$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: rOQ8eLd1/k3X8PkHjc3jjOgqZ9FiD38W7nyVpCG9MJk= Subject key identifier: 12:91:03:55:92:E2:08:55:98:7B:52:72:F6:E6:39:A9:D8:31:47:2E Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CD5 Signing time: Fri 22 Aug 2025 18:13:07 +0000 Manifest this update: Fri 22 Aug 2025 18:13:07 +0000 Manifest next update: Fri 29 Aug 2025 18:13:07 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: EW3yS+SsV8shWXMGv1yRtBzT8tPNi1Ss3HSpU/7dOxQ=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3294 (0xcde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Aug 22 18:13:07 2025 GMT Not After : Aug 29 18:13:07 2025 GMT Subject: CN=68a8b333-4eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:58:dd:19:cf:2f:db:55:c9:55:0d:3f:32: f5:9d:31:5c:29:f6:db:2c:45:f0:b2:34:78:0c:65: f3:13:30:0b:89:1d:3f:9a:f1:cb:8c:e1:bb:4c:d7: eb:75:40:ee:eb:49:4f:9e:55:d2:28:f4:c2:e0:22: 3b:d4:93:70:bc:ba:a9:17:76:8a:6d:ef:8f:82:cf: cb:be:1d:5d:9a:7c:b0:ff:07:8b:92:88:2d:ee:17: 77:ee:18:d5:e3:2f:b8:56:d1:89:45:45:3d:87:c9: c6:01:d7:e3:be:b0:60:39:95:af:ea:9a:b3:d2:31: 84:23:73:0b:86:64:9d:4e:42:c7:5b:99:8a:64:ba: 79:8e:73:70:19:76:c3:f6:02:7c:19:f8:25:c6:8d: ed:06:02:e2:3b:dc:82:f5:ba:ab:95:19:55:74:6b: af:b0:4e:8d:4a:9d:b5:03:18:30:26:4e:89:ad:a9: 3d:11:e5:93:59:8b:3f:b7:7f:32:c2:12:b7:93:6f: 54:68:9a:7a:8c:0a:8e:87:d9:dc:39:ef:92:02:92: e5:ca:7f:d8:c6:e1:e2:6d:8c:25:0a:f4:bd:15:f7: f8:6e:49:28:19:c1:e7:a9:a4:9f:98:fc:59:72:d5: a6:6c:1f:a6:43:f9:0a:a1:8d:bb:59:6e:81:06:24: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:91:03:55:92:E2:08:55:98:7B:52:72:F6:E6:39:A9:D8:31:47:2E X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ec:28:8e:1b:d7:a6:60:e4:2b:e5:aa:a1:ba:e7:e0:d2:b9: a3:e5:c9:cc:e5:e6:db:a3:4c:3e:31:7d:35:72:96:35:dc:25: dd:38:c5:70:c8:8c:64:20:2f:77:23:80:08:66:9b:0a:c2:81: 3b:37:42:86:9d:80:d8:07:f1:0e:df:80:0e:e0:c8:d5:9b:bb: 26:ef:09:c9:46:59:df:19:6b:2e:c5:8e:53:cb:9e:a3:a0:9b: e3:f1:10:e5:5a:0d:f4:f2:df:8f:af:4d:10:3c:3b:ed:02:4a: bf:60:c4:86:72:4f:63:1c:b2:80:aa:84:2f:fb:c9:3e:06:58: fb:75:89:7b:bc:78:15:e6:be:d3:01:1b:0c:45:7f:83:c6:b8: 5f:d5:5e:60:b4:93:e2:e7:95:ea:05:5d:0d:35:dc:38:0d:52: bf:9c:5b:03:c4:84:88:8c:27:40:31:fa:c9:63:41:96:08:8a: af:4e:87:6a:d3:2e:fa:c7:eb:cb:c3:32:34:b0:d8:95:0f:e0: 41:cb:42:eb:b3:e7:16:a8:61:24:39:3b:05:de:02:5d:e7:f2: 02:df:2d:22:15:5e:0b:ec:62:ae:b7:68:10:10:85:d6:f0:6a: 3a:4e:75:d7:ff:2b:d5:00:c4:b1:02:aa:60:15:a6:2a:46:1e: e1:1f:65:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwODIyMTgxMzA3WhcNMjUwODI5MTgxMzA3WjAYMRYwFAYD VQQDEw02OGE4YjMzMy00ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySRY3RnPL9tVyVUNPzL1nTFcKfbbLEXwsjR4DGXzEzALiR0/mvHLjOG7TNfr dUDu60lPnlXSKPTC4CI71JNwvLqpF3aKbe+Pgs/Lvh1dmnyw/weLkogt7hd37hjV 4y+4VtGJRUU9h8nGAdfjvrBgOZWv6pqz0jGEI3MLhmSdTkLHW5mKZLp5jnNwGXbD 9gJ8Gfglxo3tBgLiO9yC9bqrlRlVdGuvsE6NSp21AxgwJk6Jrak9EeWTWYs/t38y whK3k29UaJp6jAqOh9ncOe+SApLlyn/YxuHibYwlCvS9Fff4bkkoGcHnqaSfmPxZ ctWmbB+mQ/kKoY27WW6BBiSlmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKRA1WS 4ghVmHtScvbmOanYMUcuMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+7CiOG9emYOQr5aqhuufg0rmj5cnM5ebbo0w+MX01cpY13CXdOMVw yIxkIC93I4AIZpsKwoE7N0KGnYDYB/EO34AO4MjVm7sm7wnJRlnfGWsuxY5Ty56j oJvj8RDlWg308t+Pr00QPDvtAkq/YMSGck9jHLKAqoQv+8k+Blj7dYl7vHgV5r7T ARsMRX+Dxrhf1V5gtJPi55XqBV0NNdw4DVK/nFsDxISIjCdAMfrJY0GWCIqvTodq 0y76x+vLwzI0sNiVD+BBy0Lrs+cWqGEkOTsF3gJd5/IC3y0iFV4L7GKut2gQEIXW 8Go6TnXX/yvVAMSxAqpgFaYqRh7hH2Xw -----END CERTIFICATE-----Generated at Sat Aug 23 17:05:39 2025 by rpki-client