$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: DoESqZM4xMXq17gD3goVOXR9qtrlQGU0DvMd9id/p+Y= Subject key identifier: B9:C7:C9:62:35:9C:6B:BE:70:66:D3:61:E1:DE:B5:F8:72:92:55:50 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 0134 Signing time: Sun 01 Mar 2026 06:33:56 +0000 Manifest this update: Sun 01 Mar 2026 06:33:56 +0000 Manifest next update: Sun 08 Mar 2026 06:33:56 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: B2M3tv9EwmrYaz2wq17RkhXrl8XIuSVWANqfYCJPleU=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: JdlW3zfugXT1nnN8YoMVEFmQcr0trjuADjjwBtb4laU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:33:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Mar 1 06:33:56 2026 GMT Not After : Mar 8 06:33:56 2026 GMT Subject: CN=69a3ddd4-491e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:a3:47:db:80:e0:af:61:6b:6f:47:43:15: 8f:13:e4:14:65:80:cf:4a:2a:28:fd:f0:00:31:bd: da:7f:9d:d3:06:51:97:4c:86:17:84:13:4f:64:b9: 25:00:fd:0e:54:ad:51:d9:1f:3f:b0:cf:e3:0c:43: b5:45:93:de:de:3f:bc:ed:dd:9c:ac:b5:2a:8f:56: ea:4d:1c:74:ee:87:a8:8a:f0:85:b9:d4:9c:13:ca: af:e2:60:46:21:f5:3f:b6:21:bc:42:31:91:79:0c: 8d:8d:d6:35:f3:ec:0c:58:14:18:2e:a7:9d:69:f1: 37:1e:f0:09:07:62:cb:c0:d1:fb:89:d3:b0:56:7b: 32:bc:21:92:2f:ad:8a:72:d4:e2:ee:ef:32:a7:9d: f9:08:6c:67:d9:85:26:3c:7c:a7:7d:49:c1:84:df: fc:83:9a:66:20:1d:a2:5e:cf:55:96:2d:10:2d:80: a7:d0:9e:fc:71:c3:ec:39:93:c1:a2:30:54:3c:27: 04:19:ac:6d:b3:16:6d:b1:92:31:a3:d6:87:31:7a: f2:aa:0a:cb:9c:98:00:51:a1:70:dc:44:78:dc:52: 3b:db:75:2e:e6:8e:2d:b4:70:4c:64:f2:bc:cc:c1: ac:21:14:59:2b:b7:37:d1:99:a8:25:3c:f0:b3:4a: ec:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C7:C9:62:35:9C:6B:BE:70:66:D3:61:E1:DE:B5:F8:72:92:55:50 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ef:fb:1c:ef:26:b1:e5:dc:8c:09:3a:56:3d:84:78:74:94: e6:03:92:a4:e1:d6:a7:36:f6:6e:a5:ef:32:ea:75:77:3a:7f: 08:40:0e:56:2d:0c:6f:bb:c8:33:98:3e:89:a9:a7:c2:d4:36: 6d:80:a7:00:79:22:43:21:40:82:da:53:21:e1:86:10:e3:67: 03:16:7c:2e:43:ae:a8:ba:24:e5:b6:d5:53:cd:b8:2c:5e:7b: d2:c9:74:5e:8b:54:a4:87:88:4d:b9:29:31:eb:99:33:2a:a2: 5f:32:61:fc:05:ce:a8:c7:c6:ed:d8:84:d2:e4:f0:26:0a:74: e1:be:0d:5a:6f:02:75:f1:f7:bd:66:dd:2e:2f:aa:ae:ee:da: 67:0a:c6:e1:2e:76:ba:95:a5:b1:dc:77:39:0f:0b:9a:ee:c2: 11:7a:0a:ae:29:a4:9f:2c:b8:a7:0e:14:29:c8:b0:e0:b5:41: be:b3:3e:e4:25:b6:b2:d7:50:70:a7:22:f5:96:df:b3:83:02: 92:81:60:e5:6d:40:6b:19:26:6c:fa:68:e2:fa:06:0d:93:c8: 30:ad:0e:67:3c:7a:9a:b3:20:7b:34:3b:7b:d6:d1:d2:00:9a: 13:d8:6c:69:6b:09:2a:b3:63:26:f6:67:6f:c0:83:d0:32:64: b2:39:dd:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwMzAxMDYzMzU2WhcNMjYwMzA4MDYzMzU2WjAYMRYwFAYD VQQDEw02OWEzZGRkNC00OTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz2jR9uA4K9ha29HQxWPE+QUZYDPSioo/fAAMb3af53TBlGXTIYXhBNPZLkl AP0OVK1R2R8/sM/jDEO1RZPe3j+87d2crLUqj1bqTRx07oeoivCFudScE8qv4mBG IfU/tiG8QjGReQyNjdY18+wMWBQYLqedafE3HvAJB2LLwNH7idOwVnsyvCGSL62K ctTi7u8yp535CGxn2YUmPHynfUnBhN/8g5pmIB2iXs9Vli0QLYCn0J78ccPsOZPB ojBUPCcEGaxtsxZtsZIxo9aHMXryqgrLnJgAUaFw3ER43FI723Uu5o4ttHBMZPK8 zMGsIRRZK7c30ZmoJTzws0rsewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnHyWI1 nGu+cGbTYeHetfhyklVQMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQO/7HO8mseXcjAk6Vj2EeHSU5gOSpOHWpzb2bqXvMup1dzp/CEAOVi0Mb7vI M5g+iamnwtQ2bYCnAHkiQyFAgtpTIeGGEONnAxZ8LkOuqLok5bbVU824LF570sl0 XotUpIeITbkpMeuZMyqiXzJh/AXOqMfG7diE0uTwJgp04b4NWm8CdfH3vWbdLi+q ru7aZwrG4S52upWlsdx3OQ8Lmu7CEXoKrimknyy4pw4UKciw4LVBvrM+5CW2stdQ cKci9Zbfs4MCkoFg5W1AaxkmbPpo4voGDZPIMK0OZzx6mrMgezQ7e9bR0gCaE9hs aWsJKrNjJvZnb8CD0DJksjnd1w== -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:52 2026 by rpki-client