$ rpki-client -vvvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: HoyTO7dLguBPrbbvjV7mqZCSxDPfFqy0P1qFcuKs+Yw= Subject key identifier: BC:67:01:84:DD:DF:CB:5F:42:65:56:C4:DB:43:D0:9C:47:04:C0:AD Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0DA4 Signing time: Thu 10 Sep 2026 17:53:22 +0000 Manifest this update: Thu 10 Sep 2026 17:53:21 +0000 Manifest next update: Thu 17 Sep 2026 17:53:21 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: zcTEL/zwVADSlPJX3XXnAx1z9RmtIC8awpskn3fC070=) 2: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 3: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) 4: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3513 (0xdb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Sep 10 17:53:21 2026 GMT Not After : Sep 17 17:53:21 2026 GMT Subject: CN=6aa2ee92-0ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:c2:d3:11:4b:ca:71:3f:10:ff:c6:6d:8f: 31:ae:3e:a8:bc:5c:5b:c7:e0:6f:d0:1b:f5:95:0f: d3:57:6d:8c:17:20:fd:ff:1a:92:6f:87:47:83:c8: 18:4d:fa:bb:88:e6:44:eb:03:74:08:4a:41:46:3f: 58:3a:f1:7a:9c:32:35:e5:0f:33:23:52:f0:46:b4: bd:f6:1b:d2:e1:fe:73:bc:21:95:c0:98:c7:29:32: 49:e6:dd:24:88:1f:08:53:e8:d5:07:72:d5:59:4e: fe:d5:6d:8a:03:9f:cc:1f:c5:18:99:ef:4b:6a:7f: 8c:5d:d1:a2:5a:e7:06:0c:dd:f4:3a:c2:c8:9b:d0: 97:20:a8:25:18:fd:dc:40:a6:3e:d6:b5:d1:b5:51: a1:ce:ee:37:c5:a2:c8:36:17:ad:59:2c:9b:38:ed: ee:9e:52:25:20:b0:aa:b3:05:e7:39:8d:14:16:11: b5:83:86:76:59:d9:af:1a:61:4c:e7:ed:e1:55:67: 70:c7:13:99:55:0e:01:aa:cb:77:11:d0:17:a0:34: bf:c5:5b:95:58:7b:a4:7f:4f:69:27:21:42:9b:b7: 0d:ef:49:07:9b:76:54:33:47:ad:08:5b:1e:69:0a: 5f:e7:31:ea:bd:f3:c4:68:bd:20:3b:05:09:b1:b8: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:67:01:84:DD:DF:CB:5F:42:65:56:C4:DB:43:D0:9C:47:04:C0:AD X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:52:0d:c6:55:8f:32:5e:05:cf:38:c3:67:25:ed:d9:4e:f5: 81:e3:23:d1:6d:9b:0b:0c:01:b4:96:a5:c2:c5:12:32:75:48: 84:f1:cd:6f:ed:63:09:7c:12:c4:99:b6:34:57:33:d1:dd:71: dc:d3:15:ef:40:2d:80:56:81:20:0b:a3:44:f6:8a:46:f6:50: 49:b2:da:b0:ff:29:68:b4:e4:d7:b9:a1:2c:45:b3:f4:16:e8: f8:45:11:b8:ef:93:ef:9a:8c:89:e4:9e:44:eb:11:21:5e:95: fd:b5:51:26:3f:a9:59:65:96:82:f2:f8:32:f5:95:57:df:b5: 06:b7:39:5b:0b:02:69:18:95:2f:1c:7f:70:4b:a9:cf:a2:82: 3a:20:2c:8c:1e:24:74:8e:dc:61:59:c2:b9:4f:26:13:7e:1f: e3:87:71:ff:1b:f7:1d:d7:84:a9:ef:27:aa:ae:0c:ec:48:9d: 98:d7:d8:ef:ea:49:70:e5:bb:fa:51:71:27:c4:e2:d6:04:99: b7:48:5a:14:d9:e7:3f:f0:f0:b9:cc:2a:30:4e:88:87:3d:8f: 62:e4:9e:11:ad:91:d4:fa:3b:2b:3f:83:19:83:fb:0a:67:c7: a1:0e:8e:19:7b:74:c9:53:55:93:14:d6:7f:43:29:8a:cf:2f: 54:27:d4:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwOTEwMTc1MzIxWhcNMjYwOTE3MTc1MzIxWjAYMRYwFAYD VQQDEw02YWEyZWU5Mi0wZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPfC0xFLynE/EP/GbY8xrj6ovFxbx+Bv0Bv1lQ/TV22MFyD9/xqSb4dHg8gY Tfq7iOZE6wN0CEpBRj9YOvF6nDI15Q8zI1LwRrS99hvS4f5zvCGVwJjHKTJJ5t0k iB8IU+jVB3LVWU7+1W2KA5/MH8UYme9Lan+MXdGiWucGDN30OsLIm9CXIKglGP3c QKY+1rXRtVGhzu43xaLINhetWSybOO3unlIlILCqswXnOY0UFhG1g4Z2WdmvGmFM 5+3hVWdwxxOZVQ4Bqst3EdAXoDS/xVuVWHukf09pJyFCm7cN70kHm3ZUM0etCFse aQpf5zHqvfPEaL0gOwUJsbgKVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxnAYTd 38tfQmVWxNtD0JxHBMCtMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaVINxlWPMl4FzzjDZyXt2U71geMj0W2bCwwBtJalwsUSMnVIhPHNb+1jCXwS xJm2NFcz0d1x3NMV70AtgFaBIAujRPaKRvZQSbLasP8paLTk17mhLEWz9Bbo+EUR uO+T75qMieSeROsRIV6V/bVRJj+pWWWWgvL4MvWVV9+1Brc5WwsCaRiVLxx/cEup z6KCOiAsjB4kdI7cYVnCuU8mE34f44dx/xv3HdeEqe8nqq4M7EidmNfY7+pJcOW7 +lFxJ8Ti1gSZt0haFNnnP/DwucwqME6Ihz2PYuSeEa2R1Po7Kz+DGYP7CmfHoQ6O GXt0yVNVkxTWf0Mpis8vVCfUBA== -----END CERTIFICATE-----Generated at Fri Sep 11 09:25:38 2026 by rpki-client