$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: f64NADXNArvBkBg0ipsi9q52o6uH+84Yzimr7UdFt7w= Subject key identifier: DD:10:20:C2:E9:1B:FC:C0:06:77:6B:FC:D9:60:35:A4:F4:5B:01:1D Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CF2 Signing time: Sat 18 Oct 2025 18:46:09 +0000 Manifest this update: Sat 18 Oct 2025 18:46:08 +0000 Manifest next update: Sat 25 Oct 2025 18:46:08 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: lw2Se4oyZ9wpFyeczSZX6UOlEuoaSKDWPyTD20uo62I=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3323 (0xcfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Oct 18 18:46:08 2025 GMT Not After : Oct 25 18:46:08 2025 GMT Subject: CN=68f3e071-c27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:a3:bd:18:35:a3:77:54:23:8b:ea:6a:d9: f2:9a:0f:71:df:c0:a7:e5:78:ea:7d:17:56:b8:87: 48:81:17:6e:2c:0c:30:cf:a1:ea:5a:39:12:d4:96: 64:7d:45:0d:d2:b7:bb:3d:14:ad:a5:49:67:c0:01: dc:a0:f1:97:84:4d:35:b7:e5:11:c6:14:b8:2f:b5: 87:c2:37:07:a6:2a:47:8f:6c:44:d3:d4:44:fc:52: 79:bb:83:ed:c7:46:41:fc:cc:66:14:8e:95:65:76: a8:75:64:ad:44:23:13:06:01:4a:1a:19:62:0d:3a: 15:2d:77:d1:bc:09:2f:fb:20:cd:d7:d6:83:3c:80: e9:bc:3f:25:b4:e2:c4:a8:e8:0c:aa:6a:83:22:dd: c1:b6:54:df:43:0d:21:e3:40:c5:da:23:02:c7:f8: 77:ce:6f:29:9b:ec:7c:2a:eb:fd:25:fa:79:73:bc: a5:6c:da:47:a3:13:4c:46:ec:54:f5:e7:cd:ae:d3: a4:b8:fb:39:fc:b7:e4:f4:5f:33:0a:33:e6:f4:8c: 3f:f9:e3:35:6b:92:5c:c3:3e:30:c2:ef:ae:b9:58: 61:b8:4a:8e:32:cd:b7:2c:7c:bc:b6:33:d4:d7:15: f7:b1:cf:38:e8:42:83:75:d5:7e:df:4c:40:79:78: 77:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:10:20:C2:E9:1B:FC:C0:06:77:6B:FC:D9:60:35:A4:F4:5B:01:1D X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:97:34:7f:6d:df:cb:c9:bc:1d:d1:99:c4:30:f9:c4:56:49: 4d:66:8e:5a:30:60:98:99:02:c7:d8:dc:ff:82:6c:2e:8c:18: ed:8b:3b:4f:b7:d6:9b:53:2f:26:3b:c5:8d:7b:4e:9a:40:ea: c9:5b:7b:99:60:4c:7a:c3:8e:20:75:ef:c5:4d:da:69:c6:06: 24:a8:96:a3:05:a5:89:91:a5:a6:92:59:41:8c:7f:d6:9a:a6: 28:9f:51:04:b9:ba:bf:10:88:75:2c:32:e6:3c:c7:05:7b:7f: 18:3d:3a:5d:fa:6e:fe:50:cf:83:0c:d2:88:5f:6b:46:2c:15: 25:c3:d4:66:00:90:1a:b9:39:4f:ea:cd:d1:ef:c4:97:9e:29: 3a:73:12:fe:57:52:e7:5f:98:ae:d3:a7:6c:75:9d:a2:04:02: da:52:71:1b:ef:6b:8e:81:4c:0c:5f:50:c3:26:dd:88:c0:a2: 94:5f:93:b9:35:12:25:df:dd:17:d4:b4:24:db:70:13:01:1a: ac:9e:dc:97:55:b8:f0:1d:ad:53:b2:9a:d3:d3:6f:3f:74:dc: 5e:1e:b3:ec:09:fe:6a:23:bb:f5:12:f8:e5:c9:35:88:47:41: b0:de:b8:ff:d0:a5:93:1e:d8:89:a4:99:33:63:3f:17:18:5c: 44:2a:df:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMDE4MTg0NjA4WhcNMjUxMDI1MTg0NjA4WjAYMRYwFAYD VQQDEw02OGYzZTA3MS1jMjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlujvRg1o3dUI4vqatnymg9x38Cn5XjqfRdWuIdIgRduLAwwz6HqWjkS1JZk fUUN0re7PRStpUlnwAHcoPGXhE01t+URxhS4L7WHwjcHpipHj2xE09RE/FJ5u4Pt x0ZB/MxmFI6VZXaodWStRCMTBgFKGhliDToVLXfRvAkv+yDN19aDPIDpvD8ltOLE qOgMqmqDIt3BtlTfQw0h40DF2iMCx/h3zm8pm+x8Kuv9Jfp5c7ylbNpHoxNMRuxU 9efNrtOkuPs5/Lfk9F8zCjPm9Iw/+eM1a5Jcwz4wwu+uuVhhuEqOMs23LHy8tjPU 1xX3sc846EKDddV+30xAeXh3vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0QIMLp G/zABndr/NlgNaT0WwEdMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFlzR/bd/Lybwd0ZnEMPnEVklNZo5aMGCYmQLH2Nz/gmwujBjtiztP t9abUy8mO8WNe06aQOrJW3uZYEx6w44gde/FTdppxgYkqJajBaWJkaWmkllBjH/W mqYon1EEubq/EIh1LDLmPMcFe38YPTpd+m7+UM+DDNKIX2tGLBUlw9RmAJAauTlP 6s3R78SXnik6cxL+V1LnX5iu06dsdZ2iBALaUnEb72uOgUwMX1DDJt2IwKKUX5O5 NRIl390X1LQk23ATARqsntyXVbjwHa1TsprT028/dNxeHrPsCf5qI7v1EvjlyTWI R0Gw3rj/0KWTHtiJpJkzYz8XGFxEKt+Z -----END CERTIFICATE-----Generated at Mon Oct 20 10:46:22 2025 by rpki-client