$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: 6+MkMXouTZIBwtpWSdzg5jT2impRxxDT+UO6y7J0SWo= Subject key identifier: 2C:16:32:87:C2:C4:E7:94:07:3C:B6:C1:12:7A:3B:39:20:33:61:29 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: BE Signing time: Sat 19 Jul 2025 06:07:52 +0000 Manifest this update: Sat 19 Jul 2025 06:07:51 +0000 Manifest next update: Sat 26 Jul 2025 06:07:51 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: TZE3dOatowekyv9iod+mFqDPgFPClSdgQGTQXd8SslQ=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jul 19 06:07:51 2025 GMT Not After : Jul 26 06:07:51 2025 GMT Subject: CN=687b3638-e443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:9e:a6:70:8c:fb:81:97:76:1c:ca:1b:46: 52:55:37:49:24:0d:79:56:4a:dc:f9:06:cf:8d:22: 5d:d5:61:fe:51:bc:5e:3d:2e:51:1c:a2:9b:42:19: 57:39:8e:50:ba:8d:48:b5:50:c3:78:a0:cf:a4:00: 55:ce:a5:a3:f5:e5:18:bd:af:2c:44:0e:c5:aa:73: 6b:18:6c:3e:05:71:d6:c0:ee:9e:f0:2e:d1:4f:4c: da:21:80:02:6a:0a:64:5c:ca:3c:e7:50:51:35:14: 79:93:e2:4e:b7:2a:54:cc:5b:99:16:03:2d:02:22: 80:6d:bb:5c:a3:ff:78:8e:5b:72:61:7a:02:ce:c7: 17:a3:1c:2a:ea:22:8f:91:f6:4f:da:af:81:b7:f8: b8:ad:54:bf:6a:a5:2c:f2:93:d2:04:39:db:3c:66: c4:5d:b0:80:25:72:d5:56:b4:ba:60:11:49:a6:fb: 26:6c:c4:62:91:d6:ba:d6:da:02:b3:de:1f:f2:f3: 6c:0c:4e:88:5a:37:23:f0:da:c8:64:09:b7:98:93: ae:fd:bf:43:f0:4f:c5:93:8e:2f:f7:fe:f1:d6:48: e9:fb:e4:f8:b0:6f:05:bc:32:db:db:ec:76:2d:09: 4b:df:71:87:b3:82:7f:60:82:c3:f7:a2:5c:61:fe: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:16:32:87:C2:C4:E7:94:07:3C:B6:C1:12:7A:3B:39:20:33:61:29 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:2c:06:7e:a5:0a:54:1a:06:81:ef:45:5d:1a:fb:7f:25:f2: 43:77:fc:24:63:e3:8c:1b:c5:df:fb:3b:17:65:a8:68:a8:ff: ff:6b:e9:32:ff:85:04:7a:58:3e:0a:92:a1:8f:d4:61:94:5e: a3:14:86:21:87:d5:98:b9:bb:8f:80:28:63:e0:ba:3f:a5:70: 3c:0e:2c:aa:7e:02:00:cf:e0:90:01:1f:f1:d1:56:ec:fe:54: b7:f7:c3:fe:25:1f:67:cb:59:15:ee:de:55:85:63:d5:3a:41: 64:d0:e2:f2:6d:f1:f2:8b:2d:7e:0e:c2:ad:4f:81:9d:35:c9: d0:b4:7c:29:51:3d:b8:38:12:5c:31:26:a7:cf:d4:94:87:59: da:88:90:09:04:fe:07:b6:27:c2:53:1c:50:04:98:a4:83:3a: d6:df:b3:34:55:59:cb:af:98:b7:9a:4a:32:a9:f4:d4:2d:df: be:38:04:11:ea:80:bd:5c:a9:55:71:57:89:f2:ec:5a:a0:02: 8c:d8:1c:b3:79:fa:af:07:13:49:1e:c8:8a:07:7d:72:f0:69: ac:bb:23:8b:86:b1:e8:cb:7f:af:6d:2e:67:16:22:d4:ee:d7: 68:b1:75:ec:af:1b:54:73:7b:ba:ae:cd:65:5a:f2:22:61:1f: 3b:b1:fb:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUwNzE5MDYwNzUxWhcNMjUwNzI2MDYwNzUxWjAYMRYwFAYD VQQDEw02ODdiMzYzOC1lNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2GepnCM+4GXdhzKG0ZSVTdJJA15Vkrc+QbPjSJd1WH+UbxePS5RHKKbQhlX OY5Quo1ItVDDeKDPpABVzqWj9eUYva8sRA7FqnNrGGw+BXHWwO6e8C7RT0zaIYAC agpkXMo851BRNRR5k+JOtypUzFuZFgMtAiKAbbtco/94jltyYXoCzscXoxwq6iKP kfZP2q+Bt/i4rVS/aqUs8pPSBDnbPGbEXbCAJXLVVrS6YBFJpvsmbMRikda61toC s94f8vNsDE6IWjcj8NrIZAm3mJOu/b9D8E/Fk44v9/7x1kjp++T4sG8FvDLb2+x2 LQlL33GHs4J/YILD96JcYf4V2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCwWMofC xOeUBzy2wRJ6OzkgM2EpMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCLAZ+pQpUGgaB70VdGvt/JfJDd/wkY+OMG8Xf+zsXZahoqP//a+ky /4UEelg+CpKhj9RhlF6jFIYhh9WYubuPgChj4Lo/pXA8DiyqfgIAz+CQAR/x0Vbs /lS398P+JR9ny1kV7t5VhWPVOkFk0OLybfHyiy1+DsKtT4GdNcnQtHwpUT24OBJc MSanz9SUh1naiJAJBP4HtifCUxxQBJikgzrW37M0VVnLr5i3mkoyqfTULd++OAQR 6oC9XKlVcVeJ8uxaoAKM2ByzefqvBxNJHsiKB31y8GmsuyOLhrHoy3+vbS5nFiLU 7tdosXXsrxtUc3u6rs1lWvIiYR87sfs/ -----END CERTIFICATE-----Generated at Sun Jul 20 06:19:42 2025 by rpki-client