$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: wjM6U0Ri49fPsD1e6wj1WbnPZa9K7CZb4iPgEbWGPoU= Subject key identifier: C9:F6:63:C5:7A:0D:B6:A3:0D:7A:5C:41:94:4E:B6:75:50:65:F5:AA Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0D07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0CFC Signing time: Mon 03 Nov 2025 15:02:00 +0000 Manifest this update: Mon 03 Nov 2025 15:01:59 +0000 Manifest next update: Mon 10 Nov 2025 15:01:59 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: HlodoshGDmcQ9Kw3WHe/A1HVlDV2Vjq/rcl9Bp06IlE=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: hN5uWTMLKihaDnB2GMrlEkHThQZGD2la1832Pp7TIb4=) 3: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: Lb3RRFT3hAxRp0C7sz6QZHa1NXRIx5DemmAfbF9br5U=) 4: 97834674B8C511F0A874F663C4F9AE02.roa (hash: 26Gc47qWjDTC53MNNE9xaiVTfxfy+II3G+DNkYRVJGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 15:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3335 (0xd07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Nov 3 15:01:59 2025 GMT Not After : Nov 10 15:01:59 2025 GMT Subject: CN=6908c3e8-2def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:59:46:16:29:4b:f6:87:2f:a2:ef:28:d3:75: 58:36:fb:39:7f:60:9d:77:bc:c2:fc:1a:07:20:f1: 8d:19:c0:a5:6d:ff:c7:4e:e0:36:36:c3:5e:55:c1: e5:ed:80:ba:1e:2a:66:33:6c:f2:56:c0:03:b8:6b: 57:c4:4a:8d:d0:32:2f:57:f0:9a:86:b0:16:d9:e8: ad:88:8b:6a:cb:59:ec:8a:d8:bc:94:72:db:5a:8b: 8d:bc:16:f5:83:b8:52:47:5c:b8:40:77:71:4f:44: 1e:80:2e:75:ce:d9:1b:d4:df:3a:e4:03:70:58:da: d4:73:6c:6f:64:d7:e1:fd:ae:d9:10:3f:e5:e9:85: 82:1e:4d:4d:d6:5f:4e:07:e9:f2:ce:9e:e4:7f:bb: 29:de:e1:63:0b:f7:94:ac:cd:db:f8:c0:68:9d:f4: e1:e8:15:09:0c:73:6d:48:fc:26:56:8d:ee:1b:9d: 02:89:d6:63:43:b3:c6:ab:29:97:71:ce:c4:76:1b: 40:9e:00:80:00:19:b0:51:a9:a2:47:42:45:ac:2e: 8b:6b:29:e0:26:e0:ab:b4:a5:db:e7:30:18:a8:90: 0d:ad:d9:98:76:5d:fc:45:25:ea:a8:93:48:6b:5f: b1:78:9c:35:71:7b:c0:d0:1d:89:b4:6b:5e:5a:c5: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F6:63:C5:7A:0D:B6:A3:0D:7A:5C:41:94:4E:B6:75:50:65:F5:AA X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:14:e1:e7:4a:33:e9:90:3e:9e:5c:cd:5e:5f:4d:f6:e4:40: 00:44:db:02:51:6e:25:16:a1:f6:1d:bd:df:82:c0:63:5d:05: dc:35:12:e2:81:01:80:f5:b7:66:ed:ef:8b:69:6c:6e:23:02: 82:7a:01:35:4a:05:27:a7:91:63:7e:5e:fe:a1:25:8f:35:49: f4:1b:0d:39:48:3f:45:05:a5:35:e9:ca:70:36:20:40:93:5b: 41:dc:67:48:60:90:20:5d:ff:1c:b3:c4:41:70:93:a9:a2:ad: 25:69:a6:98:13:82:20:81:db:3d:71:85:f6:f7:f1:49:72:5f: 18:52:34:b8:13:48:99:ae:1f:07:4b:1f:f9:71:03:a3:0c:a6: 22:44:7a:62:c5:8e:a6:23:e8:b9:b0:68:45:11:ca:47:80:3d: a0:01:ed:a7:07:2e:fc:ee:15:35:39:97:39:ef:1a:2c:c5:1f: 4e:cf:71:c4:77:ae:80:95:4c:bb:73:8e:27:b7:02:57:d5:17: d1:f3:88:f0:9c:a5:26:c6:64:b6:00:07:77:d9:a4:aa:50:33: 4f:80:2e:45:4f:db:bd:dc:03:39:83:c0:3c:0b:7e:c3:38:b5: a5:cd:e9:0d:a5:23:0a:59:9a:d5:03:16:6a:7e:34:4f:74:c4: ba:68:33:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjUxMTAzMTUwMTU5WhcNMjUxMTEwMTUwMTU5WjAYMRYwFAYD VQQDEw02OTA4YzNlOC0yZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVlGFilL9ocvou8o03VYNvs5f2Cdd7zC/BoHIPGNGcClbf/HTuA2NsNeVcHl 7YC6HipmM2zyVsADuGtXxEqN0DIvV/CahrAW2eitiItqy1nsiti8lHLbWouNvBb1 g7hSR1y4QHdxT0QegC51ztkb1N865ANwWNrUc2xvZNfh/a7ZED/l6YWCHk1N1l9O B+nyzp7kf7sp3uFjC/eUrM3b+MBonfTh6BUJDHNtSPwmVo3uG50CidZjQ7PGqymX cc7EdhtAngCAABmwUamiR0JFrC6LayngJuCrtKXb5zAYqJANrdmYdl38RSXqqJNI a1+xeJw1cXvA0B2JtGteWsVR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn2Y8V6 DbajDXpcQZROtnVQZfWqMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5FOHnSjPpkD6eXM1eX0325EAARNsCUW4lFqH2Hb3fgsBjXQXcNRLi gQGA9bdm7e+LaWxuIwKCegE1SgUnp5Fjfl7+oSWPNUn0Gw05SD9FBaU16cpwNiBA k1tB3GdIYJAgXf8cs8RBcJOpoq0laaaYE4Iggds9cYX29/FJcl8YUjS4E0iZrh8H Sx/5cQOjDKYiRHpixY6mI+i5sGhFEcpHgD2gAe2nBy787hU1OZc57xosxR9Oz3HE d66AlUy7c44ntwJX1RfR84jwnKUmxmS2AAd32aSqUDNPgC5FT9u93AM5g8A8C37D OLWlzekNpSMKWZrVAxZqfjRPdMS6aDM5 -----END CERTIFICATE-----Generated at Tue Nov 4 16:06:17 2025 by rpki-client