$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: J0QC8Gi8BXbdbCstLuyUGKDpYdwKAPXVqJ/gsBOzIL4= Subject key identifier: 8A:AE:5B:2A:61:BD:23:4D:46:5C:55:53:19:4E:DD:01:58:4B:E1:81 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D59 Signing time: Thu 16 Apr 2026 17:54:16 +0000 Manifest this update: Thu 16 Apr 2026 17:54:16 +0000 Manifest next update: Thu 23 Apr 2026 17:54:16 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: /mo+zYAYqaaPwlkmbp0MgytrF3IARcnP3r8iqY6ii3g=) 2: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 3: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3438 (0xd6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Apr 16 17:54:16 2026 GMT Not After : Apr 23 17:54:16 2026 GMT Subject: CN=69e12248-fdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:59:cd:db:0c:6f:00:e8:61:6b:fe:4d:99:d1: c8:39:e4:db:91:d7:98:47:dd:d4:3f:24:e9:51:b4: f0:53:72:b0:4b:65:e1:23:aa:a1:13:b1:4d:ab:c3: 8f:3e:d9:7d:09:1e:08:40:d0:ec:e1:29:51:73:d6: 13:19:e4:15:77:e0:28:da:b9:ba:34:92:ea:ac:d4: d2:66:f0:66:5a:5c:36:92:89:b0:92:1b:f9:7c:75: 49:8d:78:1e:e7:60:b0:85:12:b2:95:1c:bd:eb:0d: ea:32:10:b0:25:5d:2e:85:5b:15:41:1a:33:81:23: e3:66:a2:11:10:05:e2:0f:f0:65:21:cc:b0:7f:c6: 14:2b:0b:37:5c:65:a9:e6:7f:32:2b:22:ff:95:61: 35:5d:77:60:ff:55:84:55:ca:81:6e:e9:4d:4f:72: 05:2d:16:e5:ff:18:06:60:6c:c2:6e:da:64:a1:ad: 2a:88:be:6b:b1:55:0a:f0:5f:7f:d9:8d:bc:29:91: 3b:26:b7:c1:ae:95:49:5c:34:1e:d9:f7:f9:e0:a7: e3:9e:0a:7f:a9:fe:cb:c6:39:3c:9a:09:cd:c5:4b: d4:76:b5:85:2e:68:8c:a5:88:fc:37:32:be:55:8d: c9:a3:59:35:77:00:f8:cf:08:00:17:1b:f3:91:5e: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AE:5B:2A:61:BD:23:4D:46:5C:55:53:19:4E:DD:01:58:4B:E1:81 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:25:d5:44:b7:8c:1e:83:ac:aa:1a:0c:69:c9:49:76:95:a5: 9b:e8:fb:74:53:6c:81:a0:bd:84:bb:af:54:71:43:25:20:3a: 8b:ea:f2:74:0a:9b:39:cd:4b:96:21:e8:ec:db:95:69:22:e6: 07:78:52:17:d8:31:ed:c1:41:14:e5:68:c6:f7:20:e7:81:15: 3a:0d:cf:89:79:d0:37:af:8e:83:54:32:a7:78:f5:5d:1b:34: e9:6e:e3:08:10:b5:fc:89:29:9d:b9:0b:b7:98:30:21:e7:44: 7c:c9:e5:51:b7:8f:cc:54:ef:98:3e:67:0b:2d:40:f4:06:9e: 98:e2:ae:7c:12:80:44:17:05:57:51:17:d6:26:8b:2b:2b:b9: fc:bb:70:9c:e0:62:b2:7a:89:0a:68:5f:92:a0:66:c3:d7:e1: cd:ab:b0:35:92:32:a7:0b:97:da:a8:7d:43:6f:60:cf:f1:61: 88:85:ec:5e:c6:ea:b7:de:f0:0f:53:4a:f2:62:b0:fe:19:47: db:ac:f7:75:fa:d5:91:1a:80:4c:48:ec:35:2c:70:b3:e3:a4: 78:73:83:65:41:dd:b1:8c:e7:ad:14:af:54:ec:ea:58:d7:bb: e7:c8:6f:63:c9:7b:1a:71:c0:46:25:95:88:66:e6:15:39:88: da:d3:62:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwNDE2MTc1NDE2WhcNMjYwNDIzMTc1NDE2WjAYMRYwFAYD VQQDEw02OWUxMjI0OC1mZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1nN2wxvAOhha/5NmdHIOeTbkdeYR93UPyTpUbTwU3KwS2XhI6qhE7FNq8OP Ptl9CR4IQNDs4SlRc9YTGeQVd+Ao2rm6NJLqrNTSZvBmWlw2komwkhv5fHVJjXge 52CwhRKylRy96w3qMhCwJV0uhVsVQRozgSPjZqIREAXiD/BlIcywf8YUKws3XGWp 5n8yKyL/lWE1XXdg/1WEVcqBbulNT3IFLRbl/xgGYGzCbtpkoa0qiL5rsVUK8F9/ 2Y28KZE7JrfBrpVJXDQe2ff54Kfjngp/qf7Lxjk8mgnNxUvUdrWFLmiMpYj8NzK+ VY3Jo1k1dwD4zwgAFxvzkV6q4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIquWyph vSNNRlxVUxlO3QFYS+GBMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCXVRLeMHoOsqhoMaclJdpWlm+j7dFNsgaC9hLuvVHFDJSA6i+rydAqbOc1L liHo7NuVaSLmB3hSF9gx7cFBFOVoxvcg54EVOg3PiXnQN6+Og1Qyp3j1XRs06W7j CBC1/IkpnbkLt5gwIedEfMnlUbePzFTvmD5nCy1A9AaemOKufBKARBcFV1EX1iaL Kyu5/LtwnOBisnqJCmhfkqBmw9fhzauwNZIypwuX2qh9Q29gz/FhiIXsXsbqt97w D1NK8mKw/hlH26z3dfrVkRqATEjsNSxws+OkeHODZUHdsYznrRSvVOzqWNe758hv Y8l7GnHARiWViGbmFTmI2tNiww== -----END CERTIFICATE-----Generated at Fri Apr 17 15:47:38 2026 by rpki-client