$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: JEsURRxdoeDfcm9zSUIg61zwzHx9SR2jfwGCokJ2V1w= Subject key identifier: 9A:9D:3F:2D:C4:B5:3F:D7:8F:19:C8:44:AA:18:19:ED:F8:14:B3:FB Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0CEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CE3 Signing time: Thu 18 Sep 2025 18:16:27 +0000 Manifest this update: Thu 18 Sep 2025 18:16:26 +0000 Manifest next update: Thu 25 Sep 2025 18:16:26 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: jIteiXhxNiav+uvlbpkm0ozA6eHMBTEodbMrRwn7huo=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3308 (0xcec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Sep 18 18:16:26 2025 GMT Not After : Sep 25 18:16:26 2025 GMT Subject: CN=68cc4c7a-c776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:98:32:b4:72:85:2d:8f:4c:26:cf:3f:62: d4:60:5d:71:7b:e7:55:1d:96:3b:ee:f4:ee:28:ab: 32:c9:82:a2:1d:09:0e:d9:34:70:a7:b0:35:8a:85: a1:81:4e:b4:b7:2d:6d:49:4e:69:98:c5:9f:ab:1c: 6d:63:7d:2e:11:68:64:56:8c:11:4e:5e:79:12:2a: ff:2b:86:8a:a3:2a:c4:06:34:a5:36:d7:f3:87:f8: 38:39:33:08:8b:78:b6:26:09:9c:e5:e7:fa:9e:1e: 9e:e2:0b:c5:4f:21:ee:13:a4:87:ec:ff:0b:18:0b: ba:d9:ee:28:6c:9a:cf:28:e6:a8:c9:02:63:81:cd: 11:a9:6f:ea:be:f7:8c:97:31:be:52:98:bc:63:3b: 5d:1a:71:d0:fb:a3:6c:35:5e:87:fb:02:a9:8c:2e: c5:04:02:01:a0:2e:9d:a9:17:06:ab:0b:d4:91:d0: 60:cc:01:d3:28:6e:44:6b:c0:6e:b4:b5:13:25:c3: 93:1e:3a:cf:df:ba:fb:4b:9e:4a:94:b3:c7:1c:e4: f1:c0:02:e1:a9:bd:c7:1c:e4:91:69:86:62:70:ab: 8f:e3:8a:05:26:fb:a8:90:17:46:8e:98:19:72:4d: b0:18:48:24:ed:77:03:25:cf:bb:a0:a4:4e:13:ac: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9D:3F:2D:C4:B5:3F:D7:8F:19:C8:44:AA:18:19:ED:F8:14:B3:FB X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:53:d4:e6:14:2f:6e:16:bc:6b:e6:85:71:b5:24:48:00:3b: 9e:ee:4b:17:86:09:8d:d5:19:9d:e8:fe:cf:91:fb:e1:9f:0b: 07:a5:de:db:57:a2:70:20:42:29:84:b5:ec:f3:ff:a6:d5:d5: 9a:55:ed:0e:89:ff:ae:04:ef:43:79:fa:5f:e2:8c:21:12:7a: 83:9b:45:44:e1:f1:14:52:54:36:b1:8f:a8:93:ee:9c:94:c5: 0b:5e:5b:48:f8:27:e4:6b:6b:f1:f4:9d:b7:0d:00:fe:36:e9: 46:9e:91:a2:bf:ad:23:fc:e4:d6:6f:d3:8e:b0:4f:20:95:65: 48:50:03:32:ca:08:92:f5:f0:4e:4c:71:98:fe:49:98:93:03: fe:fc:06:32:8f:1d:4c:4b:c5:02:ac:8c:72:8c:46:a5:ba:e2: b9:5d:36:f2:df:9f:d9:b7:14:72:dc:e2:58:67:59:39:b8:2b: 3f:7a:4f:09:39:24:ce:9b:6b:8d:15:28:16:67:13:97:05:a9: 3a:80:13:d7:0b:8b:cd:26:6b:65:44:c0:56:57:0c:b6:67:bc: 74:41:76:bd:47:bd:c1:ef:c5:ff:c9:68:77:bb:c0:79:a6:7f: fd:da:3e:db:45:11:39:9e:51:09:f8:31:b3:51:44:fc:32:b1: 69:aa:bf:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUwOTE4MTgxNjI2WhcNMjUwOTI1MTgxNjI2WjAYMRYwFAYD VQQDEw02OGNjNGM3YS1jNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX6YMrRyhS2PTCbPP2LUYF1xe+dVHZY77vTuKKsyyYKiHQkO2TRwp7A1ioWh gU60ty1tSU5pmMWfqxxtY30uEWhkVowRTl55Eir/K4aKoyrEBjSlNtfzh/g4OTMI i3i2Jgmc5ef6nh6e4gvFTyHuE6SH7P8LGAu62e4obJrPKOaoyQJjgc0RqW/qvveM lzG+Upi8YztdGnHQ+6NsNV6H+wKpjC7FBAIBoC6dqRcGqwvUkdBgzAHTKG5Ea8Bu tLUTJcOTHjrP37r7S55KlLPHHOTxwALhqb3HHOSRaYZicKuP44oFJvuokBdGjpgZ ck2wGEgk7XcDJc+7oKROE6wzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqdPy3E tT/XjxnIRKoYGe34FLP7MB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVU9TmFC9uFrxr5oVxtSRIADue7ksXhgmN1Rmd6P7PkfvhnwsHpd7b V6JwIEIphLXs8/+m1dWaVe0Oif+uBO9Defpf4owhEnqDm0VE4fEUUlQ2sY+ok+6c lMULXltI+Cfka2vx9J23DQD+NulGnpGiv60j/OTWb9OOsE8glWVIUAMyygiS9fBO THGY/kmYkwP+/AYyjx1MS8UCrIxyjEaluuK5XTby35/ZtxRy3OJYZ1k5uCs/ek8J OSTOm2uNFSgWZxOXBak6gBPXC4vNJmtlRMBWVwy2Z7x0QXa9R73B78X/yWh3u8B5 pn/92j7bRRE5nlEJ+DGzUUT8MrFpqr/B -----END CERTIFICATE-----Generated at Fri Sep 19 00:57:18 2025 by rpki-client