$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: UNeIGjNkfcPlpBYEExrhn7pK7HYRSg4Sm6e/5I1RGhE= Subject key identifier: B4:52:60:BC:12:BE:D4:A8:20:B4:7E:D4:F3:49:81:A8:5F:1A:DF:77 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 0142 Signing time: Wed 25 Mar 2026 04:36:36 +0000 Manifest this update: Wed 25 Mar 2026 04:36:35 +0000 Manifest next update: Wed 01 Apr 2026 04:36:35 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: PfTqKNr0yQZdWNvufgJ+TA9ncTOcndthDt9IqUOBrRo=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Mar 25 04:36:35 2026 GMT Not After : Apr 1 04:36:35 2026 GMT Subject: CN=69c36654-53b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:42:c1:10:5f:8c:75:56:39:90:0c:fa:34:db: a0:4e:10:34:7b:45:fa:e7:82:0d:13:55:92:3f:c5: a4:68:fc:d0:1b:b7:57:ea:cb:06:07:09:df:d4:26: 53:a8:d7:fd:38:45:0f:d7:7f:34:5f:88:cd:f6:15: c1:08:af:84:17:6c:3d:19:fe:aa:7e:4c:2e:5f:31: c3:db:73:ae:66:c9:fe:b5:7c:44:9f:04:c8:10:93: 43:b3:ec:4f:0e:8c:b8:ea:8a:70:f0:80:14:98:c2: 4b:ce:6f:7d:51:48:e2:01:5f:ae:96:9b:0a:16:8f: 42:68:33:2a:db:9c:ef:05:06:62:fc:4f:b7:76:fc: 9b:84:2d:37:31:96:b5:35:b8:c4:9d:04:92:cd:98: ac:97:f8:be:75:83:4b:8f:6f:91:8c:02:82:28:61: 49:2b:07:af:c1:82:a7:c9:34:ec:1c:99:ec:6e:38: 21:f0:82:72:f3:9b:f8:35:1e:b5:80:fa:ba:cf:8c: 8e:84:b9:1b:17:98:2e:4f:7f:3f:2c:ae:7f:be:b0: de:f6:27:2b:4e:d2:5e:d2:82:19:9c:90:bc:b6:ef: 67:4b:1f:ff:70:ae:7f:dd:32:c3:43:94:42:74:da: 81:9c:e2:8a:1e:aa:ea:e7:ce:22:1d:92:f5:0d:3f: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:52:60:BC:12:BE:D4:A8:20:B4:7E:D4:F3:49:81:A8:5F:1A:DF:77 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:25:e1:95:f6:32:b6:20:00:d6:92:67:22:59:10:a1:d2:1a: 58:e5:e6:46:63:7e:36:66:73:df:56:ad:9a:f1:f9:ad:81:bd: 16:ca:81:50:50:ae:62:60:d0:6f:61:b7:ec:dd:73:11:5e:be: a9:f3:2c:7e:5c:34:18:29:c3:0a:9f:a1:12:8e:79:08:71:1f: 9f:37:d5:b1:66:b4:32:61:d9:36:18:7b:b8:76:42:da:d6:f1: 3d:d2:e0:bb:37:e9:5b:51:df:0d:2d:65:44:a6:8c:db:94:b2: a6:2f:91:17:ef:d4:7c:28:9b:1e:e4:1d:33:86:a5:0a:de:cf: 64:34:7f:a5:c8:23:a1:d4:a8:a1:67:c8:e0:39:57:85:16:18: e3:e1:c2:1e:26:6d:c6:b5:ef:39:95:0c:22:03:54:e9:88:de: 48:7f:54:2c:e8:74:09:b7:0e:2b:53:3d:ed:cc:a5:81:ad:fc: b9:a8:84:88:f1:c2:df:73:56:45:c0:e1:71:93:1d:a1:76:eb: 65:de:73:bf:07:df:f2:57:4c:2f:c8:02:b9:1e:e8:1c:77:bc: d0:70:a6:af:c0:7f:c0:82:b4:66:ff:a1:7e:18:1c:9f:cd:14: 95:3a:51:46:f8:5f:e9:af:fb:be:e2:f7:b3:83:ae:da:4d:2e: 9e:df:3e:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwMzI1MDQzNjM1WhcNMjYwNDAxMDQzNjM1WjAYMRYwFAYD VQQDEw02OWMzNjY1NC01M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyULBEF+MdVY5kAz6NNugThA0e0X654INE1WSP8WkaPzQG7dX6ssGBwnf1CZT qNf9OEUP1380X4jN9hXBCK+EF2w9Gf6qfkwuXzHD23OuZsn+tXxEnwTIEJNDs+xP Doy46opw8IAUmMJLzm99UUjiAV+ulpsKFo9CaDMq25zvBQZi/E+3dvybhC03MZa1 NbjEnQSSzZisl/i+dYNLj2+RjAKCKGFJKwevwYKnyTTsHJnsbjgh8IJy85v4NR61 gPq6z4yOhLkbF5guT38/LK5/vrDe9icrTtJe0oIZnJC8tu9nSx//cK5/3TLDQ5RC dNqBnOKKHqrq584iHZL1DT+vRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLRSYLwS vtSoILR+1PNJgahfGt93MB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArCXhlfYytiAA1pJnIlkQodIaWOXmRmN+NmZz31atmvH5rYG9FsqBUFCuYmDQ b2G37N1zEV6+qfMsflw0GCnDCp+hEo55CHEfnzfVsWa0MmHZNhh7uHZC2tbxPdLg uzfpW1HfDS1lRKaM25Sypi+RF+/UfCibHuQdM4alCt7PZDR/pcgjodSooWfI4DlX hRYY4+HCHiZtxrXvOZUMIgNU6YjeSH9ULOh0CbcOK1M97cylga38uaiEiPHC33NW RcDhcZMdoXbrZd5zvwff8ldML8gCuR7oHHe80HCmr8B/wIK0Zv+hfhgcn80UlTpR Rvhf6a/7vuL3s4Ou2k0unt8+yg== -----END CERTIFICATE-----Generated at Fri Mar 27 05:19:46 2026 by rpki-client