$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: tjmhMUM05SLptxUryEg6ExxGfYhzFgeI1b77M/rwSZE= Subject key identifier: 06:B5:27:70:E3:7F:68:80:6C:E7:5F:25:9A:B9:AC:7B:87:A7:1D:10 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: A7 Signing time: Tue 03 Jun 2025 05:59:33 +0000 Manifest this update: Tue 03 Jun 2025 05:59:33 +0000 Manifest next update: Tue 10 Jun 2025 05:59:33 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: JtH5/Mi0RVcBSp+tyOKJ0gQtcwI+CeSEQYPJXxBLfsc=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Jun 3 05:59:33 2025 GMT Not After : Jun 10 05:59:33 2025 GMT Subject: CN=683e8f45-e099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:ae:ac:e3:b6:2a:48:2d:7a:74:d1:19:22: e8:f1:e6:11:4b:7a:94:79:cf:e1:42:d6:6f:be:2c: 9b:e3:2b:76:74:5a:87:d0:3b:a5:04:a7:6a:44:b9: c1:8e:39:1b:77:56:9c:37:f0:a3:d1:39:9f:d5:4d: 98:95:26:f3:0b:84:ea:0e:24:7b:99:61:5e:2f:18: 6c:11:47:1f:e6:5c:27:e7:6e:16:f5:17:a8:4b:91: 32:25:6e:7b:41:d3:13:41:f4:5b:de:f5:21:75:5d: d4:a2:97:8d:55:71:6c:16:4f:d6:26:93:82:2e:0b: 42:90:0e:d3:9e:ec:06:2a:46:d3:65:f0:76:a8:3d: 94:7d:05:66:6c:bf:4a:ba:02:52:ad:a1:25:d3:48: f8:5f:af:64:2d:62:fe:dc:6f:92:57:67:ed:ce:de: 1c:66:ce:54:5a:52:a0:58:95:69:d7:de:8f:d7:e9: d9:67:07:99:70:7a:6e:a5:45:40:f7:e8:1d:71:8c: 35:0d:a0:18:86:e9:5c:88:74:93:b9:1f:6c:bc:84: 41:e0:b1:06:7b:24:c3:40:b2:61:4d:6f:94:e7:9e: da:7e:e3:46:3a:fa:3c:99:4d:62:34:a7:10:83:5c: 2a:5e:2c:d0:8b:28:33:e5:ef:85:9c:06:47:37:e6: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B5:27:70:E3:7F:68:80:6C:E7:5F:25:9A:B9:AC:7B:87:A7:1D:10 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:87:7e:3a:fb:6c:9d:9b:eb:b8:4b:fd:ff:16:b2:dd:35:eb: 48:41:94:92:4c:9e:e1:cf:d7:ad:45:94:51:3d:32:8d:e4:bd: 8e:3a:41:90:3b:bb:8b:d2:91:2d:9a:8d:5a:be:3e:0b:c3:cd: d9:2d:bc:df:bb:a2:46:81:59:d6:14:79:3f:c8:d0:06:bd:32: fe:af:83:8b:86:60:2c:b5:0c:a7:56:8a:2b:7e:32:85:96:14: 92:bf:7b:9b:aa:63:71:93:c5:19:fd:f8:66:df:d0:3b:dc:62: 17:f6:70:fa:fa:fe:70:01:69:3b:1e:46:6c:4d:ee:47:67:93: 53:e1:0f:e2:85:f3:98:ba:b8:8a:5d:d9:bb:1f:9e:bb:f2:8e: d6:26:a9:ce:be:f4:93:ae:c6:7b:ee:62:b0:45:c8:e0:5a:9b: 92:25:73:78:d0:ad:20:94:ed:eb:2e:4c:07:e5:19:13:98:7a: 93:f7:bf:bf:e0:fd:9b:42:79:a8:f7:4b:5a:0a:d4:29:4d:77: 7e:e2:6d:cc:69:60:d0:16:f0:b9:72:9d:e7:27:a5:d1:00:ac: 56:b1:20:93:dd:39:75:fa:a5:07:78:52:8f:7a:34:46:44:3f: f2:69:2a:b5:3c:28:d4:37:92:28:cb:f0:5d:b0:85:15:f5:fd: 39:73:5b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUwNjAzMDU1OTMzWhcNMjUwNjEwMDU1OTMzWjAYMRYwFAYD VQQDEw02ODNlOGY0NS1lMDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9KurOO2KkgtenTRGSLo8eYRS3qUec/hQtZvviyb4yt2dFqH0DulBKdqRLnB jjkbd1acN/Cj0Tmf1U2YlSbzC4TqDiR7mWFeLxhsEUcf5lwn524W9ReoS5EyJW57 QdMTQfRb3vUhdV3UopeNVXFsFk/WJpOCLgtCkA7TnuwGKkbTZfB2qD2UfQVmbL9K ugJSraEl00j4X69kLWL+3G+SV2ftzt4cZs5UWlKgWJVp196P1+nZZweZcHpupUVA 9+gdcYw1DaAYhulciHSTuR9svIRB4LEGeyTDQLJhTW+U557afuNGOvo8mU1iNKcQ g1wqXizQiygz5e+FnAZHN+ZkbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAa1J3Dj f2iAbOdfJZq5rHuHpx0QMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKh346+2ydm+u4S/3/FrLdNetIQZSSTJ7hz9etRZRRPTKN5L2OOkGQ O7uL0pEtmo1avj4Lw83ZLbzfu6JGgVnWFHk/yNAGvTL+r4OLhmAstQynVoorfjKF lhSSv3ubqmNxk8UZ/fhm39A73GIX9nD6+v5wAWk7HkZsTe5HZ5NT4Q/ihfOYuriK Xdm7H5678o7WJqnOvvSTrsZ77mKwRcjgWpuSJXN40K0glO3rLkwH5RkTmHqT97+/ 4P2bQnmo90taCtQpTXd+4m3MaWDQFvC5cp3nJ6XRAKxWsSCT3Tl1+qUHeFKPejRG RD/yaSq1PCjUN5Ioy/BdsIUV9f05c1uX -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:57 2025 by rpki-client