$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: kKKOcbhw2jnVcj18Z4MyWFzICyba8W9RCnOpk68t5zs= Subject key identifier: 70:19:18:64:1E:64:BD:42:F1:0D:EE:CF:CE:0D:D4:5C:5A:6B:EA:F5 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 017E Signing time: Thu 23 Jul 2026 06:11:34 +0000 Manifest this update: Thu 23 Jul 2026 06:11:33 +0000 Manifest next update: Thu 30 Jul 2026 06:11:33 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: R2lCIDfQZiwQ7GSjvk8lkG/k0LJyUKNCgWE5G916J/Y=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:11:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jul 23 06:11:33 2026 GMT Not After : Jul 30 06:11:33 2026 GMT Subject: CN=6a61b096-71bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b4:6a:a2:31:59:10:00:29:64:a4:2a:10:02: f4:dd:53:3c:47:a9:54:91:16:36:c0:64:58:59:fb: db:59:64:6b:be:a8:96:57:56:67:da:85:7b:03:11: 66:60:34:04:c5:4d:42:bb:a0:c7:08:bf:f7:7e:e8: 15:d2:49:9a:ee:fb:af:23:e1:28:f1:a7:28:88:8f: f2:cf:e1:f6:5b:40:11:9d:95:17:4a:e8:92:ce:08: ad:3f:a5:fc:26:41:af:42:69:5a:2d:fc:db:07:d7: f5:86:fe:3b:f1:32:59:80:72:85:cc:42:4e:fc:a9: 3d:2b:6e:42:f9:b9:2f:e0:71:e9:dd:56:da:e9:49: b0:a0:d8:bc:18:81:31:df:75:d9:b8:77:bc:e3:de: e5:d2:9f:3e:09:c7:27:b6:e8:00:8d:90:6a:d0:d3: 57:c7:48:9b:ee:66:55:c1:28:f2:d0:5f:96:84:36: a8:52:74:54:8c:9e:99:49:26:b6:92:9d:65:10:5a: 0d:68:19:7d:ee:13:67:c7:44:48:4f:cb:32:56:2e: 39:71:95:4c:7b:26:d1:56:62:8b:93:ed:e8:83:3c: 28:8f:d9:7a:65:4c:4d:e7:72:2e:36:72:ec:48:a9: 48:2e:ce:bf:06:be:e6:9b:89:0b:64:88:58:6a:4e: 49:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:19:18:64:1E:64:BD:42:F1:0D:EE:CF:CE:0D:D4:5C:5A:6B:EA:F5 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a0:c5:b4:16:e8:52:0c:e9:da:45:d7:d4:b6:2d:70:33:83: 23:8a:0c:13:d2:72:64:40:ed:ce:60:f6:8f:3f:fa:79:01:fe: 7e:1b:1d:a6:bf:f2:17:68:1e:17:bb:bb:80:1f:cf:52:24:c7: 7e:da:6b:db:26:f4:09:d5:f8:94:b4:8a:60:2f:82:aa:36:8b: eb:ee:01:90:0f:fe:8f:b3:d9:e3:51:54:3c:6c:ff:1e:be:0f: a1:c9:be:fb:81:ea:d9:09:5a:b6:8d:49:13:de:63:64:0b:5d: 23:d2:e8:1c:c0:b1:ae:ee:49:14:4e:5f:07:ca:7e:87:71:53: 8a:10:f8:bb:9e:10:6a:54:5c:64:c8:4d:01:7e:f3:c1:81:27: 99:0f:90:c4:55:2c:fb:e8:31:99:0b:b9:59:1a:72:99:60:d2: d3:98:a2:92:5b:56:ec:4a:4f:c1:6d:59:b2:48:9e:94:5c:b6: b9:99:a7:6d:ab:c7:8e:de:20:00:dd:eb:86:56:2d:82:38:ee: 36:17:fb:03:58:0c:dd:aa:2f:6d:fd:80:47:46:e9:02:f6:df: 9a:e2:5b:66:ed:1f:72:ae:ea:c9:9d:9a:c4:ca:2e:6a:60:e1: 68:86:c3:20:b6:ce:8b:86:3d:3b:17:9b:89:71:c8:b3:07:d9: 53:c1:0b:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwNzIzMDYxMTMzWhcNMjYwNzMwMDYxMTMzWjAYMRYwFAYD VQQDEw02YTYxYjA5Ni03MWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLRqojFZEAApZKQqEAL03VM8R6lUkRY2wGRYWfvbWWRrvqiWV1Zn2oV7AxFm YDQExU1Cu6DHCL/3fugV0kma7vuvI+Eo8acoiI/yz+H2W0ARnZUXSuiSzgitP6X8 JkGvQmlaLfzbB9f1hv478TJZgHKFzEJO/Kk9K25C+bkv4HHp3Vba6UmwoNi8GIEx 33XZuHe8497l0p8+CccntugAjZBq0NNXx0ib7mZVwSjy0F+WhDaoUnRUjJ6ZSSa2 kp1lEFoNaBl97hNnx0RIT8syVi45cZVMeybRVmKLk+3ogzwoj9l6ZUxN53IuNnLs SKlILs6/Br7mm4kLZIhYak5JLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAZGGQe ZL1C8Q3uz84N1Fxaa+r1MB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKaDFtBboUgzp2kXX1LYtcDODI4oME9JyZEDtzmD2jz/6eQH+fhsdpr/yF2ge F7u7gB/PUiTHftpr2yb0CdX4lLSKYC+CqjaL6+4BkA/+j7PZ41FUPGz/Hr4Pocm+ +4Hq2Qlato1JE95jZAtdI9LoHMCxru5JFE5fB8p+h3FTihD4u54QalRcZMhNAX7z wYEnmQ+QxFUs++gxmQu5WRpymWDS05iikltW7EpPwW1ZskielFy2uZmnbavHjt4g AN3rhlYtgjjuNhf7A1gM3aovbf2AR0bpAvbfmuJbZu0fcq7qyZ2axMouamDhaIbD ILbOi4Y9OxebiXHIswfZU8ELoQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:26:24 2026 by rpki-client