$ rpki-client -vvf rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft File: LTKZEtaZA7hQCX-MbthXHaxxBa0.mft (raw, json) Hash identifier: eoPgB8Mby16KbUnConehZeVlnGdXKgQBOVnXSzRX1RM= Subject key identifier: 93:03:C8:C5:FF:1F:EC:85:8F:E7:2B:82:57:6B:EF:72:C8:72:AC:70 Authority key identifier: 2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD Certificate issuer: /CN=A916708F/serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Certificate serial: 0DA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft Manifest number: 0D8C Signing time: Sun 26 Jul 2026 18:11:58 +0000 Manifest this update: Sun 26 Jul 2026 18:11:58 +0000 Manifest next update: Sun 02 Aug 2026 18:11:58 +0000 Files and hashes: 1: LTKZEtaZA7hQCX-MbthXHaxxBa0.crl (hash: hhgyy6IdSCjR/cEEOu9SyThOfXcfLqD0t2ivLVPhs0Y=) 2: 8174C3BEF16411E980D2F667C4F9AE02.roa (hash: 6cEDMnOnUMa8mHfAtUjj0onET+UjARcOmTdlq4jfzGs=) 3: 97834674B8C511F0A874F663C4F9AE02.roa (hash: T0DkMUWPaFavft4EZhON5ruNNGkmSNgQyM4NlT6hGWM=) 4: 0A7CA184B8C611F0B55B8B4EC4F9AE02.roa (hash: LvQrYr/7IXXFeyO0C263bGkuxb9ShOgruDtXGRpyuAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:11:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3489 (0xda1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916708F, serialNumber=2D329912D69903B850097F8C6ED8571DAC7105AD Validity Not Before: Jul 26 18:11:58 2026 GMT Not After : Aug 2 18:11:58 2026 GMT Subject: CN=6a664dee-08b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9d:41:f7:3e:aa:a4:4c:8c:63:a2:17:59:e8: 00:27:b5:f2:60:2b:5c:ea:46:89:9d:60:ec:b8:31: c3:c8:53:78:1b:cd:d9:3d:3d:78:73:e6:9a:c5:26: dc:a4:01:59:84:8d:9b:df:48:02:03:d3:18:f6:26: dd:79:e0:4c:6f:91:ed:6a:e3:af:33:c8:ff:45:41: fa:67:55:ab:6a:51:0e:42:36:7b:86:d7:cd:e7:14: 34:59:f3:87:41:c1:42:3c:0b:c6:09:3e:9f:00:17: e4:2b:1c:f3:58:b2:55:5c:3f:db:9d:db:bc:73:51: ec:83:48:4d:0d:38:07:cc:d9:4a:5c:cb:73:52:fe: 8c:b5:9c:ff:fa:e7:c5:0e:d1:47:a7:73:a6:c8:26: 66:a7:c9:3c:61:f1:41:e6:9c:71:29:ef:ea:47:0a: 53:64:d5:7e:4c:2d:88:20:ab:c1:e6:81:b0:d0:0e: dc:79:c1:9b:eb:e9:a4:28:ed:42:0d:7e:11:ec:72: 1c:9c:8e:c3:e2:20:3a:03:2c:c0:5c:a4:bc:0f:8e: 03:7b:97:4e:9f:7e:b7:ce:df:2e:6c:55:ea:ac:13: c6:82:8b:fb:dc:b7:02:9c:ef:bb:1b:6b:f2:ea:c1: 81:ee:ac:9b:b4:d2:0d:ce:a8:94:18:dc:e8:62:f2: 87:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:03:C8:C5:FF:1F:EC:85:8F:E7:2B:82:57:6B:EF:72:C8:72:AC:70 X509v3 Authority Key Identifier: