
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
File: LUmzrm2hi2NGSjF3qzIQGULmpRo.mft (raw, json)
Hash identifier: lK2bmcZYQh2p4sfXuAiL3zuIiA61Lo9F6hs2dg6T6XI=
Subject key identifier: 54:5F:FE:6D:2F:CF:8B:80:96:B7:83:46:A2:1F:AD:12:65:4F:BA:A5
Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Certificate serial: 014F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
Manifest number: 013E
Signing time: Thu 23 Jul 2026 07:18:34 +0000
Manifest this update: Thu 23 Jul 2026 07:18:34 +0000
Manifest next update: Thu 30 Jul 2026 07:18:34 +0000
Files and hashes: 1: LUmzrm2hi2NGSjF3qzIQGULmpRo.crl (hash: uB7iQXS33vZCJyuWYHInVdXuc7ckReEH3TiX9wZX27I=)
2: 45541EE4C9F711F087D2166DC4F9AE02.roa (hash: BBo/D4ougHcvt0CTiUR2zOn2G1nX/DbXKy3xlNXCyJE=)
3: 44870D64C9F711F0BE5A166DC4F9AE02.roa (hash: j8pxYqwHjG1CeMy1Rqa7oP4d9g5hA6p616Cf9S7A0+0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A
Validity
Not Before: Jul 23 07:18:34 2026 GMT
Not After : Jul 30 07:18:34 2026 GMT
Subject: CN=6a61c04a-2592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:dc:48:63:27:06:11:5a:64:89:28:82:fd:
02:05:6d:a5:be:b1:7f:0e:81:ab:ea:fb:58:9e:78:
b4:63:d1:7d:04:2d:bf:53:23:c7:ae:60:93:b3:13:
60:6b:e8:57:1c:b3:81:0a:14:cf:b3:95:bd:34:cf:
f3:54:99:2d:99:c0:15:e4:63:b9:81:cc:ac:0e:50:
c0:6f:39:df:96:1c:5f:d1:be:4a:11:c1:e5:17:71:
a0:a1:45:11:08:4c:40:e1:d0:f7:99:e7:0f:8b:40:
b3:4c:a9:0b:28:fd:85:c0:10:c4:f0:46:f7:35:47:
d4:05:96:64:e9:ca:2e:1e:1f:f0:17:36:0e:8e:d2:
15:be:16:e7:b0:00:e0:96:f4:9e:dd:db:92:c6:be:
6e:52:68:50:4e:b3:99:85:35:36:25:fb:1c:6f:0e:
4e:f3:53:c0:04:dd:84:06:e1:92:1a:22:a2:e8:dd:
02:1f:4c:1f:06:a0:87:df:b3:d9:5f:83:74:96:b4:
4c:8c:3b:dd:01:99:5b:50:c3:a4:ea:50:1a:e4:61:
7a:54:6f:53:ae:db:3d:cd:a9:9c:b8:97:9f:6b:1a:
42:1e:b3:f7:03:bc:b7:da:7d:81:1a:fc:15:aa:0a:
1b:cd:aa:e7:46:e7:11:14:cc:78:c1:23:a6:89:69:
a9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:FE:6D:2F:CF:8B:80:96:B7:83:46:A2:1F:AD:12:65:4F:BA:A5
X509v3 Authority Key Identifier:
keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:2f:c9:40:1d:21:96:72:06:2e:fd:20:f0:22:39:8c:e9:
5f:e1:97:a2:c6:70:2a:31:82:e3:45:e1:3e:39:c6:bd:5a:0d:
6f:d7:f7:db:4d:99:52:f3:de:8c:17:ec:21:e2:71:44:f3:35:
d9:bf:ec:97:31:65:41:7c:05:7d:85:8a:7d:af:b9:c9:ee:d9:
f3:45:26:b0:0b:ec:62:3f:58:78:a2:35:b0:f5:f2:4f:dd:e2:
bc:bf:3a:13:2c:64:05:40:25:44:dd:17:0a:7b:d5:76:28:c2:
22:b7:18:47:aa:4c:6c:18:4e:d5:a8:a7:b3:93:74:e6:27:50:
03:e9:6a:cc:ba:fb:61:6e:7d:f9:b4:57:bd:17:a1:a2:28:5f:
f9:42:f8:b2:45:db:9e:78:9e:ef:3a:38:35:05:20:59:84:1a:
46:27:f9:e5:6d:80:92:44:ef:5e:21:d6:f9:23:bb:67:66:d0:
55:07:e3:05:54:36:f3:34:65:1e:a1:85:bf:9d:dd:4e:5f:8e:
75:21:80:eb:9d:96:10:bc:61:49:6e:3f:73:77:e2:93:a2:41:
71:25:91:4a:b8:1b:b8:f9:3c:81:e2:3d:37:9d:47:55:fb:4b:
b0:30:d6:2b:4b:50:2f:30:f3:6d:56:25:6f:31:be:a0:3c:5c:
83:32:fd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:08 2026 by rpki-client