$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft File: LMM_vLhkCEAgiUpy3QiFBa-btm0.mft (raw, json) Hash identifier: kJLrS++A5FRmFPqF9A1GNROirETW8vNSiP1fsFHnk1o= Subject key identifier: D5:C2:22:7A:18:76:1F:CF:E9:75:FA:16:65:53:2C:D6:F9:1B:FE:1D Authority key identifier: 2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D Certificate issuer: /CN=A91BAA44/serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Certificate serial: 046C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft Manifest number: 0443 Signing time: Thu 12 Nov 2026 23:59:07 +0000 Manifest this update: Thu 12 Nov 2026 23:59:06 +0000 Manifest next update: Thu 19 Nov 2026 23:59:06 +0000 Files and hashes: 1: LMM_vLhkCEAgiUpy3QiFBa-btm0.crl (hash: F30e0Ob92VtwPpQL+2xkNz03NLv95bLg7MOvUl83g1g=) 2: 0FA97166C80411ECBA7BB174C4F9AE02.roa (hash: RUoDnJNIMj2UN7pcziT628/S7dswqJ9DeJQXSeGTo00=) 3: 1054539CC80411ECBA7BB174C4F9AE02.roa (hash: Eg7teVZrjALhyUE+/tmu/BSGY7V3ujckbX31yCH+Acc=) 4: E5E533CA7EB111F0AD0B186BC4F9AE02.roa (hash: XrUgrd1GgjyDlaQ8XuaR3oAmy4zT1L+yecTyX+8hOWQ=) 5: 2870E2347EB211F09B907A6BC4F9AE02.roa (hash: zoP0yZpe7A/PmAMETHHU9C24brqTIMCILHJY9SJnpHM=) 6: 11935C9EC80411ECBA7BB174C4F9AE02.roa (hash: 6PzEmNCMv8rj5Q3V+UacyaTxdCWBihw0MiiJScJkL+4=) 7: 0F0DB8A2C80411ECBA7BB174C4F9AE02.roa (hash: MvvBMJL+ARU0EoVAzOHVsomLSG69M9mjf1RtpPa9ecA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Nov 2026 23:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1132 (0x46c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA44, serialNumber=2CC33FBCB864084020894A72DD088505AF9BB66D Validity Not Before: Nov 12 23:59:06 2026 GMT Not After : Nov 19 23:59:06 2026 GMT Subject: CN=6af652cb-6a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4c:86:8e:30:37:5d:ed:99:94:46:a1:59:87: 7e:09:75:10:35:98:e5:8c:80:c2:3d:ea:a7:06:14: c4:fb:c5:77:42:dd:ab:2b:e8:db:38:f5:67:ec:d4: b5:2e:22:e2:77:52:fd:71:41:f1:0d:56:c6:a1:02: f5:e6:43:27:70:00:a5:51:b6:07:0d:b6:96:55:fe: 3d:85:65:34:3e:55:e0:5f:6c:ea:87:66:60:83:c6: bc:a1:a1:6b:66:73:78:1b:f1:63:aa:dd:fc:d9:86: 59:b5:00:00:5a:5f:37:3f:82:99:eb:c4:cd:75:cc: cc:68:05:2e:20:04:28:ed:d8:ea:0b:a5:2a:95:be: 62:46:ce:35:34:c0:42:fc:1f:a8:06:d0:f3:3d:09: 08:ca:62:4e:b0:1e:bb:91:1c:aa:3d:9b:5c:b9:25: a8:84:2d:e3:e9:3f:16:05:36:bf:57:61:d0:c1:66: 62:bb:5f:4e:77:7f:35:e4:a5:bc:23:3d:25:74:0e: 90:4b:e9:57:3e:0a:15:da:e9:b4:86:c7:5d:75:26: 3c:f6:6d:0e:81:e3:c5:f4:db:3b:9a:0b:b1:0a:d2: 0d:75:14:62:c4:5a:3e:22:b3:66:43:85:3c:31:b2: a8:48:0c:cf:8a:67:50:40:3b:7d:b6:d1:89:71:d0: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C2:22:7A:18:76:1F:CF:E9:75:FA:16:65:53:2C:D6:F9:1B:FE:1D X509v3 Authority Key Identifier: