$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: j9K1vAwRIXqoZ9iL12EzHSR0G03nf/c2/fwl6dNpo7s= Subject key identifier: 55:8B:57:9F:CC:04:A4:73:A0:B5:A3:D3:E8:7E:BB:1D:E8:08:5C:92 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 019D Signing time: Mon 21 Sep 2026 04:19:47 +0000 Manifest this update: Mon 21 Sep 2026 04:19:47 +0000 Manifest next update: Mon 28 Sep 2026 04:19:47 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: QS9KwBMzsoWvrrasTzA+FT/Gi//R+lGtvg0Zit24ivE=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Sep 21 04:19:47 2026 GMT Not After : Sep 28 04:19:47 2026 GMT Subject: CN=6ab0b063-b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:91:35:dc:a9:f7:6d:71:3f:cf:01:8c:a3:d4: 2c:74:91:14:6e:9b:94:9e:22:48:f4:dc:73:dd:16: 2f:2c:3f:c6:64:23:15:07:9c:fb:1c:8e:5e:3c:7e: 88:fd:83:bc:f7:00:92:d3:3e:2a:13:8d:31:b5:8c: 3e:92:39:ca:29:dd:c5:ed:70:ca:0e:a3:4c:a5:bd: 9f:ea:bd:72:ad:45:7d:d0:8c:eb:27:2b:33:63:b6: a3:e5:ac:0e:76:25:0a:d5:6f:82:fa:52:32:47:21: 01:c5:ad:07:55:fa:c9:3e:a4:c3:d8:d9:20:e9:f1: 68:ee:3f:e7:a1:bc:72:9f:d5:fa:70:1b:2e:01:c7: 01:eb:29:d3:43:2d:6b:14:34:96:34:40:ac:94:38: b7:06:40:3e:09:de:9d:d1:16:0b:60:9c:f8:55:7d: 28:ae:6c:0a:c8:84:64:0c:2a:d4:7c:1d:05:f4:b5: c0:48:71:5a:c1:22:b4:2e:09:1d:7f:f7:42:b5:bb: 0b:b7:ac:ea:72:4e:81:eb:3e:19:52:3e:6c:bb:3e: a1:d3:2a:79:34:e5:30:5d:ac:7b:b6:d3:ba:6a:3e: cf:62:c1:1d:43:da:85:a5:13:7c:1d:30:3f:af:20: ff:b6:f9:58:25:3d:f3:52:4d:33:c0:e8:1a:0f:f3: 50:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8B:57:9F:CC:04:A4:73:A0:B5:A3:D3:E8:7E:BB:1D:E8:08:5C:92 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:16:51:53:09:d5:31:26:db:4f:43:1e:75:e7:28:64:5e:41: 3a:f1:86:2b:36:a4:51:62:c1:a3:53:86:08:cb:45:09:f2:a4: b3:ec:7b:7c:2b:c8:4d:61:dc:92:23:71:6c:5f:89:4f:db:39: f7:c1:a8:37:08:2d:10:18:67:0b:69:27:8b:b9:50:99:6b:b7: 2e:37:2f:ce:0e:ab:6e:b9:a8:6e:33:d2:6a:ae:d8:f7:b3:99: 5e:27:ce:9a:4b:0a:1d:84:b2:7f:d0:56:49:7b:6f:60:6a:2b: 03:fe:ca:13:76:73:81:a9:82:e8:f3:57:07:8b:c4:dc:69:88: 6c:05:e1:92:69:f2:3c:0e:66:ee:f7:01:f2:3e:01:18:5e:d1: 3d:d4:4b:08:dc:ec:95:26:6d:5b:73:4a:10:12:50:9c:5d:b9: a2:ed:68:a1:f8:04:4f:bf:e5:b4:20:78:2d:1d:d6:97:e0:42: e2:63:c6:3a:60:c5:b7:ac:f0:75:60:1c:dd:11:e5:f5:7a:50: 88:4d:df:44:2a:88:61:9d:3a:32:bd:56:f0:ec:5b:7b:98:62: 82:80:1b:be:f2:85:80:c6:d1:8d:34:c9:bf:a9:78:d8:92:bf: 9e:32:e6:59:61:01:69:53:1e:96:f2:82:94:cd:c2:65:f9:60: 9b:74:83:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwOTIxMDQxOTQ3WhcNMjYwOTI4MDQxOTQ3WjAYMRYwFAYD VQQDEw02YWIwYjA2My1iMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJE13Kn3bXE/zwGMo9QsdJEUbpuUniJI9Nxz3RYvLD/GZCMVB5z7HI5ePH6I /YO89wCS0z4qE40xtYw+kjnKKd3F7XDKDqNMpb2f6r1yrUV90IzrJyszY7aj5awO diUK1W+C+lIyRyEBxa0HVfrJPqTD2Nkg6fFo7j/nobxyn9X6cBsuAccB6ynTQy1r FDSWNECslDi3BkA+Cd6d0RYLYJz4VX0ormwKyIRkDCrUfB0F9LXASHFawSK0Lgkd f/dCtbsLt6zqck6B6z4ZUj5suz6h0yp5NOUwXax7ttO6aj7PYsEdQ9qFpRN8HTA/ ryD/tvlYJT3zUk0zwOgaD/NQQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWLV5/M BKRzoLWj0+h+ux3oCFySMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOhZRUwnVMSbbT0MedecoZF5BOvGGKzakUWLBo1OGCMtFCfKks+x7fCvITWHc kiNxbF+JT9s598GoNwgtEBhnC2kni7lQmWu3Ljcvzg6rbrmobjPSaq7Y97OZXifO mksKHYSyf9BWSXtvYGorA/7KE3ZzgamC6PNXB4vE3GmIbAXhkmnyPA5m7vcB8j4B GF7RPdRLCNzslSZtW3NKEBJQnF25ou1oofgET7/ltCB4LR3Wl+BC4mPGOmDFt6zw dWAc3RHl9XpQiE3fRCqIYZ06Mr1W8Oxbe5higoAbvvKFgMbRjTTJv6l42JK/njLm WWEBaVMelvKClM3CZflgm3SDaA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:24:59 2026 by rpki-client