2: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=) 3: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 06:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: May 11 06:10:21 2026 GMT Not After : May 18 06:10:21 2026 GMT Subject: CN=6a0172cd-e799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:e0:fe:9d:a2:78:7b:84:49:98:ea:a8:8f: cf:13:27:47:17:97:5f:a9:f3:0a:24:e0:04:8c:84: b1:1e:0c:61:9b:70:ce:20:06:1f:b6:a3:88:a3:e7: 22:3b:c0:b4:0e:1d:63:9a:fc:4c:71:2a:10:c2:0f: bb:d3:c7:d7:ba:b0:7a:ea:ad:37:30:95:64:1f:81: 9b:36:f1:ca:dc:f1:3a:69:87:86:10:e4:ed:0d:fb: 0a:09:68:d8:be:a8:ec:10:58:9d:c6:e4:fc:5e:34: 0a:f4:59:58:d5:ac:c4:98:f0:4d:00:35:02:1b:71: e7:43:91:40:43:12:89:88:44:38:2b:fd:c6:88:f5: 85:b7:eb:39:71:88:da:99:9c:43:66:0a:18:e6:d4: 9b:b1:15:f5:8f:48:2f:f6:ac:da:1c:78:1c:38:ae: fd:9a:f8:77:af:3d:af:d9:56:33:28:46:30:95:08: 1c:f3:d9:fa:cd:83:9f:a5:0d:31:58:4f:5f:12:11: 3f:05:f7:97:1b:fb:1d:27:da:94:85:20:62:57:4d: 9b:6e:ca:6b:4e:a1:2e:66:f4:5f:5e:5f:2d:17:24: 4f:bc:a6:90:bf:22:e5:4b:38:14:0f:ca:0b:f1:0b: 21:6e:3f:86:c6:ca:5e:3e:1d:bd:c9:4a:eb:0b:bd: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:42:EA:F4:6D:A2:AD:D1:EF:8B:47:B0:36:9A:6B:28:1C:4A:21:34 X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2c:6c:ad:ef:ae:0c:b4:61:1b:53:39:60:c1:7f:f7:54:cb: 8b:c3:da:56:d7:bd:42:8d:28:74:4b:6e:63:51:a4:6e:56:bb: 54:c6:e2:6d:f7:30:2c:2b:a3:ea:ad:c5:58:ef:97:20:ef:26: c2:62:0f:c6:a0:8a:6d:25:fd:70:8f:18:05:3d:20:cc:2b:46: 58:f4:33:2b:f0:07:12:1c:2f:81:2b:c4:a7:c4:a1:09:00:f7: 4f:1e:d6:25:ce:b7:87:e9:b0:74:cf:48:0b:3d:ec:70:8d:6d: 8c:3b:13:69:c5:96:79:68:e1:bf:ca:84:35:3f:91:51:34:22: a5:7a:54:ac:0a:34:85:c7:98:38:74:e5:64:03:f2:b0:89:62: 58:d4:ab:8d:08:d7:d7:9a:5c:2d:9e:c5:5e:f7:61:c4:88:a2: 8b:85:60:82:27:5a:50:bc:47:5e:11:42:8e:a7:69:53:33:53: 07:1a:b4:7a:72:6d:14:d1:b9:57:5a:b8:d9:43:18:25:e5:d9: 60:2d:68:63:4b:11:f7:86:77:46:c3:d9:77:3d:97:bd:05:48: c6:4e:21:04:68:0d:ed:bf:e9:00:0d:0a:5f:6f:40:85:00:29: b7:5f:93:2a:38:28:62:b9:07:48:3c:8d:2a:e4:8a:f7:0f:fb: 70:43:0e:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjYwNTExMDYxMDIxWhcNMjYwNTE4MDYxMDIxWjAYMRYwFAYD VQQDEw02YTAxNzJjZC1lNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl3g/p2ieHuESZjqqI/PEydHF5dfqfMKJOAEjISxHgxhm3DOIAYftqOIo+ci O8C0Dh1jmvxMcSoQwg+708fXurB66q03MJVkH4GbNvHK3PE6aYeGEOTtDfsKCWjY vqjsEFidxuT8XjQK9FlY1azEmPBNADUCG3HnQ5FAQxKJiEQ4K/3GiPWFt+s5cYja mZxDZgoY5tSbsRX1j0gv9qzaHHgcOK79mvh3rz2v2VYzKEYwlQgc89n6zYOfpQ0x WE9fEhE/BfeXG/sdJ9qUhSBiV02bbsprTqEuZvRfXl8tFyRPvKaQvyLlSzgUD8oL 8Qshbj+GxspePh29yUrrC71/mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNlC6vRt oq3R74tHsDaaaygcSiE0MB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWixsre+uDLRhG1M5YMF/91TLi8PaVte9Qo0odEtuY1Gkbla7VMbibfcwLCuj 6q3FWO+XIO8mwmIPxqCKbSX9cI8YBT0gzCtGWPQzK/AHEhwvgSvEp8ShCQD3Tx7W Jc63h+mwdM9ICz3scI1tjDsTacWWeWjhv8qENT+RUTQipXpUrAo0hceYOHTlZAPy sIliWNSrjQjX15pcLZ7FXvdhxIiii4VggidaULxHXhFCjqdpUzNTBxq0enJtFNG5 V1q42UMYJeXZYC1oY0sR94Z3RsPZdz2XvQVIxk4hBGgN7b/pAA0KX29AhQApt1+T KjgoYrkHSDyNKuSK9w/7cEMOiw== -----END CERTIFICATE-----Generated at Wed May 13 04:04:31 2026 by rpki-client