$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: +6UhcyQeVzqP2p1c84iFymzWilaR8rcx1EAEFmxAGgw= Subject key identifier: A2:76:B7:8D:AD:79:AA:2A:32:96:85:AB:C0:BD:89:3D:6A:9D:8B:30 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: F6 Signing time: Wed 05 Nov 2025 05:26:27 +0000 Manifest this update: Wed 05 Nov 2025 05:26:26 +0000 Manifest next update: Wed 12 Nov 2025 05:26:26 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: 7TAAak3lA5dorHACDCygbfgysrevV1XkVWpUuS9r+Ns=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Nov 5 05:26:26 2025 GMT Not After : Nov 12 05:26:26 2025 GMT Subject: CN=690ae002-5605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:80:75:8e:36:2b:ed:1c:c0:36:77:57:fb: 98:ab:86:87:ee:5f:1a:79:d1:01:d2:e4:48:92:93: c7:b6:f3:fd:95:aa:ae:9b:90:2b:0d:78:d6:c3:13: 02:5d:4c:be:32:59:33:aa:9d:06:8f:4c:17:30:37: cb:ac:47:c6:2b:38:dc:7e:91:7c:ad:9c:97:87:23: 8c:d9:b5:51:39:39:68:a4:30:49:81:26:b6:ef:4a: 0a:0f:44:99:61:79:b4:00:b3:03:45:b9:07:51:f9: 71:45:4d:7b:6b:32:90:a7:20:24:fd:85:08:03:e9: c8:f3:0a:2e:d3:8c:4c:b4:c1:95:be:9b:c9:50:a5: c4:6e:60:12:b0:1d:a6:f4:c3:56:cf:62:cc:04:f6: 70:6b:e7:72:c9:a5:f7:3c:4f:08:1b:39:53:4b:c9: 24:2d:76:90:59:9a:b5:11:20:7f:79:10:13:97:02: c9:e1:c4:55:06:42:4a:86:e1:5d:d4:43:2a:79:7d: 27:f2:8c:fb:41:9e:13:c7:38:4f:c1:09:55:b0:75: 29:33:34:76:bb:8f:61:15:d5:53:e4:fc:92:f9:09: 53:ba:35:5b:3f:83:45:e6:b6:59:8d:1d:a7:bf:8a: e8:4e:25:8c:4b:4f:f8:c6:eb:c5:ce:01:ec:07:07: 32:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:76:B7:8D:AD:79:AA:2A:32:96:85:AB:C0:BD:89:3D:6A:9D:8B:30 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a9:a1:cf:5f:35:46:08:a9:8a:c2:25:8e:6f:ae:00:db:76: ea:6d:a4:0c:7c:e3:f8:01:72:08:51:08:85:8a:05:05:a9:06: 4c:23:03:10:5b:69:d5:c9:c2:2f:e7:23:7f:0c:7b:e7:e7:61: fa:4c:9d:e9:80:1c:d6:fe:68:39:1a:1b:57:5f:49:3a:c6:22: c8:4a:c7:f3:6a:3c:10:16:24:d2:1d:2a:06:dd:b3:de:61:35: b9:dc:f7:cd:72:05:84:93:69:6c:79:3c:5c:44:71:c5:8e:e6: bd:fa:ac:45:46:a1:ab:14:28:57:e6:02:17:b4:18:d9:f0:54: 92:cc:fc:c6:a4:f1:d8:44:c6:fa:98:83:fc:e9:66:6a:ba:4f: 5a:bc:a4:3f:8c:bc:30:a9:e8:e2:ca:88:16:18:7c:69:7d:f8: 5a:6f:7f:bb:c8:45:e0:de:c9:8c:36:d5:fb:f0:b9:0d:ff:16: 38:37:35:c6:3d:31:75:7e:fb:a6:a1:22:76:b2:c7:72:24:cf: 0a:ea:14:65:5b:75:93:4d:5e:4c:be:88:46:2f:bc:55:5a:5b: 5f:32:52:f6:3f:2a:25:0c:42:03:07:dc:38:c5:4d:13:80:22: 2a:67:80:7c:a0:7e:7a:6c:e9:b8:7d:64:14:75:a0:1e:63:4b: 37:ce:42:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUxMTA1MDUyNjI2WhcNMjUxMTEyMDUyNjI2WjAYMRYwFAYD VQQDEw02OTBhZTAwMi01NjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFyAdY42K+0cwDZ3V/uYq4aH7l8aedEB0uRIkpPHtvP9laqum5ArDXjWwxMC XUy+Mlkzqp0Gj0wXMDfLrEfGKzjcfpF8rZyXhyOM2bVROTlopDBJgSa270oKD0SZ YXm0ALMDRbkHUflxRU17azKQpyAk/YUIA+nI8wou04xMtMGVvpvJUKXEbmASsB2m 9MNWz2LMBPZwa+dyyaX3PE8IGzlTS8kkLXaQWZq1ESB/eRATlwLJ4cRVBkJKhuFd 1EMqeX0n8oz7QZ4TxzhPwQlVsHUpMzR2u49hFdVT5PyS+QlTujVbP4NF5rZZjR2n v4roTiWMS0/4xuvFzgHsBwcy/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJ2t42t eaoqMpaFq8C9iT1qnYswMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArqaHPXzVGCKmKwiWOb64A23bqbaQMfOP4AXIIUQiFigUFqQZMIwMQ W2nVycIv5yN/DHvn52H6TJ3pgBzW/mg5GhtXX0k6xiLISsfzajwQFiTSHSoG3bPe YTW53PfNcgWEk2lseTxcRHHFjua9+qxFRqGrFChX5gIXtBjZ8FSSzPzGpPHYRMb6 mIP86WZquk9avKQ/jLwwqejiyogWGHxpffhab3+7yEXg3smMNtX78LkN/xY4NzXG PTF1fvumoSJ2ssdyJM8K6hRlW3WTTV5MvohGL7xVWltfMlL2PyolDEIDB9w4xU0T gCIqZ4B8oH56bOm4fWQUdaAeY0s3zkJi -----END CERTIFICATE-----Generated at Wed Nov 5 18:11:39 2025 by rpki-client