keyid:2D:32:99:12:D6:99:03:B8:50:09:7F:8C:6E:D8:57:1D:AC:71:05:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LTKZEtaZA7hQCX-MbthXHaxxBa0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916708F/56DB0F24F16311E99DBEDF65C4F9AE02/LTKZEtaZA7hQCX-MbthXHaxxBa0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:23:2d:eb:4d:d8:9f:62:7c:76:25:a1:b6:05:6b:24:bb:3c: 0e:99:0e:c5:a9:65:d9:31:f5:c1:a2:d2:30:03:c5:5c:a6:f7: de:19:8b:b5:75:92:23:d5:60:44:60:c6:11:14:ce:97:71:25: 22:0c:7e:b6:cd:df:26:7a:09:f8:14:4c:66:54:22:13:3d:22: 41:6a:87:34:91:bd:e7:0a:8b:c2:64:8a:f4:77:39:3d:88:ad: 33:b9:d3:15:a7:cc:51:73:6c:13:41:b1:d2:3f:5b:07:92:08: 87:b6:76:bc:5a:7f:17:a0:be:c7:98:04:5f:b4:78:37:14:2c: 65:c1:ae:fd:3a:42:d3:20:8c:93:54:7e:e2:33:2e:42:34:14: ca:fc:4a:8c:6e:86:f1:3c:40:bb:07:ad:38:b8:3c:83:61:f3: 7c:e9:f8:04:d4:5f:87:f2:ed:25:16:84:c7:24:85:9a:d3:d5: 96:c8:f3:73:74:ff:45:35:89:66:e8:39:30:2f:c2:16:49:d3: 1e:75:ca:ef:a5:45:3b:44:cc:ba:6b:5f:ca:c5:3b:02:46:2f: 93:c7:f2:29:05:28:77:08:7a:06:ab:3d:4a:17:97:f1:11:33: bc:bb:7c:53:88:4e:fb:c4:ed:d8:c8:70:7d:23:60:f8:eb:d2: 57:94:07:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjcwOEYxMTAvBgNVBAUTKDJEMzI5OTEyRDY5OTAzQjg1MDA5N0Y4QzZFRDg1NzFE QUM3MTA1QUQwHhcNMjYwNzI2MTgxMTU4WhcNMjYwODAyMTgxMTU4WjAYMRYwFAYD VQQDEw02YTY2NGRlZS0wOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ1B9z6qpEyMY6IXWegAJ7XyYCtc6kaJnWDsuDHDyFN4G83ZPT14c+aaxSbc pAFZhI2b30gCA9MY9ibdeeBMb5HtauOvM8j/RUH6Z1WralEOQjZ7htfN5xQ0WfOH QcFCPAvGCT6fABfkKxzzWLJVXD/bndu8c1Hsg0hNDTgHzNlKXMtzUv6MtZz/+ufF DtFHp3OmyCZmp8k8YfFB5pxxKe/qRwpTZNV+TC2IIKvB5oGw0A7cecGb6+mkKO1C DX4R7HIcnI7D4iA6AyzAXKS8D44De5dOn363zt8ubFXqrBPGgov73LcCnO+7G2vy 6sGB7qybtNINzqiUGNzoYvKHvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJMDyMX/ H+yFj+crgldr73LIcqxwMB8GA1UdIwQYMBaAFC0ymRLWmQO4UAl/jG7YVx2scQWt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzA4Ri81NkRCMEYyNEYx NjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3aFFDWC1NYnRoWEhheHhC YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xUS1pFdGFaQTdoUUNYLU1idGhYSGF4eEJhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzA4Ri81NkRCMEYyNEYxNjMxMUU5OURCRURGNjVDNEY5QUUwMi9MVEtaRXRhWkE3 aFFDWC1NYnRoWEhheHhCYTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCMt603Yn2J8diWhtgVrJLs8DpkOxall2TH1waLSMAPFXKb33hmLtXWSI9Vg RGDGERTOl3ElIgx+ts3fJnoJ+BRMZlQiEz0iQWqHNJG95wqLwmSK9Hc5PYitM7nT FafMUXNsE0Gx0j9bB5IIh7Z2vFp/F6C+x5gEX7R4NxQsZcGu/TpC0yCMk1R+4jMu QjQUyvxKjG6G8TxAuwetOLg8g2HzfOn4BNRfh/LtJRaExySFmtPVlsjzc3T/RTWJ Zug5MC/CFknTHnXK76VFO0TMumtfysU7AkYvk8fyKQUodwh6Bqs9SheX8REzvLt8 U4hO+8Tt2MhwfSNg+OvSV5QHgQ== -----END CERTIFICATE-----Generated at Mon Jul 27 22:52:34 2026 by rpki-client