$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: 3EzB23NFEJZELP52IINFV9Zyg1caVggIlUQa6Zkb10E= Subject key identifier: 17:98:C8:61:C9:C3:3F:BC:06:B7:2D:59:94:EA:EC:17:92:BE:FF:9A Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 9C Signing time: Sun 11 May 2025 05:06:40 +0000 Manifest this update: Sun 11 May 2025 05:06:40 +0000 Manifest next update: Sun 18 May 2025 05:06:40 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: 5/qKKPH5wUSJqLpu8BEZmoLrl5N6GOolR79LAHpzoGY=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: May 11 05:06:40 2025 GMT Not After : May 18 05:06:40 2025 GMT Subject: CN=68203060-4457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fc:0b:6a:80:cb:0a:39:5e:6a:e3:d1:f3:ad: 40:52:99:e3:f6:7f:fc:20:c6:3a:4a:5a:07:04:fd: db:f7:7f:d4:e9:ab:59:ef:3c:56:a2:77:f7:d7:9d: 81:87:73:12:d1:cd:ee:2f:64:c8:58:04:8a:ec:52: f5:5c:7a:2f:05:0c:7e:d7:30:ec:e2:62:94:bb:94: 8a:53:f0:1d:02:dd:08:df:69:2f:a2:b0:69:a7:42: 74:d4:05:b3:e1:c5:6c:40:c7:21:42:57:2c:29:a4: d3:4d:5f:db:62:4f:3c:d6:9f:e7:47:2e:f7:05:3e: 4e:0a:ab:cc:e0:d6:8c:6b:75:49:1b:e7:14:b4:d9: 5e:fe:d2:6d:28:8f:f3:15:f8:df:de:80:73:a1:64: 64:e7:1f:2f:ca:50:d1:12:d7:a1:53:d9:f5:0a:97: 33:1b:24:9c:77:4f:47:1e:9c:cb:0f:80:7e:d4:92: af:87:df:12:cf:d8:25:f7:38:e9:24:ac:9d:9b:c6: 02:6c:6b:5a:bb:a0:8e:52:ef:da:f7:b0:45:cc:2e: 0a:1c:26:87:3c:8d:98:06:9d:bd:c6:29:6e:a4:30: 98:00:f2:e1:18:e0:cf:2f:c0:02:d3:40:5e:41:be: a4:02:2b:5d:7e:4e:6f:ae:ca:db:80:f2:10:69:22: d1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:98:C8:61:C9:C3:3F:BC:06:B7:2D:59:94:EA:EC:17:92:BE:FF:9A X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d8:e9:52:38:80:83:21:3a:70:fd:dd:51:68:b5:ac:fc:5b: 9d:ca:e0:2e:f1:f0:a6:f5:66:e2:c6:fd:82:a8:3c:a2:b7:d7: 09:d4:32:2f:53:80:4e:8d:ce:3c:c8:d6:fa:47:d1:21:a0:87: 2b:3b:cd:48:40:6a:b2:a5:7d:75:cb:2b:b8:82:82:ef:76:13: 87:87:6a:9b:97:9b:27:53:f4:a4:cb:5e:50:a4:24:db:d3:6a: a3:87:b5:c3:cf:b0:af:8f:f8:04:11:ae:a8:09:9a:39:84:6b: 55:4f:03:23:8d:7b:2e:8e:d3:a7:78:55:ee:82:49:17:41:0e: bd:90:18:6b:56:6d:ce:23:cc:11:0f:40:ee:38:ff:0b:38:75: a6:6a:1f:ae:b2:52:19:82:bd:90:30:38:80:ec:1c:88:91:8f: da:db:f2:93:24:c5:bd:e1:0e:47:8d:e0:e1:30:1d:99:30:00: b7:d6:a3:62:ac:f9:ac:05:cf:81:02:49:88:f3:77:96:50:e7: eb:30:22:56:64:ec:9a:bb:8d:e7:b6:5c:6a:0d:e0:35:6b:c6: e9:d2:7d:4a:cb:15:20:f7:9f:e0:13:87:33:51:b4:12:55:ab: 89:26:ea:99:6a:98:3f:5c:eb:5e:9c:66:53:39:9b:a4:fe:3f: be:e8:3c:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUwNTExMDUwNjQwWhcNMjUwNTE4MDUwNjQwWjAYMRYwFAYD VQQDEw02ODIwMzA2MC00NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6vwLaoDLCjleauPR861AUpnj9n/8IMY6SloHBP3b93/U6atZ7zxWonf3152B h3MS0c3uL2TIWASK7FL1XHovBQx+1zDs4mKUu5SKU/AdAt0I32kvorBpp0J01AWz 4cVsQMchQlcsKaTTTV/bYk881p/nRy73BT5OCqvM4NaMa3VJG+cUtNle/tJtKI/z Ffjf3oBzoWRk5x8vylDREtehU9n1CpczGyScd09HHpzLD4B+1JKvh98Sz9gl9zjp JKydm8YCbGtau6COUu/a97BFzC4KHCaHPI2YBp29xilupDCYAPLhGODPL8AC00Be Qb6kAitdfk5vrsrbgPIQaSLRmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeYyGHJ wz+8BrctWZTq7BeSvv+aMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm2OlSOICDITpw/d1RaLWs/FudyuAu8fCm9Wbixv2CqDyit9cJ1DIv U4BOjc48yNb6R9EhoIcrO81IQGqypX11yyu4goLvdhOHh2qbl5snU/Sky15QpCTb 02qjh7XDz7Cvj/gEEa6oCZo5hGtVTwMjjXsujtOneFXugkkXQQ69kBhrVm3OI8wR D0DuOP8LOHWmah+uslIZgr2QMDiA7ByIkY/a2/KTJMW94Q5HjeDhMB2ZMAC31qNi rPmsBc+BAkmI83eWUOfrMCJWZOyau43ntlxqDeA1a8bp0n1KyxUg95/gE4czUbQS VauJJuqZapg/XOtenGZTOZuk/j++6Dx6 -----END CERTIFICATE-----Generated at Mon May 12 06:51:43 2025 by rpki-client