$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: Zk9PMOIv6ok0qrRoQuU2dxwIOMUXRZC5ZOxriCPcIys= Subject key identifier: 8D:00:C1:13:78:7F:12:C1:CB:C1:19:57:A9:2E:8C:69:38:FA:04:A9 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CFD Signing time: Tue 04 Nov 2025 18:09:44 +0000 Manifest this update: Tue 04 Nov 2025 18:09:43 +0000 Manifest next update: Tue 11 Nov 2025 18:09:43 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: doHlMVhc/eEkdDz+MlkeQlvZGrflvJaOC7l8LJBRPps=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) 3: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: Lb3RRFT3hAxRp0C7sz6QZHa1NXRIx5DemmAfbF9br5U=) 4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: 26Gc47qWjDTC53MNNE9xaiVTfxfy+II3G+DNkYRVJGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:09:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3336 (0xd08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Nov 4 18:09:43 2025 GMT Not After : Nov 11 18:09:43 2025 GMT Subject: CN=690a4167-adc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:75:57:82:22:c1:e0:2b:89:77:6e:ac:1e: 00:b4:59:9f:81:c9:0b:73:a7:1d:61:c2:0c:aa:29: 7d:59:57:8b:d0:af:9c:eb:78:88:f9:04:fd:ea:a4: a8:87:cf:8e:3a:aa:1d:95:aa:71:c5:c5:5d:e5:dc: 64:a9:ee:d4:64:58:79:52:1b:21:75:92:85:5b:37: 5b:48:3f:ec:15:9e:e6:32:de:93:d8:f7:db:0c:4c: 12:11:7f:e8:1a:3a:0e:c9:ed:5b:c9:e9:24:62:e5: 15:79:91:a0:0c:64:f7:b5:63:63:ca:be:77:ac:f3: 80:01:55:e4:e6:2d:a7:b4:3a:a1:96:ab:a0:f9:bd: d6:c9:b2:20:91:25:4f:72:9b:a4:ef:b1:24:95:91: d1:fd:1f:4a:0b:22:70:ac:34:16:61:f4:e6:bc:7a: b3:e4:5f:e2:cd:ec:58:d7:ad:f8:ab:83:26:e0:24: 02:1b:f2:58:8f:35:78:8f:56:69:67:a7:ee:33:cd: 61:96:2e:38:4d:e6:63:4a:cf:4a:76:7d:c2:15:60: 97:60:37:09:01:93:97:24:02:7d:89:08:81:b4:63: f9:6e:d3:8f:16:70:10:71:58:50:c2:6a:42:f6:1a: f5:bc:2e:b2:c0:75:5f:be:ea:03:26:80:1c:76:b0: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:00:C1:13:78:7F:12:C1:CB:C1:19:57:A9:2E:8C:69:38:FA:04:A9 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0b:1c:b8:77:a4:35:6f:b6:0f:9c:0b:32:a4:d8:2b:a9:03: b9:44:3b:83:31:be:04:43:0d:82:1e:17:f3:60:e6:a1:77:d0: 70:81:7b:5b:bb:f8:6d:a9:b0:c3:82:f6:2e:4b:4f:73:af:1b: ef:3f:db:f4:fa:cc:81:c2:1c:59:ed:3e:d9:97:73:99:c8:cc: ac:63:77:5a:d1:9d:c0:79:e1:31:a2:4b:71:b5:7f:23:f7:ba: 7e:a3:90:74:c1:25:cd:7c:bc:5e:dd:9e:af:9f:ca:38:2e:cc: 5e:a6:41:bc:8d:85:fe:9a:f3:57:a9:d2:bd:6e:20:f2:1f:65: 2f:ef:03:9a:fa:ce:cd:31:88:4d:c0:ee:cf:be:4b:8c:4e:5b: dc:79:27:97:ff:ed:52:fc:b2:3d:20:10:c2:cf:11:0d:5f:03: 81:68:67:da:1c:71:19:9d:23:4c:49:c1:79:a5:b1:b5:c4:2e: 7b:73:c0:40:28:95:a5:5a:d6:fe:ab:f2:04:6c:1b:6c:1e:59: 49:0e:7a:60:da:b4:36:5b:18:2c:fd:88:70:36:63:02:e1:3c: b5:6c:7b:d6:1c:38:04:13:bf:b9:bb:e3:0f:b6:b4:75:1a:7d: 54:c7:5c:3a:ae:35:4a:56:2c:ed:b9:14:ff:5b:d0:df:24:85: 55:74:71:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMTA0MTgwOTQzWhcNMjUxMTExMTgwOTQzWjAYMRYwFAYD VQQDEw02OTBhNDE2Ny1hZGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cN1V4IiweAriXdurB4AtFmfgckLc6cdYcIMqil9WVeL0K+c63iI+QT96qSo h8+OOqodlapxxcVd5dxkqe7UZFh5UhshdZKFWzdbSD/sFZ7mMt6T2PfbDEwSEX/o GjoOye1byekkYuUVeZGgDGT3tWNjyr53rPOAAVXk5i2ntDqhlqug+b3WybIgkSVP cpuk77EklZHR/R9KCyJwrDQWYfTmvHqz5F/izexY1634q4Mm4CQCG/JYjzV4j1Zp Z6fuM81hli44TeZjSs9Kdn3CFWCXYDcJAZOXJAJ9iQiBtGP5btOPFnAQcVhQwmpC 9hr1vC6ywHVfvuoDJoAcdrCQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0AwRN4 fxLBy8EZV6kujGk4+gSpMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTCxy4d6Q1b7YPnAsypNgrqQO5RDuDMb4EQw2CHhfzYOahd9BwgXtb u/htqbDDgvYuS09zrxvvP9v0+syBwhxZ7T7Zl3OZyMysY3da0Z3AeeExoktxtX8j 97p+o5B0wSXNfLxe3Z6vn8o4LsxepkG8jYX+mvNXqdK9biDyH2Uv7wOa+s7NMYhN wO7PvkuMTlvceSeX/+1S/LI9IBDCzxENXwOBaGfaHHEZnSNMScF5pbG1xC57c8BA KJWlWtb+q/IEbBtsHllJDnpg2rQ2Wxgs/YhwNmMC4Ty1bHvWHDgEE7+5u+MPtrR1 Gn1Ux1w6rjVKViztuRT/W9DfJIVVdHHQ -----END CERTIFICATE-----Generated at Wed Nov 5 11:55:17 2025 by rpki-client