$ rpki-client -vvvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: wWbnHz+rrOlXLKUjSPb/RWNBlOIuGxDHNriuxSr3214= Subject key identifier: 0C:26:7A:B9:9B:AB:8E:6D:E0:52:70:F7:2A:7C:5A:18:49:39:48:EC Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0DBC Signing time: Wed 28 Oct 2026 18:00:17 +0000 Manifest this update: Wed 28 Oct 2026 18:00:17 +0000 Manifest next update: Wed 04 Nov 2026 18:00:17 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: hFXsj/WZaeDjZxQzQ0K0C8qrn+EvHC8gbWXRCOTr0vQ=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3537 (0xdd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Oct 28 18:00:17 2026 GMT Not After : Nov 4 18:00:17 2026 GMT Subject: CN=6ae23831-fe5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:c8:c2:6b:59:9b:3d:11:b2:aa:be:be:7d: 5c:06:08:90:6c:c8:24:12:c4:4d:94:b0:20:ed:61: 7d:b9:1d:6c:00:a4:5f:27:34:7c:ae:bd:c3:1d:a4: 7d:fb:3b:2b:d7:4f:63:46:74:70:d2:32:c6:ae:2e: ae:5f:c7:b4:32:e4:27:fd:41:c4:dd:11:19:da:60: 26:ba:d8:94:fb:a1:30:7d:83:28:a5:15:05:13:ca: c5:6b:2f:7c:f7:d3:02:eb:f1:de:98:5f:30:01:26: b4:32:bb:9b:a3:d6:56:dd:0d:6a:e5:23:25:ac:c8: 4e:12:43:9c:e8:c2:f7:6c:e7:e3:ee:1e:94:02:4a: d2:3a:39:98:d2:16:52:b5:13:56:05:13:75:08:d3: c5:80:dd:08:15:6f:e8:66:15:9d:52:cb:c1:6b:52: ad:a3:d5:57:5d:6c:df:f1:aa:70:d7:58:a2:5f:0c: ab:df:df:e2:c8:27:c1:77:e4:3e:d0:a0:3e:27:a4: c3:58:b1:d7:86:af:c9:7c:f9:65:be:e5:e1:b3:e7: 4c:d0:7b:1f:19:00:29:8d:d7:d6:e8:f1:de:e4:a9: aa:58:a0:ef:5d:69:e3:72:b9:25:6b:4f:a5:65:de: 89:3b:52:af:d5:8c:b6:75:6f:58:88:35:e9:13:00: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:26:7A:B9:9B:AB:8E:6D:E0:52:70:F7:2A:7C:5A:18:49:39:48:EC X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fe:5b:02:77:f0:80:c1:6c:b0:9d:75:95:e3:bd:36:47:e9: 54:7a:1e:1f:60:3c:d0:f5:63:b4:21:cc:ca:63:18:d1:e6:71: c3:4b:1d:36:ad:11:45:ea:ea:86:60:78:8a:bf:27:0d:ae:33: 47:79:13:6d:df:9a:87:72:93:7d:98:5f:00:4f:66:40:87:2c: b7:41:d8:02:99:0c:9d:0b:b5:d5:f5:fe:bc:d8:97:77:ea:46: ae:9e:8e:4b:12:50:6c:67:d5:c3:93:3c:cf:d6:a4:f6:05:cf: 27:f4:6f:c5:8e:d4:ee:8a:6d:4f:65:6c:3f:db:d5:87:84:4a: d5:94:df:3a:7e:60:6f:65:9d:c4:c8:96:01:1a:9c:99:23:a1: 6c:9c:9f:ff:79:e1:af:75:16:e4:aa:66:46:a5:03:8d:1d:d6: a2:cd:67:e8:c8:96:8e:fd:c4:03:0a:7d:29:59:3a:02:3e:dc: 48:49:2d:df:2d:6d:f8:e5:a1:d4:62:19:9a:f2:fd:74:fa:12: 39:b4:a5:b2:c0:95:c3:49:32:43:7d:5e:8d:42:c6:dd:31:65: 2b:21:31:7e:9d:84:1f:77:99:93:c0:d5:ea:ba:4a:a9:c9:0e: 8e:14:5f:81:98:c0:58:88:d8:0e:e3:2c:54:d4:81:a7:a0:49: ee:a9:73:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYxMDI4MTgwMDE3WhcNMjYxMTA0MTgwMDE3WjAYMRYwFAYD VQQDEw02YWUyMzgzMS1mZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswzIwmtZmz0Rsqq+vn1cBgiQbMgkEsRNlLAg7WF9uR1sAKRfJzR8rr3DHaR9 +zsr109jRnRw0jLGri6uX8e0MuQn/UHE3REZ2mAmutiU+6EwfYMopRUFE8rFay98 99MC6/HemF8wASa0Mrubo9ZW3Q1q5SMlrMhOEkOc6ML3bOfj7h6UAkrSOjmY0hZS tRNWBRN1CNPFgN0IFW/oZhWdUsvBa1Kto9VXXWzf8apw11iiXwyr39/iyCfBd+Q+ 0KA+J6TDWLHXhq/JfPllvuXhs+dM0HsfGQApjdfW6PHe5KmqWKDvXWnjcrkla0+l Zd6JO1Kv1Yy2dW9YiDXpEwC2ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAwmermb q45t4FJw9yp8WhhJOUjsMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAav5bAnfwgMFssJ11leO9NkfpVHoeH2A80PVjtCHMymMY0eZxw0sdNq0RRerq hmB4ir8nDa4zR3kTbd+ah3KTfZhfAE9mQIcst0HYApkMnQu11fX+vNiXd+pGrp6O SxJQbGfVw5M8z9ak9gXPJ/RvxY7U7optT2VsP9vVh4RK1ZTfOn5gb2WdxMiWARqc mSOhbJyf/3nhr3UW5KpmRqUDjR3Wos1n6MiWjv3EAwp9KVk6Aj7cSEkt3y1t+OWh 1GIZmvL9dPoSObSlssCVw0kyQ31ejULG3TFlKyExfp2EH3eZk8DV6rpKqckOjhRf gZjAWIjYDuMsVNSBp6BJ7qlzng== -----END CERTIFICATE-----Generated at Fri Oct 30 18:05:08 2026 by rpki-client