$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: UOD1xyXkFyv0QeebYQ3+reWXCfeMfKlkl60Q+k5K5fk= Subject key identifier: 49:8F:98:60:0F:45:40:84:50:2D:1C:54:05:69:AA:8F:6B:91:B8:3C Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 017B Signing time: Fri 17 Jul 2026 05:46:38 +0000 Manifest this update: Fri 17 Jul 2026 05:46:38 +0000 Manifest next update: Fri 24 Jul 2026 05:46:38 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: GQKvQxpm9N+352rTCQRO6v86svBmYMRBHsR0olhtI0U=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 05:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jul 17 05:46:38 2026 GMT Not After : Jul 24 05:46:38 2026 GMT Subject: CN=6a59c1be-8a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:cd:80:78:9d:a3:af:23:7d:f2:2c:67:57: 3f:c9:f4:ae:a1:24:e1:82:a9:12:6d:b7:25:83:35: d1:a8:3e:6c:d6:2a:70:1b:a9:69:bd:ff:c9:e6:1e: a1:f7:00:65:63:fa:89:29:47:46:5a:24:24:d2:c2: 16:a3:c8:c7:05:79:7d:8d:4b:b8:98:a6:5c:aa:8b: bc:69:4d:d5:ca:eb:23:29:1f:3e:5d:ed:f2:77:5d: e7:ea:39:27:f2:dc:f4:00:af:0a:49:16:ad:a7:cc: 1d:b2:c4:40:e0:73:d2:fc:c7:03:44:fd:de:b2:63: 8d:ab:ab:ab:90:65:ac:4b:91:33:94:01:5e:66:32: 19:46:71:c6:99:fd:ee:2e:7f:74:48:7c:04:b2:d2: 2d:36:ec:5e:50:11:09:9a:09:24:5d:4f:81:8e:fe: 44:9f:70:8b:04:5e:bf:9e:28:a9:e9:86:4e:b2:75: 1f:c0:e0:76:bc:ec:92:fd:87:cd:24:fc:e1:9a:dd: 70:13:89:aa:d7:50:78:fc:5d:93:e1:c1:91:e0:06: 8e:91:ae:35:70:96:84:de:bc:08:92:3a:d7:ad:c8: 2f:7c:98:3c:9b:67:9c:08:8d:80:cb:a3:85:99:0f: ba:c1:07:5a:95:96:c7:d8:12:90:c5:3a:d3:9a:3e: 93:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8F:98:60:0F:45:40:84:50:2D:1C:54:05:69:AA:8F:6B:91:B8:3C X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c2:79:99:e5:fe:c5:87:76:77:f1:3a:6f:78:57:cf:95:5f: 5a:f0:2c:6e:cf:35:5b:17:dd:0d:09:59:81:37:3e:77:f9:4b: 38:38:34:ae:ec:99:bc:e9:ce:f0:73:6a:0b:10:94:7e:97:8d: dd:27:62:40:9e:61:e1:4f:76:85:45:4b:71:32:10:48:6c:eb: 35:a4:ce:ed:a0:d0:20:3a:37:0b:02:5f:d6:1f:e6:1a:c1:91: c1:f9:7b:66:84:62:3b:f3:ac:22:74:b2:5c:dd:23:28:87:5e: 49:0e:78:1f:48:ca:65:e9:31:ba:fc:93:1d:52:8f:b8:91:27: 74:af:39:20:df:3a:2e:7d:4a:26:95:bf:8e:52:54:ec:d0:99: 5f:1a:d8:27:33:0d:f3:19:b2:dc:3a:6a:7a:27:3c:34:bb:91: 87:bf:e1:e1:8b:d7:9c:68:07:2a:10:55:30:1f:b1:d3:95:fa: b3:87:6a:f9:2d:7e:7c:ff:1f:dc:36:de:34:3e:fe:03:a9:30: 9e:d1:88:86:7e:64:3f:27:13:be:3d:09:9c:13:b3:19:42:5b: aa:70:a6:3b:e9:e9:60:18:1a:0e:90:23:c0:22:89:1f:12:11: bf:fc:c7:cf:dd:89:8a:7a:8e:50:d2:f3:43:ab:45:77:99:56: d9:cf:28:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwNzE3MDU0NjM4WhcNMjYwNzI0MDU0NjM4WjAYMRYwFAYD VQQDEw02YTU5YzFiZS04YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyl3NgHido68jffIsZ1c/yfSuoSThgqkSbbclgzXRqD5s1ipwG6lpvf/J5h6h 9wBlY/qJKUdGWiQk0sIWo8jHBXl9jUu4mKZcqou8aU3VyusjKR8+Xe3yd13n6jkn 8tz0AK8KSRatp8wdssRA4HPS/McDRP3esmONq6urkGWsS5EzlAFeZjIZRnHGmf3u Ln90SHwEstItNuxeUBEJmgkkXU+Bjv5En3CLBF6/niip6YZOsnUfwOB2vOyS/YfN JPzhmt1wE4mq11B4/F2T4cGR4AaOka41cJaE3rwIkjrXrcgvfJg8m2ecCI2Ay6OF mQ+6wQdalZbH2BKQxTrTmj6TXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmPmGAP RUCEUC0cVAVpqo9rkbg8MB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAosJ5meX+xYd2d/E6b3hXz5VfWvAsbs81WxfdDQlZgTc+d/lLODg0ruyZvOnO 8HNqCxCUfpeN3SdiQJ5h4U92hUVLcTIQSGzrNaTO7aDQIDo3CwJf1h/mGsGRwfl7 ZoRiO/OsInSyXN0jKIdeSQ54H0jKZekxuvyTHVKPuJEndK85IN86Ln1KJpW/jlJU 7NCZXxrYJzMN8xmy3Dpqeic8NLuRh7/h4YvXnGgHKhBVMB+x05X6s4dq+S1+fP8f 3DbeND7+A6kwntGIhn5kPycTvj0JnBOzGUJbqnCmO+npYBgaDpAjwCKJHxIRv/zH z92JinqOUNLzQ6tFd5lW2c8oCw== -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:16 2026 by rpki-client