$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: asBGUv1nixX4zpsxbPQq/kxa1dNYHTcK0IyzP5X/OLU= Subject key identifier: E3:BD:07:E6:7A:56:76:65:FD:DB:E1:51:A5:8E:60:4C:91:CD:48:16 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: ED Signing time: Sun 19 Oct 2025 08:21:13 +0000 Manifest this update: Sun 19 Oct 2025 08:21:12 +0000 Manifest next update: Sun 26 Oct 2025 08:21:12 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: 3+GeZBjfiVvLv+hhbjUUSjjQrtjRFqrbKiz2pE30dzo=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Oct 19 08:21:12 2025 GMT Not After : Oct 26 08:21:12 2025 GMT Subject: CN=68f49f78-9f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:ab:41:dd:ff:11:b8:df:e9:a0:e5:aa:11: 4d:c6:b8:89:7f:0e:96:61:f2:a2:72:74:49:22:70: a6:f5:55:8c:01:dc:f3:39:ef:56:46:c4:ef:d7:59: 4e:31:8a:4d:ee:ae:cc:1c:2a:ab:2f:7e:29:c9:9f: 74:34:fc:2b:80:17:b0:e5:e2:a4:af:b1:d7:f5:3c: 52:8e:2c:6e:fa:c4:db:ff:76:4d:7e:d6:97:89:37: b1:20:08:e5:2c:8c:df:37:17:9f:14:24:b8:83:ba: 80:30:29:af:3f:7c:f7:d2:b9:63:9e:13:48:20:96: 58:58:87:32:b3:e0:cb:ac:7b:fa:4e:ab:4b:bd:d2: 91:7e:c2:a6:97:0c:96:e2:2c:0b:23:1f:78:b6:60: c1:a4:46:61:f7:fe:93:19:bb:2d:56:a4:0d:0c:62: 3b:a3:9c:e5:2b:82:cb:ec:8b:ed:f5:60:05:8a:9d: 96:9b:e6:76:8b:c3:a1:d1:ad:59:46:ea:44:56:f6: e8:7e:a9:fc:fa:45:da:9f:49:e3:75:10:d7:2b:c9: d1:23:30:b3:13:bd:59:7a:e9:f6:1e:83:0a:76:05: 2f:99:7d:52:17:31:90:55:4a:12:87:28:4f:e1:a4: 31:a6:8e:31:51:d1:99:ce:f1:c9:fa:f5:b8:a4:29: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:07:E6:7A:56:76:65:FD:DB:E1:51:A5:8E:60:4C:91:CD:48:16 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:a7:fd:00:fa:f6:93:63:18:17:c9:e0:2c:16:62:3c:89:c1: ba:2b:b1:7a:22:1b:d2:51:1c:2d:89:d1:c2:7c:f2:53:4f:32: 8d:d5:48:b3:d2:40:2a:67:79:50:de:e8:1d:6d:db:66:94:e0: 89:eb:aa:94:68:3a:14:87:dc:4e:a5:e4:6c:07:19:4c:a6:44: e8:73:d6:7f:7d:7b:5f:5c:00:b7:41:21:d7:e4:cd:10:af:a4: 7c:35:dc:33:5b:38:83:24:0b:4d:1a:94:ba:55:7c:5d:3f:2f: be:c0:8c:68:78:c1:5f:ea:b8:b5:db:c7:94:a8:68:a8:8a:27: d5:a0:5c:f7:79:1f:06:59:21:2c:ee:65:e4:62:7b:d6:24:a4: cd:46:f8:59:af:f2:09:27:ce:58:fa:47:6b:04:b2:b2:31:72: cf:0f:f6:a1:5f:64:5f:5e:f1:ca:5f:8f:d7:31:9b:bb:01:ef: 6e:12:97:f2:1b:0d:38:0e:52:dc:05:60:4d:a6:95:25:fd:e7: ce:c5:14:d1:03:91:d5:64:84:e4:a8:a8:5a:e8:68:1b:f7:70: da:9a:4d:f9:83:7b:33:7b:68:57:47:d4:10:f3:aa:75:46:0d: 78:93:5c:21:9a:78:be:70:1c:1a:f9:b1:38:cf:f6:59:dd:97: 31:40:d2:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUxMDE5MDgyMTEyWhcNMjUxMDI2MDgyMTEyWjAYMRYwFAYD VQQDEw02OGY0OWY3OC05ZjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUWrQd3/Ebjf6aDlqhFNxriJfw6WYfKicnRJInCm9VWMAdzzOe9WRsTv11lO MYpN7q7MHCqrL34pyZ90NPwrgBew5eKkr7HX9TxSjixu+sTb/3ZNftaXiTexIAjl LIzfNxefFCS4g7qAMCmvP3z30rljnhNIIJZYWIcys+DLrHv6TqtLvdKRfsKmlwyW 4iwLIx94tmDBpEZh9/6TGbstVqQNDGI7o5zlK4LL7Ivt9WAFip2Wm+Z2i8Oh0a1Z RupEVvbofqn8+kXan0njdRDXK8nRIzCzE71Zeun2HoMKdgUvmX1SFzGQVUoShyhP 4aQxpo4xUdGZzvHJ+vW4pCnuIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO9B+Z6 VnZl/dvhUaWOYEyRzUgWMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAop/0A+vaTYxgXyeAsFmI8icG6K7F6IhvSURwtidHCfPJTTzKN1Uiz 0kAqZ3lQ3ugdbdtmlOCJ66qUaDoUh9xOpeRsBxlMpkToc9Z/fXtfXAC3QSHX5M0Q r6R8NdwzWziDJAtNGpS6VXxdPy++wIxoeMFf6ri128eUqGioiifVoFz3eR8GWSEs 7mXkYnvWJKTNRvhZr/IJJ85Y+kdrBLKyMXLPD/ahX2RfXvHKX4/XMZu7Ae9uEpfy Gw04DlLcBWBNppUl/efOxRTRA5HVZITkqKha6Ggb93Damk35g3sze2hXR9QQ86p1 Rg14k1whmni+cBwa+bE4z/ZZ3ZcxQNJn -----END CERTIFICATE-----Generated at Tue Oct 21 08:57:00 2025 by rpki-client