$ rpki-client -vvvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: uVYFc8zwLjB3qPzJ9apI0s+wQJzvoZA8nJhjxRJheTw= Subject key identifier: 33:8D:71:28:38:63:65:3F:33:44:3A:43:B6:6C:FF:98:25:A2:39:F4 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0DA9 Signing time: Sun 20 Sep 2026 17:52:18 +0000 Manifest this update: Sun 20 Sep 2026 17:52:17 +0000 Manifest next update: Sun 27 Sep 2026 17:52:17 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: 668ddCYeoxu+ZysUgnGaDEkq585Pry5aPdjNv2eezds=) 2: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) 3: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Sep 20 17:52:17 2026 GMT Not After : Sep 27 17:52:17 2026 GMT Subject: CN=6ab01d51-6944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ff:d0:ef:f3:26:fb:13:bd:05:1f:8c:f8:3f: c3:d2:1f:38:1e:cb:2d:9f:05:90:67:71:f9:32:32: 3d:2f:31:21:d8:a9:ac:0c:8f:6b:e6:c4:bb:8c:31: b7:1d:6d:c4:6b:e0:21:04:df:a7:25:86:ef:a3:0e: c8:30:b5:de:4d:dd:85:ae:57:ed:da:3e:49:a5:93: d5:1a:16:c0:b1:43:34:d3:c1:18:e8:66:8b:ea:59: b2:98:34:a9:05:1f:dc:1c:66:22:34:66:bb:0d:6d: 2e:04:13:5f:12:54:05:94:a3:76:61:46:94:e7:7d: 02:18:e0:c3:0b:72:a7:67:7f:b9:fb:b0:fc:52:74: e2:f4:2e:24:77:cc:f4:2f:62:65:28:2f:f9:1a:2d: 4e:a9:18:13:4f:db:c8:2a:7f:09:de:df:00:96:36: 4a:52:74:35:ae:fc:be:7e:57:5d:ca:a1:da:c0:8e: fe:da:d9:21:fa:6a:94:28:1b:6f:e4:f0:35:1b:c3: fc:2e:85:a7:9f:fb:45:75:58:93:d1:6d:cb:1e:cf: 91:af:31:8e:1d:c9:cb:b8:f4:56:3d:c9:51:6e:12: 82:08:7a:b9:fe:e6:77:b6:1d:54:42:eb:fc:24:d1: 6f:06:90:4a:ef:14:ff:50:8e:82:73:12:df:e1:73: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:71:28:38:63:65:3F:33:44:3A:43:B6:6C:FF:98:25:A2:39:F4 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:12:4d:85:11:0a:dd:ab:77:6f:93:db:0d:47:80:8d:4c:be: ca:23:a0:e1:ab:ba:ad:1b:61:1f:3c:e4:ae:fd:3c:6b:06:ed: bb:02:3f:6f:87:53:23:60:7a:db:8f:66:e4:cf:fe:3b:ce:70: 18:72:5e:c6:21:44:0e:aa:0e:57:22:32:40:6b:48:b7:eb:39: 5c:9d:ac:9d:96:d9:1e:c4:71:28:1f:52:38:f5:f6:ec:c6:0d: c2:14:06:f4:51:be:80:bd:04:8a:f8:52:ad:2e:1e:37:95:f1: a9:96:98:c9:60:df:ea:9c:91:e3:5f:0d:5b:74:2f:2f:a9:9b: 1f:17:f9:0f:5e:cc:df:cb:06:92:9a:8c:1a:f7:3d:6f:cb:0f: bb:53:5f:bc:10:b6:25:8d:ef:ef:61:da:b6:32:04:fe:a0:9c: ba:73:47:ba:f6:6a:aa:e0:63:8a:81:ce:4c:fe:3f:de:4c:17: 40:71:e2:4f:3b:c8:16:dc:39:2a:dd:c7:ba:a7:92:b1:29:35: 1c:41:8c:15:33:fa:87:da:f5:42:fe:57:ce:80:d0:3b:c2:39: 4b:a4:09:76:b1:a6:4f:e2:40:d4:a5:6d:a1:99:70:c6:1a:24: 28:0a:6b:07:96:4f:d4:2d:79:a6:08:80:88:a6:44:e3:96:3d: ec:ad:59:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwOTIwMTc1MjE3WhcNMjYwOTI3MTc1MjE3WjAYMRYwFAYD VQQDEw02YWIwMWQ1MS02OTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmv/Q7/Mm+xO9BR+M+D/D0h84HsstnwWQZ3H5MjI9LzEh2KmsDI9r5sS7jDG3 HW3Ea+AhBN+nJYbvow7IMLXeTd2Frlft2j5JpZPVGhbAsUM008EY6GaL6lmymDSp BR/cHGYiNGa7DW0uBBNfElQFlKN2YUaU530CGODDC3KnZ3+5+7D8UnTi9C4kd8z0 L2JlKC/5Gi1OqRgTT9vIKn8J3t8AljZKUnQ1rvy+flddyqHawI7+2tkh+mqUKBtv 5PA1G8P8LoWnn/tFdViT0W3LHs+RrzGOHcnLuPRWPclRbhKCCHq5/uZ3th1UQuv8 JNFvBpBK7xT/UI6CcxLf4XPe3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDONcSg4 Y2U/M0Q6Q7Zs/5glojn0MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiBJNhREK3at3b5PbDUeAjUy+yiOg4au6rRthHzzkrv08awbtuwI/b4dTI2B6 249m5M/+O85wGHJexiFEDqoOVyIyQGtIt+s5XJ2snZbZHsRxKB9SOPX27MYNwhQG 9FG+gL0EivhSrS4eN5XxqZaYyWDf6pyR418NW3QvL6mbHxf5D17M38sGkpqMGvc9 b8sPu1NfvBC2JY3v72HatjIE/qCcunNHuvZqquBjioHOTP4/3kwXQHHiTzvIFtw5 Kt3HuqeSsSk1HEGMFTP6h9r1Qv5XzoDQO8I5S6QJdrGmT+JA1KVtoZlwxhokKApr B5ZP1C15pgiAiKZE45Y97K1ZXQ== -----END CERTIFICATE-----Generated at Tue Sep 22 11:28:16 2026 by rpki-client