$ rpki-client -vvf rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft File: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft (raw, json) Hash identifier: EwItQy9tw53qWTJHETEYv6q0+V7yd91GQbO9UqC4kl0= Subject key identifier: 97:0F:7C:4B:3E:35:14:F1:65:F0:C9:6E:BA:72:E0:FF:CF:04:18:10 Authority key identifier: 2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 Certificate issuer: /CN=A91356BB/serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Certificate serial: 05BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft Manifest number: 059B Signing time: Thu 26 Mar 2026 23:03:02 +0000 Manifest this update: Thu 26 Mar 2026 23:03:01 +0000 Manifest next update: Thu 02 Apr 2026 23:03:01 +0000 Files and hashes: 1: LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl (hash: IifoYvrrx4b9wjur1aNOvJt0cyNkwXKO7IApi2SPDFM=) 2: F0F715D8D91811EFAD9B2462C4F9AE02.roa (hash: 6NxbPpiEJs2yazc4XE7t1GVxt2/LOGH3NcLS2N1ULdM=) 3: 1347AA9019FE11ECB459B141C4F9AE02.roa (hash: FpSEkpsQMaA9en+9841zTtAmY9K+gYFgxlRnEd7kAEM=) 4: D8CA5BF0D91811EFA4F02F4EC4F9AE02.roa (hash: QkZRGL4upm9/d4MEQ4FWarVe1YBkIIS5APd+6Rs1go4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1470 (0x5be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91356BB, serialNumber=2CCA13540F013B93B23C9DF14D9617DA40CB2677 Validity Not Before: Mar 26 23:03:01 2026 GMT Not After : Apr 2 23:03:01 2026 GMT Subject: CN=69c5bb26-bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:16:19:18:c5:3e:b9:23:c1:8e:1d:d6:79: a2:31:4f:54:7f:b3:d1:e6:e8:2a:4b:c1:0b:0d:22: b2:29:c9:34:23:21:92:2f:64:bb:02:f0:ee:a2:2e: 95:d0:a4:ae:34:75:5b:38:b5:f6:90:2c:86:bc:aa: 79:9b:37:98:55:27:3b:d1:f8:ea:bf:8b:0f:44:9a: 08:77:0b:7e:af:62:ec:20:25:e2:5b:ab:9b:1b:43: e3:93:9d:9d:c2:6a:58:ed:11:28:e0:86:02:0e:77: 20:5d:12:6e:1c:05:eb:e4:f0:f9:75:03:db:e8:40: af:b0:c7:79:18:3a:47:87:23:0d:bb:c7:e4:30:3c: 34:88:f0:99:51:cb:a1:c4:ee:45:98:87:7d:71:ff: 5a:c9:d4:5b:42:30:a8:60:42:37:c1:0c:c3:11:2d: 13:15:33:49:98:3a:6e:ee:93:9c:91:32:b0:b0:53: dc:a0:53:70:11:6e:f2:0b:4d:9c:a1:1e:25:db:0c: 52:f2:ab:c8:31:5a:7c:d1:1c:73:6b:09:30:fb:2f: 74:94:26:5d:9f:bd:59:45:93:21:f4:5d:34:c3:a5: 17:29:a0:74:28:ea:df:20:37:1d:ae:37:93:2c:ce: 91:b8:15:18:fd:d9:b1:40:53:dd:73:0b:25:53:1a: 89:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:7C:4B:3E:35:14:F1:65:F0:C9:6E:BA:72:E0:FF:CF:04:18:10 X509v3 Authority Key Identifier: