$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: boNKdL8ch/sxhE/Dyx9sD7R4XeMwUh6kLI/qLF5Y9Mc= Subject key identifier: D2:38:20:57:1E:64:9A:5E:07:81:C4:AE:7E:7A:09:6B:23:4E:9F:4A Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: F5 Signing time: Mon 03 Nov 2025 05:16:09 +0000 Manifest this update: Mon 03 Nov 2025 05:16:09 +0000 Manifest next update: Mon 10 Nov 2025 05:16:09 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: e1xgo9IgGMlxhsFsMXCWWllWFcG8bsgHAI7d2NoySuI=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:16:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Nov 3 05:16:09 2025 GMT Not After : Nov 10 05:16:09 2025 GMT Subject: CN=69083a99-008e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:d0:be:9c:67:f0:a4:47:4e:38:4e:9d:9c: 09:a3:da:0d:3d:88:c5:14:d4:7c:11:52:d2:53:bf: d2:fa:47:f9:8d:8e:11:f3:22:2f:d5:cd:0f:fc:75: ce:72:5d:93:ec:a6:47:34:91:02:40:64:98:88:45: 74:8a:30:f6:7d:73:40:91:b6:fe:63:89:0c:c4:06: 88:47:86:79:a2:50:45:6c:86:a1:08:70:e8:8b:44: ae:8f:bb:91:26:f5:cd:41:28:f5:f7:90:ed:a0:48: e9:d4:a2:fe:46:8e:90:c3:7e:5c:8f:f1:30:25:b0: 0b:6a:e7:2c:16:6e:13:47:18:43:57:73:cf:72:fb: 24:46:94:00:73:3f:27:fc:7a:38:ad:5c:5d:a4:45: 24:46:3d:2e:78:4d:53:17:a1:93:2e:9b:5f:48:e8: 14:50:b7:86:0f:79:1f:dc:b4:e8:ab:a4:5e:10:9e: 3c:4f:af:65:ae:3e:9e:7d:d0:52:0b:82:6f:92:90: 8c:ea:ca:cb:a8:d9:eb:dc:ef:31:9d:c6:29:81:46: 0e:87:cb:a7:28:83:32:d6:80:e3:66:d3:41:32:9a: 5c:38:cf:ae:84:e9:5f:9e:60:94:a0:ca:b3:72:36: a7:6e:13:fe:52:40:1e:7d:3e:1f:1f:c1:cd:ec:eb: 14:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:38:20:57:1E:64:9A:5E:07:81:C4:AE:7E:7A:09:6B:23:4E:9F:4A X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0e:09:ff:d2:10:b8:e3:c3:48:f7:6e:35:12:1c:8b:2d:28: 02:b7:d5:d2:06:11:96:5d:1c:81:64:1f:8f:4d:b0:bc:3c:58: 12:47:c4:d0:38:aa:49:dd:fb:30:eb:00:3c:b1:c1:4b:3b:e8: 65:82:d5:5e:55:cc:2e:e3:29:a8:19:86:54:d8:b2:4d:e0:d1: 18:31:d9:8e:3b:e2:89:a9:27:45:ba:e7:d2:d2:f4:85:cb:41: 2a:dd:52:c4:c3:d3:d6:8b:89:8c:32:1b:a1:2d:84:15:65:dd: 7f:be:c3:a1:70:29:71:ba:93:d7:a4:d9:cd:93:8a:2d:32:32: 45:67:5a:7a:61:26:42:87:f3:6d:6b:dd:8b:35:e3:d1:e2:1b: 31:e2:ca:87:50:0d:8c:9b:a9:35:ea:1c:eb:65:88:4b:ec:55: 8f:b1:35:7b:e1:46:20:c4:a5:43:7f:f7:ef:60:a5:eb:71:74: 39:ad:5c:2c:a5:7f:91:1b:7d:ed:bc:8b:9b:68:1a:1c:57:65: 44:b8:bb:b6:7a:18:d7:6a:36:f1:c9:25:f1:2e:fe:46:d5:53: 80:da:2e:57:87:f5:ec:e4:4d:db:49:02:d3:c8:9b:f5:d1:a7: f7:05:4b:50:ad:b5:82:06:64:b8:ce:4c:94:58:4e:4e:09:3c: 48:93:0f:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUxMTAzMDUxNjA5WhcNMjUxMTEwMDUxNjA5WjAYMRYwFAYD VQQDEw02OTA4M2E5OS0wMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYvQvpxn8KRHTjhOnZwJo9oNPYjFFNR8EVLSU7/S+kf5jY4R8yIv1c0P/HXO cl2T7KZHNJECQGSYiEV0ijD2fXNAkbb+Y4kMxAaIR4Z5olBFbIahCHDoi0Suj7uR JvXNQSj195DtoEjp1KL+Ro6Qw35cj/EwJbALaucsFm4TRxhDV3PPcvskRpQAcz8n /Ho4rVxdpEUkRj0ueE1TF6GTLptfSOgUULeGD3kf3LToq6ReEJ48T69lrj6efdBS C4JvkpCM6srLqNnr3O8xncYpgUYOh8unKIMy1oDjZtNBMppcOM+uhOlfnmCUoMqz cjanbhP+UkAefT4fH8HN7OsUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNI4IFce ZJpeB4HErn56CWsjTp9KMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArDgn/0hC448NI9241EhyLLSgCt9XSBhGWXRyBZB+PTbC8PFgSR8TQ OKpJ3fsw6wA8scFLO+hlgtVeVcwu4ymoGYZU2LJN4NEYMdmOO+KJqSdFuufS0vSF y0Eq3VLEw9PWi4mMMhuhLYQVZd1/vsOhcClxupPXpNnNk4otMjJFZ1p6YSZCh/Nt a92LNePR4hsx4sqHUA2Mm6k16hzrZYhL7FWPsTV74UYgxKVDf/fvYKXrcXQ5rVws pX+RG33tvIubaBocV2VEuLu2ehjXajbxySXxLv5G1VOA2i5Xh/Xs5E3bSQLTyJv1 0af3BUtQrbWCBmS4zkyUWE5OCTxIkw+h -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:48 2025 by rpki-client