$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: izVNXNJcUm1hTLRCCgWwvQRofH+ol7Mw48CrCl7FIZU= Subject key identifier: 93:B2:D7:10:59:48:C3:1C:1B:BF:A2:05:BD:D9:CD:EF:8A:B7:2A:7E Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: BC Signing time: Tue 15 Jul 2025 06:11:30 +0000 Manifest this update: Tue 15 Jul 2025 06:11:29 +0000 Manifest next update: Tue 22 Jul 2025 06:11:29 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: IbBkBUL1XdzLgDg9Itk92tdUu6mOChZEpLuG58m5EbY=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jul 15 06:11:29 2025 GMT Not After : Jul 22 06:11:29 2025 GMT Subject: CN=6875f112-e051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b5:8f:38:a7:37:29:6e:28:b9:be:2c:9d:dd: e9:5e:e0:fe:47:15:5c:db:dc:52:22:30:03:1b:84: d8:7f:d5:b9:57:44:0c:87:a0:b5:82:75:23:d6:fe: 0c:0f:6e:25:20:d0:78:e7:62:8f:2b:f8:dc:40:09: 46:dc:bc:b4:6a:ac:7a:fa:8a:9a:99:29:56:4c:47: 95:b6:fa:63:13:bf:30:c7:13:61:0c:73:ed:30:92: 0e:dd:43:75:60:b6:9f:8c:0c:f0:05:60:73:f3:f5: 7c:0b:96:99:ff:d0:4d:b6:48:f7:1f:15:80:8d:bc: 08:b8:c6:18:a9:4d:a3:b3:3b:7b:43:38:94:ae:90: 4d:e2:d8:6d:02:9c:7c:70:7f:42:b9:75:82:88:29: 03:c5:29:10:6f:0e:82:64:1b:74:4d:6a:c6:7c:27: 70:9d:38:b4:3f:b3:45:6e:50:4f:8c:46:ce:fb:33: 92:52:9d:a4:55:24:4b:d9:9d:9c:cf:0d:9d:5d:e0: ae:f2:d6:b0:95:bb:19:ce:fc:61:d3:ce:35:2a:7b: f9:b8:a9:8b:44:ab:b2:ec:0a:ae:a0:96:bd:15:c0: 9e:80:04:d7:ff:74:70:88:bd:21:00:f8:46:79:c7: 0a:27:b5:cc:eb:02:df:42:6a:65:1b:29:52:5c:67: 57:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:D7:10:59:48:C3:1C:1B:BF:A2:05:BD:D9:CD:EF:8A:B7:2A:7E X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:db:c4:0b:a9:85:c1:42:c5:af:78:9d:93:45:37:7e:2f:84: 17:a2:e3:a6:24:b8:70:49:60:0e:5a:02:70:20:be:f0:e3:07: e3:75:f6:e6:5d:4d:21:0d:e6:cb:d3:e4:5b:89:c9:77:af:73: 08:36:39:51:30:e8:de:e2:f0:a0:0c:56:47:00:bd:7d:c7:74: a6:db:06:53:b7:b3:e9:2a:d6:86:90:38:1e:53:f5:93:6d:fc: f2:fc:14:dd:04:e3:28:8a:f6:5f:c9:99:d0:f3:6d:d6:3d:ce: f3:02:f2:f2:b8:6f:84:8e:75:30:6e:25:ea:43:92:31:f2:a4: 74:ad:ad:eb:1b:04:dc:70:c3:82:99:3d:d5:67:bf:cf:5a:7d: 8c:41:27:89:c9:87:3e:41:20:1f:bd:e6:f3:ed:c5:3f:57:81: 3c:42:f9:b4:cb:e8:25:7b:69:a9:9f:46:25:2d:a5:7c:34:5c: 14:4f:d2:c0:ea:2b:ab:50:4e:3d:34:97:90:57:f4:f5:67:ed: db:5b:53:18:da:29:67:96:7e:04:07:49:cf:03:f8:2a:fb:68: 31:62:37:f3:f8:e5:58:1f:14:85:9d:87:fd:3c:60:3c:a1:12: db:e6:81:bd:45:72:8c:72:8f:cf:2d:08:22:4e:f4:86:49:e6: 5f:88:9a:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUwNzE1MDYxMTI5WhcNMjUwNzIyMDYxMTI5WjAYMRYwFAYD VQQDEw02ODc1ZjExMi1lMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LWPOKc3KW4oub4snd3pXuD+RxVc29xSIjADG4TYf9W5V0QMh6C1gnUj1v4M D24lINB452KPK/jcQAlG3Ly0aqx6+oqamSlWTEeVtvpjE78wxxNhDHPtMJIO3UN1 YLafjAzwBWBz8/V8C5aZ/9BNtkj3HxWAjbwIuMYYqU2jszt7QziUrpBN4thtApx8 cH9CuXWCiCkDxSkQbw6CZBt0TWrGfCdwnTi0P7NFblBPjEbO+zOSUp2kVSRL2Z2c zw2dXeCu8tawlbsZzvxh0841Knv5uKmLRKuy7AquoJa9FcCegATX/3RwiL0hAPhG eccKJ7XM6wLfQmplGylSXGdX5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOy1xBZ SMMcG7+iBb3Zze+Ktyp+MB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF28QLqYXBQsWveJ2TRTd+L4QXouOmJLhwSWAOWgJwIL7w4wfjdfbm XU0hDebL0+Rbicl3r3MINjlRMOje4vCgDFZHAL19x3Sm2wZTt7PpKtaGkDgeU/WT bfzy/BTdBOMoivZfyZnQ823WPc7zAvLyuG+EjnUwbiXqQ5Ix8qR0ra3rGwTccMOC mT3VZ7/PWn2MQSeJyYc+QSAfvebz7cU/V4E8Qvm0y+gle2mpn0YlLaV8NFwUT9LA 6iurUE49NJeQV/T1Z+3bW1MY2ilnln4EB0nPA/gq+2gxYjfz+OVYHxSFnYf9PGA8 oRLb5oG9RXKMco/PLQgiTvSGSeZfiJq5 -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:51 2025 by rpki-client