$ rpki-client -vvvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: ZnQQqqg2/X+M57ShwtCbhTwjy1bEEBqE7T3Ou/twzl0= Subject key identifier: E3:FE:B2:7A:1A:FE:9E:31:4E:AC:B7:3C:22:3D:D7:7A:E1:6B:EE:25 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0DAA Signing time: Tue 22 Sep 2026 17:47:56 +0000 Manifest this update: Tue 22 Sep 2026 17:47:55 +0000 Manifest next update: Tue 29 Sep 2026 17:47:55 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: sqX7D/qFyhyjz7sK0UBzPE5q8okDE7VPMuMuF073aJU=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3519 (0xdbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Sep 22 17:47:55 2026 GMT Not After : Sep 29 17:47:55 2026 GMT Subject: CN=6ab2bf4c-4358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:03:f2:0c:b1:b9:34:da:0b:cf:c6:a1:1a:44: e1:be:a7:09:d6:ea:f6:7e:dc:82:68:1d:ab:a7:61: ed:09:aa:fd:c0:08:15:c4:81:df:a3:84:4f:ab:e9: b0:7d:1c:05:4b:61:dc:8c:ca:e0:68:6c:83:2b:ce: 5a:fa:cd:8a:9d:14:b8:5b:b6:5c:72:6c:a5:39:ce: 90:2c:f9:6e:b3:02:a4:77:5b:12:49:86:2d:c0:3f: 86:28:0a:95:ef:5c:80:40:98:c3:00:f7:29:8a:f1: 0f:32:30:5e:ac:0f:5d:52:40:35:aa:e9:e7:63:da: 46:0c:7f:73:08:04:73:3f:af:59:ce:42:29:ee:7d: 40:9b:fe:ff:6c:b2:80:eb:e5:85:8f:df:cd:94:50: 65:51:6b:7e:59:a9:c0:0b:ba:30:d8:09:ae:c5:dc: 10:31:b3:c3:6d:2d:09:8f:76:40:2b:f7:f6:b7:55: 8c:06:d2:6d:2a:51:e5:cf:f6:0f:47:6d:1b:fa:05: cb:b9:15:0a:8a:28:28:df:99:6a:17:6c:9f:f9:d5: cb:07:c5:b8:e2:01:cd:7a:c5:ec:b2:8a:41:1c:43: 52:98:bc:47:1f:a7:94:de:68:64:88:48:91:2e:71: 79:99:9a:17:73:b0:2a:5d:00:19:64:78:de:0b:c9: d4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FE:B2:7A:1A:FE:9E:31:4E:AC:B7:3C:22:3D:D7:7A:E1:6B:EE:25 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:f2:94:e0:a8:ab:a3:3f:8d:2b:4d:09:0b:d1:d6:dd:58:d3: 0e:96:6d:ce:4c:10:4d:97:68:a9:10:f8:a3:fe:fc:9d:5e:3b: 42:f2:39:10:99:a7:dd:be:e6:b1:76:64:d3:ee:47:5c:26:4a: d4:92:00:87:3f:7c:df:3f:b9:23:75:88:48:71:fc:7a:07:38: 8c:26:b2:db:20:f1:36:28:5f:d0:af:a0:be:f4:be:96:00:2b: bb:1f:dc:85:8e:ca:3f:5c:54:9f:ec:d4:88:9f:bd:d0:e1:75: dc:d8:58:95:16:7b:03:46:bd:65:12:3a:85:4a:8c:02:58:6d: 70:e7:ab:1e:f3:d7:c7:c3:5c:89:7d:68:a0:d3:f1:02:6b:b0: 9a:56:47:98:e5:75:fc:f3:aa:1a:34:9e:31:2b:87:ba:d9:df: df:1a:a4:2f:43:cb:a3:38:fc:6f:7b:f7:27:a1:9c:38:9f:0e: cb:a6:56:84:fe:6e:64:ab:c7:ed:6d:37:aa:40:25:dc:64:ce: 58:c2:08:8e:19:c0:68:3b:b7:d7:3a:df:2f:1b:32:37:61:b7: 21:91:b4:d2:c0:97:06:cf:9d:14:35:b2:74:9e:1c:fa:66:20: 17:63:44:8b:b5:62:4e:21:40:7b:5a:12:73:34:29:b9:df:77: 21:7d:c9:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwOTIyMTc0NzU1WhcNMjYwOTI5MTc0NzU1WjAYMRYwFAYD VQQDEw02YWIyYmY0Yy00MzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAPyDLG5NNoLz8ahGkThvqcJ1ur2ftyCaB2rp2HtCar9wAgVxIHfo4RPq+mw fRwFS2HcjMrgaGyDK85a+s2KnRS4W7ZccmylOc6QLPluswKkd1sSSYYtwD+GKAqV 71yAQJjDAPcpivEPMjBerA9dUkA1qunnY9pGDH9zCARzP69ZzkIp7n1Am/7/bLKA 6+WFj9/NlFBlUWt+WanAC7ow2AmuxdwQMbPDbS0Jj3ZAK/f2t1WMBtJtKlHlz/YP R20b+gXLuRUKiigo35lqF2yf+dXLB8W44gHNesXssopBHENSmLxHH6eU3mhkiEiR LnF5mZoXc7AqXQAZZHjeC8nU8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOP+snoa /p4xTqy3PCI913rha+4lMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMPKU4Kiroz+NK00JC9HW3VjTDpZtzkwQTZdoqRD4o/78nV47QvI5EJmn3b7m sXZk0+5HXCZK1JIAhz983z+5I3WISHH8egc4jCay2yDxNihf0K+gvvS+lgArux/c hY7KP1xUn+zUiJ+90OF13NhYlRZ7A0a9ZRI6hUqMAlhtcOerHvPXx8NciX1ooNPx AmuwmlZHmOV1/POqGjSeMSuHutnf3xqkL0PLozj8b3v3J6GcOJ8Oy6ZWhP5uZKvH 7W03qkAl3GTOWMIIjhnAaDu31zrfLxsyN2G3IZG00sCXBs+dFDWydJ4c+mYgF2NE i7ViTiFAe1oSczQpud93IX3JwQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:08:59 2026 by rpki-client