$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: jonVUC3e9CSfUHUfd4maYp2u6kcWM85HdtCxSIYSLPg= Subject key identifier: 94:19:02:0D:EE:2C:8E:11:A9:66:31:53:CE:DD:A3:EF:AE:4A:79:B0 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CCE Signing time: Fri 08 Aug 2025 18:19:33 +0000 Manifest this update: Fri 08 Aug 2025 18:19:32 +0000 Manifest next update: Fri 15 Aug 2025 18:19:32 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: RXlPtwps68po5XzFFlN+yFPrrP1eKVOLFlXMI6MBLc0=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3287 (0xcd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Aug 8 18:19:32 2025 GMT Not After : Aug 15 18:19:32 2025 GMT Subject: CN=68963fb5-f656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:e2:48:54:93:08:95:f7:f2:e8:ce:5a:2f: 03:fa:a8:38:0b:3b:a8:45:95:c3:c3:a9:77:58:29: ee:4b:ad:4f:47:08:08:2a:02:f4:19:4d:39:b6:bd: ae:7d:2d:d0:8f:15:3c:9f:fe:cc:0b:e2:74:95:38: aa:eb:40:dd:f2:f2:0c:c1:5a:4c:25:29:30:6e:7c: bc:7f:6a:42:73:81:9c:e0:48:f5:f3:68:65:f5:af: 91:ed:2c:31:1c:6e:33:56:00:22:b5:f5:e1:a8:e9: 72:9d:02:91:bb:f5:3f:f2:8e:1a:77:2a:b0:d6:91: e2:fd:d0:c4:62:81:47:bc:69:ec:15:1a:41:b4:ad: 29:ed:b3:49:75:4d:67:20:a9:d7:ab:9f:8a:04:11: 8f:6a:63:63:20:81:75:52:fd:11:cd:5c:60:82:ac: d0:1f:d7:14:26:31:24:b8:4d:0c:4c:88:c1:e8:fb: d3:e2:39:f5:0e:78:2a:e0:2e:bd:73:3a:d9:b8:97: c7:37:22:f3:54:a2:f3:3a:84:70:98:74:fa:1e:c9: 8b:c2:40:8e:78:ef:96:70:91:4c:73:a4:72:ac:fe: 6f:b6:1a:d4:12:c6:0d:36:f5:3c:bf:b9:17:3b:c9: 16:bb:18:c8:91:11:ad:45:db:09:26:7c:35:7d:84: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:02:0D:EE:2C:8E:11:A9:66:31:53:CE:DD:A3:EF:AE:4A:79:B0 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:9e:ea:cb:5d:c9:a2:86:b5:92:44:32:63:a5:25:2a:88: 3a:42:15:4a:2b:85:8e:23:37:6d:67:35:61:79:69:3e:bd:07: f8:47:86:a5:65:c3:b4:ae:99:3e:2c:af:d3:0b:5a:69:48:ac: e1:9a:1f:0d:3e:79:db:3f:99:b2:e4:39:5c:13:5c:ca:36:f0: 39:19:31:0a:35:70:dd:94:f0:87:26:a9:49:24:ca:67:18:ed: 65:9e:5c:b3:2a:4b:7d:62:f5:cd:7c:1a:d6:a8:6d:3e:7a:f6: 01:88:05:f9:ed:44:79:88:c7:d8:e5:7a:a5:97:18:62:cd:0c: 72:bc:a6:b3:55:bc:c6:35:8c:86:0c:25:e2:d8:02:bf:3a:3e: f8:9c:ad:98:51:e7:5e:08:16:71:aa:1d:a5:b4:a9:c5:85:5d: df:e2:87:2f:38:ba:dd:13:1d:f1:90:27:aa:8d:a0:3b:ba:3d: e7:56:a9:7f:b2:ec:64:d3:01:e0:98:58:03:3a:e4:6a:27:29: 20:de:a6:b8:35:b3:d5:bd:48:d7:f1:05:57:7d:60:d7:bc:15: cf:cc:e9:ea:cc:8a:3d:eb:22:3b:fb:ae:3e:94:e2:49:df:4b: 37:8f:2c:66:bc:51:20:38:34:46:8a:a8:be:fd:fd:da:de:40: ee:5b:76:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwODA4MTgxOTMyWhcNMjUwODE1MTgxOTMyWjAYMRYwFAYD VQQDEw02ODk2M2ZiNS1mNjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/TiSFSTCJX38ujOWi8D+qg4CzuoRZXDw6l3WCnuS61PRwgIKgL0GU05tr2u fS3QjxU8n/7MC+J0lTiq60Dd8vIMwVpMJSkwbny8f2pCc4Gc4Ej182hl9a+R7Swx HG4zVgAitfXhqOlynQKRu/U/8o4adyqw1pHi/dDEYoFHvGnsFRpBtK0p7bNJdU1n IKnXq5+KBBGPamNjIIF1Uv0RzVxggqzQH9cUJjEkuE0MTIjB6PvT4jn1Dngq4C69 czrZuJfHNyLzVKLzOoRwmHT6HsmLwkCOeO+WcJFMc6RyrP5vthrUEsYNNvU8v7kX O8kWuxjIkRGtRdsJJnw1fYRNkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQZAg3u LI4RqWYxU87do++uSnmwMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiH57qy13Jooa1kkQyY6UlKog6QhVKK4WOIzdtZzVheWk+vQf4R4al ZcO0rpk+LK/TC1ppSKzhmh8NPnnbP5my5DlcE1zKNvA5GTEKNXDdlPCHJqlJJMpn GO1lnlyzKkt9YvXNfBrWqG0+evYBiAX57UR5iMfY5XqllxhizQxyvKazVbzGNYyG DCXi2AK/Oj74nK2YUedeCBZxqh2ltKnFhV3f4ocvOLrdEx3xkCeqjaA7uj3nVql/ suxk0wHgmFgDOuRqJykg3qa4NbPVvUjX8QVXfWDXvBXPzOnqzIo96yI7+64+lOJJ 30s3jyxmvFEgODRGiqi+/f3a3kDuW3Yr -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:22 2025 by rpki-client