$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json) Hash identifier: xP17HwUXkdEkoq+eNu5tkzBwbRbwZAPOnOM1KU6bdz8= Subject key identifier: 94:E0:05:BF:A9:24:1F:49:33:D6:A7:37:52:28:45:F1:30:33:07:1F Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft Manifest number: 0102 Signing time: Wed 25 Mar 2026 05:34:17 +0000 Manifest this update: Wed 25 Mar 2026 05:34:16 +0000 Manifest next update: Wed 01 Apr 2026 05:34:16 +0000 Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: 1kPIX+vsDMW/+eciqOdBGmM+C0puWETiLpN4UqwFJyU=) 2: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=) 3: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Mar 25 05:34:16 2026 GMT Not After : Apr 1 05:34:16 2026 GMT Subject: CN=69c373d9-8eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:19:e9:8f:a4:99:83:a9:88:d1:f3:11:12: 79:f7:9f:f5:83:05:4c:e3:74:95:5c:d2:5d:01:78: bb:aa:06:04:33:1c:f0:5a:95:5d:16:00:57:f3:d4: e4:1d:87:09:8f:8a:f8:f2:89:a4:8d:b0:ee:ef:14: f0:41:5b:98:31:b1:67:8b:bc:5b:92:b1:7b:be:8c: 0d:21:d8:c0:24:e8:74:70:73:1f:d5:2f:c7:a9:e1: 21:71:f0:bd:82:3e:eb:9e:30:b6:3e:67:36:bf:a4: 67:76:f5:9a:6e:c7:0b:55:8e:aa:63:87:d0:cf:e9: df:05:43:41:46:99:d4:ee:53:e4:c3:eb:92:61:0c: c1:65:31:0f:b4:c8:a7:5b:e6:3d:16:1d:c8:91:63: 3f:68:24:10:3b:93:3a:96:1c:fe:35:48:b1:a7:89: 5e:0b:9b:c9:f4:0e:82:a5:4e:4a:39:f0:db:02:67: 3e:80:44:27:ce:52:92:55:04:37:1e:61:89:48:61: 26:0b:43:e8:84:e8:e3:09:83:11:d5:67:56:f9:b7: 60:36:0d:a8:1d:ba:8f:e8:05:55:fb:51:3b:24:33: 40:d4:1c:aa:13:b5:e6:2d:e9:2e:c9:29:8a:fe:df: 8b:68:ad:e4:c7:d6:b9:50:a9:b1:8c:63:c4:ab:0b: 78:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E0:05:BF:A9:24:1F:49:33:D6:A7:37:52:28:45:F1:30:33:07:1F X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:88:2b:60:39:93:91:51:66:4a:87:66:ef:a6:02:ff:cc:1d: 02:f4:c9:a7:cb:b6:33:09:36:f0:9d:1f:3b:18:42:b8:1c:33: 1b:01:d5:d8:53:3c:af:8d:88:6d:1c:d1:02:05:ab:27:78:c9: 16:0b:5c:9c:86:07:d7:12:b1:91:e7:4b:1a:9d:f4:fc:1f:70: 44:f2:31:d2:c7:44:16:ce:96:17:63:9f:24:06:98:19:9d:fe: f5:2f:ff:58:2d:3b:4d:32:ff:ca:8d:e9:32:1b:75:32:73:3e: 9b:32:a9:0b:e6:5a:cf:d6:76:8b:fb:6f:6b:b5:38:3c:00:2a: 49:8b:08:a5:66:d2:42:99:8c:da:6c:32:b9:d7:90:28:95:d6: b6:c5:3a:43:b1:51:55:a3:86:29:35:96:f5:89:da:f5:c8:ef: 48:d1:24:5c:21:8a:73:5d:8c:3e:d9:85:8c:73:7f:a0:cb:60: a1:1b:bf:59:b6:04:fc:2c:9e:c8:4b:0c:89:56:39:b5:f3:36: 23:f7:50:46:6b:6a:c5:82:ea:da:95:3d:de:d3:72:a8:d3:d4: 05:cc:83:fb:6e:16:e1:38:b5:5e:80:81:5e:9c:43:b5:95:3f: 90:06:e2:74:57:47:08:bb:a8:02:dc:b7:92:46:0e:fa:e5:6e: 75:1b:8f:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjYwMzI1MDUzNDE2WhcNMjYwNDAxMDUzNDE2WjAYMRYwFAYD VQQDEw02OWMzNzNkOS04ZWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBkZ6Y+kmYOpiNHzERJ595/1gwVM43SVXNJdAXi7qgYEMxzwWpVdFgBX89Tk HYcJj4r48omkjbDu7xTwQVuYMbFni7xbkrF7vowNIdjAJOh0cHMf1S/HqeEhcfC9 gj7rnjC2Pmc2v6RndvWabscLVY6qY4fQz+nfBUNBRpnU7lPkw+uSYQzBZTEPtMin W+Y9Fh3IkWM/aCQQO5M6lhz+NUixp4leC5vJ9A6CpU5KOfDbAmc+gEQnzlKSVQQ3 HmGJSGEmC0PohOjjCYMR1WdW+bdgNg2oHbqP6AVV+1E7JDNA1ByqE7XmLekuySmK /t+LaK3kx9a5UKmxjGPEqwt4MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJTgBb+p JB9JM9anN1IoRfEwMwcfMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Rjc1My83ODA5REEwMkJDMEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGky TkdTakYzcXpJUUdVTG1wUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkYgrYDmTkVFmSodm76YC/8wdAvTJp8u2Mwk28J0fOxhCuBwzGwHV2FM8r42I bRzRAgWrJ3jJFgtcnIYH1xKxkedLGp30/B9wRPIx0sdEFs6WF2OfJAaYGZ3+9S// WC07TTL/yo3pMht1MnM+mzKpC+Zaz9Z2i/tva7U4PAAqSYsIpWbSQpmM2mwyudeQ KJXWtsU6Q7FRVaOGKTWW9Yna9cjvSNEkXCGKc12MPtmFjHN/oMtgoRu/WbYE/Cye yEsMiVY5tfM2I/dQRmtqxYLq2pU93tNyqNPUBcyD+24W4Ti1XoCBXpxDtZU/kAbi dFdHCLuoAty3kkYO+uVudRuPRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:47:18 2026 by rpki-client