$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: P1mAf7HWfg20FfCXwKBbNCgoYR9EHeqxMegpuOwrYwg= Subject key identifier: 94:57:D5:6A:90:7E:A9:F2:FD:92:0D:03:BB:67:2A:A0:8A:EA:CC:04 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 0148 Signing time: Sun 05 Apr 2026 04:43:55 +0000 Manifest this update: Sun 05 Apr 2026 04:43:55 +0000 Manifest next update: Sun 12 Apr 2026 04:43:55 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: JoaF1V9Exbp/U+m63x8bYR7GAsB2jXUQ4v4qCI5/+DI=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Apr 5 04:43:55 2026 GMT Not After : Apr 12 04:43:55 2026 GMT Subject: CN=69d1e88b-de83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5f:0f:0c:fc:91:05:2e:a6:62:b2:f2:e1:a1: ec:6f:b7:7d:31:8b:bf:2f:48:36:08:71:df:01:cb: 4f:a6:ee:e1:b7:5c:d9:e3:54:b8:e5:4b:b2:6f:00: 84:ad:48:8e:2c:7b:e0:16:1e:cf:80:6c:c8:de:49: ee:2e:ad:af:53:72:a4:20:07:ff:b6:ea:0c:19:eb: 6c:96:d6:a7:7c:1a:e1:fa:62:71:56:21:59:25:46: e7:40:cd:fa:95:7f:48:01:a0:e9:a8:5b:0b:97:bf: 89:b7:7f:03:e2:98:6e:47:40:24:7c:9a:03:90:bb: 07:70:11:e7:5b:69:d1:1d:ff:77:14:7c:8e:77:a8: cc:eb:fb:b4:1b:22:c2:e4:f6:54:4e:0f:0b:39:b4: dc:ee:5a:ae:36:ea:5b:ed:d8:98:d1:d4:f8:75:a2: 22:d1:50:df:0c:23:7f:b6:9e:71:e3:8a:14:7f:d1: e3:1a:a2:63:36:c6:77:a8:8d:72:21:ef:4a:95:b1: 66:1f:e0:d1:5b:45:71:39:6d:a5:8d:c4:99:47:bf: f7:3a:8d:39:6f:2d:24:39:00:76:90:d9:47:14:13: 9d:0c:00:7c:70:ce:7f:ba:c8:b9:ff:74:a5:bd:81: b6:91:14:ea:6d:06:24:52:bc:66:88:c5:0b:76:0a: 3b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:57:D5:6A:90:7E:A9:F2:FD:92:0D:03:BB:67:2A:A0:8A:EA:CC:04 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:2a:5c:0b:32:e5:8f:6e:81:8c:30:a2:d6:fe:9d:36:2c: 11:00:78:91:89:67:76:91:1c:4f:90:53:9e:35:b4:71:c1:81: 2d:c2:91:54:dc:1f:47:ca:e2:6e:74:88:5b:91:9b:e1:23:74: 34:07:74:62:32:3f:20:4d:4d:a4:f7:37:6f:29:99:91:9a:56: 81:41:5c:db:b6:3b:ef:75:4f:5d:c6:c3:f7:26:f8:57:3f:e6: d2:87:c0:bf:3d:3b:8a:b1:3b:85:20:93:ae:0d:12:d0:80:13: c1:6b:e1:2c:1c:ac:f8:23:64:fc:a9:94:7b:49:2e:c6:bb:01: 59:2b:75:89:71:99:ca:8d:b3:cb:fc:c5:48:22:b0:33:0f:7b: e1:c2:2f:54:9d:19:62:98:84:7d:92:4d:cc:27:97:2a:a4:2a: 87:82:9e:56:f7:5e:43:fc:f1:fe:23:f4:09:66:78:82:07:b4: 25:18:2d:28:88:4f:1e:36:82:5d:44:8a:7b:60:ae:eb:6e:3f: 7e:0c:27:c1:bd:db:03:d1:dc:ca:84:10:8a:ab:70:66:08:79: ce:38:c0:1b:89:47:bc:0c:c3:18:06:b1:00:c3:7e:76:06:25: 9f:be:69:b2:6a:92:bb:4a:78:cb:a7:b5:7f:3f:12:e2:f4:e2: 70:9d:20:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwNDA1MDQ0MzU1WhcNMjYwNDEyMDQ0MzU1WjAYMRYwFAYD VQQDEw02OWQxZTg4Yi1kZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0F8PDPyRBS6mYrLy4aHsb7d9MYu/L0g2CHHfActPpu7ht1zZ41S45UuybwCE rUiOLHvgFh7PgGzI3knuLq2vU3KkIAf/tuoMGetsltanfBrh+mJxViFZJUbnQM36 lX9IAaDpqFsLl7+Jt38D4phuR0AkfJoDkLsHcBHnW2nRHf93FHyOd6jM6/u0GyLC 5PZUTg8LObTc7lquNupb7diY0dT4daIi0VDfDCN/tp5x44oUf9HjGqJjNsZ3qI1y Ie9KlbFmH+DRW0VxOW2ljcSZR7/3Oo05by0kOQB2kNlHFBOdDAB8cM5/usi5/3Sl vYG2kRTqbQYkUrxmiMULdgo7swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRX1WqQ fqny/ZINA7tnKqCK6swEMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKC8qXAsy5Y9ugYwwotb+nTYsEQB4kYlndpEcT5BTnjW0ccGBLcKRVNwfR8ri bnSIW5Gb4SN0NAd0YjI/IE1NpPc3bymZkZpWgUFc27Y773VPXcbD9yb4Vz/m0ofA vz07irE7hSCTrg0S0IATwWvhLBys+CNk/KmUe0kuxrsBWSt1iXGZyo2zy/zFSCKw Mw974cIvVJ0ZYpiEfZJNzCeXKqQqh4KeVvdeQ/zx/iP0CWZ4gge0JRgtKIhPHjaC XUSKe2Cu624/fgwnwb3bA9HcyoQQiqtwZgh5zjjAG4lHvAzDGAaxAMN+dgYln75p smqSu0p4y6e1fz8S4vTicJ0gSw== -----END CERTIFICATE-----Generated at Mon Apr 6 16:35:46 2026 by rpki-client