keyid:2C:C3:3F:BC:B8:64:08:40:20:89:4A:72:DD:08:85:05:AF:9B:B6:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LMM_vLhkCEAgiUpy3QiFBa-btm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA44/9CC00A9CC7FF11EC9BDBFE4BC4F9AE02/LMM_vLhkCEAgiUpy3QiFBa-btm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:d9:3d:91:5f:43:66:06:76:ee:28:8f:0f:6e:44:a3:87:25: 90:65:33:f0:a0:36:73:6d:f4:c0:1c:db:20:8c:ef:6e:5a:97: 7c:ea:5c:e4:54:96:6b:7d:c4:fc:aa:5f:e4:7b:4b:ef:ed:2b: 45:53:5e:f4:66:a2:2a:f1:fa:54:ad:ba:44:fe:27:c7:36:be: 94:37:7c:68:6c:fa:ad:18:7b:55:b1:33:e8:cf:6f:5e:bc:54: 50:6d:bb:14:20:e9:5f:50:99:dd:e7:a6:43:10:9b:9a:84:f1: f9:89:33:95:27:b5:03:ee:50:8d:89:d7:5c:e8:5c:1d:54:77: 0b:19:45:31:f9:d2:1d:07:41:79:0d:19:cb:d3:f0:8d:bb:bf: 7f:16:5d:aa:b8:0b:e0:e9:0f:02:29:2f:de:20:fa:e8:a9:ae: cb:5a:5d:12:7b:f2:3b:98:3f:e1:e7:13:34:b7:8c:9b:14:3b: 86:dc:1a:d3:5b:65:7d:a5:ec:02:4c:6c:9e:60:45:08:17:da: 3f:66:ea:88:b5:be:82:4d:ac:5c:21:5b:d9:57:ba:fa:79:61: eb:d2:81:cc:41:48:7a:36:88:12:fd:15:b7:54:ae:b6:3e:b4: b0:0f:a2:0c:0c:60:77:18:ea:26:85:c1:6a:0b:a1:a3:06:ed: fb:0a:c5:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFBNDQxMTAvBgNVBAUTKDJDQzMzRkJDQjg2NDA4NDAyMDg5NEE3MkREMDg4NTA1 QUY5QkI2NkQwHhcNMjYxMTEyMjM1OTA2WhcNMjYxMTE5MjM1OTA2WjAYMRYwFAYD VQQDEw02YWY2NTJjYi02YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUyGjjA3Xe2ZlEahWYd+CXUQNZjljIDCPeqnBhTE+8V3Qt2rK+jbOPVn7NS1 LiLid1L9cUHxDVbGoQL15kMncAClUbYHDbaWVf49hWU0PlXgX2zqh2Zgg8a8oaFr ZnN4G/Fjqt382YZZtQAAWl83P4KZ68TNdczMaAUuIAQo7djqC6Uqlb5iRs41NMBC /B+oBtDzPQkIymJOsB67kRyqPZtcuSWohC3j6T8WBTa/V2HQwWZiu19Od3815KW8 Iz0ldA6QS+lXPgoV2um0hsdddSY89m0OgePF9Ns7mguxCtINdRRixFo+IrNmQ4U8 MbKoSAzPimdQQDt9ttGJcdCtTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXCInoY dh/P6XX6FmVTLNb5G/4dMB8GA1UdIwQYMBaAFCzDP7y4ZAhAIIlKct0IhQWvm7Zt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUE0NC85Q0MwMEE5Q0M3 RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NFQWdpVXB5M1FpRkJhLWJ0 bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xNTV92TGhrQ0VBZ2lVcHkzUWlGQmEtYnRtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUE0NC85Q0MwMEE5Q0M3RkYxMUVDOUJEQkZFNEJDNEY5QUUwMi9MTU1fdkxoa0NF QWdpVXB5M1FpRkJhLWJ0bTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3dk9kV9DZgZ27iiPD25Eo4clkGUz8KA2c230wBzbIIzvblqXfOpc5FSWa33E /Kpf5HtL7+0rRVNe9GaiKvH6VK26RP4nxza+lDd8aGz6rRh7VbEz6M9vXrxUUG27 FCDpX1CZ3eemQxCbmoTx+YkzlSe1A+5QjYnXXOhcHVR3CxlFMfnSHQdBeQ0Zy9Pw jbu/fxZdqrgL4OkPAikv3iD66Kmuy1pdEnvyO5g/4ecTNLeMmxQ7htwa01tlfaXs AkxsnmBFCBfaP2bqiLW+gk2sXCFb2Ve6+nlh69KBzEFIejaIEv0Vt1Sutj60sA+i DAxgdxjqJoXBaguhowbt+wrFUA== -----END CERTIFICATE-----Generated at Sun Nov 15 01:24:24 2026 by rpki-client