$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: kD/Y9EVvzEyhi84ozse5cgtygx7so8GPb8KFNan/XIY= Subject key identifier: D9:AD:18:EF:E8:11:89:54:60:7D:8D:29:EB:AC:5B:FA:2D:37:95:73 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D8D Signing time: Tue 28 Jul 2026 18:04:16 +0000 Manifest this update: Tue 28 Jul 2026 18:04:16 +0000 Manifest next update: Tue 04 Aug 2026 18:04:16 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: VfK1V3bVP4w9m7d+1Lzk/RculMkVIcXgl0GN3fm9X4A=) 2: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) 3: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Jul 28 18:04:16 2026 GMT Not After : Aug 4 18:04:16 2026 GMT Subject: CN=6a68ef20-9d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:fb:45:b0:69:5c:14:28:1b:49:1d:b5:ad: 80:42:a9:39:46:e5:30:50:59:34:d4:17:37:fb:85: e5:10:10:0e:dc:6f:c5:33:7a:83:83:65:7a:fd:84: d3:44:cb:65:16:a3:db:66:1b:17:b5:66:7d:26:e9: fe:2d:6b:50:95:5d:ef:48:b6:ad:ff:05:34:d2:b8: a5:cd:1f:58:cc:92:76:96:1d:41:49:74:3c:af:ae: 8f:2f:63:85:bd:3f:d3:28:65:b3:3e:29:d5:19:e8: a9:86:6b:69:e5:35:d8:31:74:e9:a6:40:e8:fe:79: 67:52:58:b6:90:96:2f:7b:4b:fb:40:f6:65:0c:d1: e4:13:9c:cd:af:ba:d2:38:39:da:51:50:97:f1:3e: bf:0e:95:8f:de:45:67:4c:ca:4d:a5:d0:80:5d:18: 0f:0f:37:ff:32:8b:aa:25:30:db:19:5a:81:88:9c: fc:44:85:b5:35:35:4d:2a:24:28:51:24:d2:f8:ed: af:29:1e:01:a2:ff:05:2c:27:d4:16:49:34:bb:c1: 53:c9:11:74:bb:6e:c2:10:22:21:d3:21:a6:11:b8: aa:5f:0b:6b:61:7e:b6:c8:e9:e5:63:32:ac:1d:08: 48:c1:76:e1:09:2e:6b:11:b7:01:99:08:8d:9b:47: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AD:18:EF:E8:11:89:54:60:7D:8D:29:EB:AC:5B:FA:2D:37:95:73 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:4f:0e:3b:e0:ea:b7:ae:6e:7c:fb:5a:2a:95:04:94:65:5d: c0:e8:03:f3:32:bd:d3:0b:24:f5:bd:1a:9b:e5:cf:53:1b:fe: c1:3b:11:b8:be:75:27:f3:b5:20:0f:ef:ab:aa:eb:4c:61:0b: 0b:b5:b1:66:00:ef:55:d5:ba:af:e6:38:81:43:45:03:8d:7c: a6:12:3d:35:65:e5:79:5e:59:36:37:51:6a:be:ce:41:61:35: 0a:e6:2a:a3:de:db:fc:f0:30:2b:f5:59:f1:11:c4:05:79:e4: 33:85:ee:0a:74:81:ec:7b:84:c2:f5:3d:f3:07:16:c4:1b:6e: 74:2a:43:00:75:2b:7c:1e:55:12:07:84:67:8c:d6:4d:0b:3f: bd:68:58:3a:48:e8:9d:30:87:e1:30:51:77:ea:00:1f:7d:0b: 7a:43:4e:64:3b:35:da:be:45:8a:f2:f8:d4:30:c5:d7:17:d7: 5d:26:f0:1a:d3:f3:c2:a3:1e:8c:d8:15:37:b8:da:3f:fc:16: 66:b2:5d:7f:54:4e:73:ce:26:d4:3f:29:f5:b4:7a:ae:fe:94: c2:46:fc:d8:eb:a0:a7:64:3f:d8:ff:94:30:c2:0f:d3:cc:72: 5f:0a:d8:23:31:90:78:4b:2d:53:bc:ab:93:09:ca:36:09:16: 0d:51:28:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwNzI4MTgwNDE2WhcNMjYwODA0MTgwNDE2WjAYMRYwFAYD VQQDEw02YTY4ZWYyMC05ZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcr7RbBpXBQoG0kdta2AQqk5RuUwUFk01Bc3+4XlEBAO3G/FM3qDg2V6/YTT RMtlFqPbZhsXtWZ9Jun+LWtQlV3vSLat/wU00rilzR9YzJJ2lh1BSXQ8r66PL2OF vT/TKGWzPinVGeiphmtp5TXYMXTppkDo/nlnUli2kJYve0v7QPZlDNHkE5zNr7rS ODnaUVCX8T6/DpWP3kVnTMpNpdCAXRgPDzf/MouqJTDbGVqBiJz8RIW1NTVNKiQo USTS+O2vKR4Bov8FLCfUFkk0u8FTyRF0u27CECIh0yGmEbiqXwtrYX62yOnlYzKs HQhIwXbhCS5rEbcBmQiNm0cXWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmtGO/o EYlUYH2NKeusW/otN5VzMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh08OO+Dqt65ufPtaKpUElGVdwOgD8zK90wsk9b0am+XPUxv+wTsRuL51J/O1 IA/vq6rrTGELC7WxZgDvVdW6r+Y4gUNFA418phI9NWXleV5ZNjdRar7OQWE1CuYq o97b/PAwK/VZ8RHEBXnkM4XuCnSB7HuEwvU98wcWxBtudCpDAHUrfB5VEgeEZ4zW TQs/vWhYOkjonTCH4TBRd+oAH30LekNOZDs12r5FivL41DDF1xfXXSbwGtPzwqMe jNgVN7jaP/wWZrJdf1ROc84m1D8p9bR6rv6Uwkb82Ougp2Q/2P+UMMIP08xyXwrY IzGQeEstU7yrkwnKNgkWDVEohQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:44:20 2026 by rpki-client