$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: TDqoMtyrU/kOCXyIOy98kUmnc3TwpnwCypiZYAxweyg= Subject key identifier: 79:76:6C:24:5F:37:6D:F0:AC:BA:D5:7A:97:E8:3C:9D:42:CC:35:30 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D66 Signing time: Tue 12 May 2026 18:00:22 +0000 Manifest this update: Tue 12 May 2026 18:00:22 +0000 Manifest next update: Tue 19 May 2026 18:00:22 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: 7tie3kg5Rrcb4PFlG9m8YAx/t+W3+3xwPPyN6AzhVFM=) 2: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 3: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) 4: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3451 (0xd7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: May 12 18:00:22 2026 GMT Not After : May 19 18:00:22 2026 GMT Subject: CN=6a036ab6-f20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:10:6b:16:26:d9:d9:96:8f:ce:1e:10:e0: b4:26:fe:11:cc:58:fe:cc:19:31:49:cf:43:a8:4b: b0:75:ff:95:c8:76:04:6e:cf:ca:11:15:ca:d4:1f: 4c:e9:14:12:8b:d8:92:b0:37:85:55:81:32:6f:c7: 60:1e:6a:0a:a1:11:36:32:1c:25:70:a3:f5:5b:a9: 5e:a0:72:8f:a2:a6:a9:ed:b4:01:fa:54:c4:ce:b8: 09:f2:31:c2:0d:4e:a4:39:a0:51:2d:2d:f5:47:22: a1:35:ae:a6:97:16:e1:f3:f3:74:dd:0d:e0:07:8d: 90:9a:35:c2:15:96:da:7a:1b:d4:91:9e:c3:a1:b7: ae:d4:a1:4c:d8:a8:17:19:c2:f3:93:2a:5b:5b:b0: 77:36:bb:e3:30:77:c2:af:3d:b3:8e:b5:68:2d:62: c2:7b:eb:5e:a1:01:87:4a:17:07:80:3c:79:37:09: 8c:56:79:03:23:36:f8:af:c2:a9:38:03:e8:83:b9: df:b2:60:d9:31:b3:56:b4:cd:ea:3c:e6:51:e8:4c: 87:4b:4f:7c:a7:98:7c:1f:63:da:1f:64:af:30:e8: db:a8:7a:80:69:09:1b:31:f1:3e:52:6a:3f:92:06: d3:d9:ed:84:c9:04:f3:d9:25:b7:34:6a:73:c0:03: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:76:6C:24:5F:37:6D:F0:AC:BA:D5:7A:97:E8:3C:9D:42:CC:35:30 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c9:02:52:ac:b0:e5:8d:f6:e4:72:44:59:4d:97:eb:ab:39: 85:7d:ab:e5:8e:c9:40:a0:69:59:53:49:ed:a4:77:9d:09:ac: 6c:3e:c9:6c:2f:dc:ec:70:ef:73:43:e1:da:7b:74:b6:15:8c: bd:8a:44:d9:58:9a:8c:5d:8b:89:46:c8:52:86:7f:95:03:1c: af:65:5b:22:59:95:15:00:85:e8:59:c4:c1:b9:fe:8e:d8:42: 7f:a3:6b:c8:09:4b:19:2b:f5:35:c4:03:1b:d2:d5:25:29:31: 56:9e:8a:8c:c6:ea:b0:d8:82:42:39:bf:f8:a1:9c:b2:f9:81: a9:a7:e0:20:72:b3:60:dc:32:28:26:0d:54:57:12:37:dd:e5: 22:59:28:d1:11:7b:3f:b8:ae:a0:e8:e5:65:0e:d8:af:89:75: 6f:df:bb:30:65:86:1e:d3:b9:6c:6d:03:8b:ca:a0:f0:99:09: 23:16:d3:b3:58:cb:2c:74:53:80:e5:96:31:f7:d6:a5:e1:46: 92:f9:7d:0d:3e:00:1b:1c:8d:70:96:20:80:a3:c4:67:93:63: a1:de:0e:36:af:34:d0:a6:8b:7e:81:5b:85:11:92:79:c4:72: c3:b7:d8:f8:a4:1a:30:3b:3a:75:bb:f9:c2:68:d8:60:68:4b: 6f:bd:0a:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwNTEyMTgwMDIyWhcNMjYwNTE5MTgwMDIyWjAYMRYwFAYD VQQDEw02YTAzNmFiNi1mMjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D4QaxYm2dmWj84eEOC0Jv4RzFj+zBkxSc9DqEuwdf+VyHYEbs/KERXK1B9M 6RQSi9iSsDeFVYEyb8dgHmoKoRE2MhwlcKP1W6leoHKPoqap7bQB+lTEzrgJ8jHC DU6kOaBRLS31RyKhNa6mlxbh8/N03Q3gB42QmjXCFZbaehvUkZ7Dobeu1KFM2KgX GcLzkypbW7B3NrvjMHfCrz2zjrVoLWLCe+teoQGHShcHgDx5NwmMVnkDIzb4r8Kp OAPog7nfsmDZMbNWtM3qPOZR6EyHS098p5h8H2PaH2SvMOjbqHqAaQkbMfE+Umo/ kgbT2e2EyQTz2SW3NGpzwANM0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHl2bCRf N23wrLrVepfoPJ1CzDUwMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATMkCUqyw5Y325HJEWU2X66s5hX2r5Y7JQKBpWVNJ7aR3nQmsbD7JbC/c7HDv c0Ph2nt0thWMvYpE2ViajF2LiUbIUoZ/lQMcr2VbIlmVFQCF6FnEwbn+jthCf6Nr yAlLGSv1NcQDG9LVJSkxVp6KjMbqsNiCQjm/+KGcsvmBqafgIHKzYNwyKCYNVFcS N93lIlko0RF7P7iuoOjlZQ7Yr4l1b9+7MGWGHtO5bG0Di8qg8JkJIxbTs1jLLHRT gOWWMffWpeFGkvl9DT4AGxyNcJYggKPEZ5Njod4ONq800KaLfoFbhRGSecRyw7fY +KQaMDs6dbv5wmjYYGhLb70KrA== -----END CERTIFICATE-----Generated at Wed May 13 09:53:17 2026 by rpki-client