keyid:2C:CA:13:54:0F:01:3B:93:B2:3C:9D:F1:4D:96:17:DA:40:CB:26:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91356BB/5CEA549416D511ECA7F3F46AC4F9AE02/LMoTVA8BO5OyPJ3xTZYX2kDLJnc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:79:ec:fd:20:d8:a5:a9:8e:34:4e:d0:bc:75:a4:86:2f:f9: 66:5d:fd:4c:42:89:a9:cf:a8:2c:44:b9:f4:78:1a:8a:b4:90: 19:a9:7e:e5:7a:5c:b5:b8:39:51:83:77:c9:46:f7:e3:6a:f0: 93:27:c2:6d:2d:ef:4d:20:f5:5a:b2:ea:ef:69:69:cc:58:04: 4b:39:01:e8:4c:be:7d:4c:a2:40:ec:af:55:80:4a:4f:dc:b2: 04:e4:ed:55:35:32:a3:ad:da:7d:06:64:27:cc:18:fe:b5:86: e3:5c:f6:4e:25:cd:8c:65:d4:c9:a1:52:b9:98:c6:45:09:61: 6c:f9:f3:1b:77:be:a4:4a:88:a1:6e:f3:59:ea:80:14:ab:23: 5b:b8:ec:d9:fb:1d:cf:43:9b:ff:5a:f4:c5:25:2b:b2:8c:ef: 6a:53:cf:94:52:65:7c:fb:b1:fb:99:ae:fc:f7:69:e8:ee:96: 17:39:47:b8:b6:83:4f:1d:e8:4c:35:d5:6c:7f:e9:fd:cb:ab: 80:f2:13:c3:c5:6f:94:11:1e:1d:ea:49:64:4d:ba:23:85:b8: 6e:62:fb:00:a5:70:33:6b:4b:93:29:33:64:ee:e2:93:3d:bc: 0d:73:db:99:02:95:c4:c1:d8:bc:af:76:01:70:06:ed:99:d6: 14:d2:11:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2QkIxMTAvBgNVBAUTKDJDQ0ExMzU0MEYwMTNCOTNCMjNDOURGMTREOTYxN0RB NDBDQjI2NzcwHhcNMjYwMzI2MjMwMzAxWhcNMjYwNDAyMjMwMzAxWjAYMRYwFAYD VQQDEw02OWM1YmIyNi1iY2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVoWGRjFPrkjwY4d1nmiMU9Uf7PR5ugqS8ELDSKyKck0IyGSL2S7AvDuoi6V 0KSuNHVbOLX2kCyGvKp5mzeYVSc70fjqv4sPRJoIdwt+r2LsICXiW6ubG0Pjk52d wmpY7REo4IYCDncgXRJuHAXr5PD5dQPb6ECvsMd5GDpHhyMNu8fkMDw0iPCZUcuh xO5FmId9cf9aydRbQjCoYEI3wQzDES0TFTNJmDpu7pOckTKwsFPcoFNwEW7yC02c oR4l2wxS8qvIMVp80Rxzawkw+y90lCZdn71ZRZMh9F00w6UXKaB0KOrfIDcdrjeT LM6RuBUY/dmxQFPdcwslUxqJhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJcPfEs+ NRTxZfDJbrpy4P/PBBgQMB8GA1UdIwQYMBaAFCzKE1QPATuTsjyd8U2WF9pAyyZ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTZCQi81Q0VBNTQ5NDE2 RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81T3lQSjN4VFpZWDJrRExK bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNb1RWQThCTzVPeVBKM3hUWllYMmtETEpuYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTZCQi81Q0VBNTQ5NDE2RDUxMUVDQTdGM0Y0NkFDNEY5QUUwMi9MTW9UVkE4Qk81 T3lQSjN4VFpZWDJrRExKbmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3ns/SDYpamONE7QvHWkhi/5Zl39TEKJqc+oLES59HgairSQGal+5Xpctbg5 UYN3yUb342rwkyfCbS3vTSD1WrLq72lpzFgESzkB6Ey+fUyiQOyvVYBKT9yyBOTt VTUyo63afQZkJ8wY/rWG41z2TiXNjGXUyaFSuZjGRQlhbPnzG3e+pEqIoW7zWeqA FKsjW7js2fsdz0Ob/1r0xSUrsozvalPPlFJlfPux+5mu/Pdp6O6WFzlHuLaDTx3o TDXVbH/p/curgPITw8VvlBEeHepJZE26I4W4bmL7AKVwM2tLkykzZO7ikz28DXPb mQKVxMHYvK92AXAG7ZnWFNIRCQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:41:54 2026 by rpki-client