$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: Cj7tT0jpIyDNcoysbeh8A+Rmw0AGMi60ngl1yybz3hM= Subject key identifier: 54:97:EB:2A:52:0D:EC:34:F6:C2:75:49:9E:CB:F6:2E:8C:D7:03:95 Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 014D Signing time: Wed 15 Apr 2026 04:50:39 +0000 Manifest this update: Wed 15 Apr 2026 04:50:38 +0000 Manifest next update: Wed 22 Apr 2026 04:50:38 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: OnnhZXczLdKPjtpCsayY3L33Vun7pxe+Df+yoOqEF7g=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: dXWvzmI36/WnRSGkqNG90+TZgLmjYERv4giBlG6EeOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Apr 15 04:50:38 2026 GMT Not After : Apr 22 04:50:38 2026 GMT Subject: CN=69df191e-3065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:50:ea:16:5a:88:4b:3d:6d:e6:cf:a5:df: e3:1f:23:86:64:6f:2b:d7:0a:e8:d4:45:05:2e:08: c9:35:c9:92:d2:56:2c:e5:e0:7c:cb:a5:d1:97:2f: fe:6b:b2:48:1c:2b:11:18:ac:f4:cb:18:70:93:a5: 4f:39:ec:22:bb:15:5b:e6:3c:30:2b:bd:77:65:28: f3:f8:fe:2f:c3:6e:be:d2:1e:ad:3e:f1:e5:f5:a2: 9f:8b:f8:68:4f:e9:4b:b9:82:cb:41:91:f0:0c:de: e5:75:d3:96:de:b7:1d:ef:cf:03:d1:bc:f4:6f:6f: 9a:ee:97:b9:a5:7c:e8:05:d9:3d:cc:dc:88:cc:d0: a5:8b:18:af:47:a0:2d:72:30:df:06:3b:f9:d0:57: 9f:c2:ac:c1:47:3b:2c:e8:5f:65:4c:98:ae:e3:f7: 75:f2:d5:d1:ac:77:7b:dd:bd:fc:e8:8a:b4:5b:71: eb:3f:8b:ad:58:10:3a:c2:8b:0d:31:53:d5:6c:ad: 92:bc:16:81:3b:38:45:d9:69:6d:fe:1f:aa:f9:ee: e8:88:7b:15:28:07:6e:62:cb:08:03:9d:06:f0:b6: e2:0b:63:c5:18:9c:2a:14:d7:ce:62:6f:23:5a:b2: 79:35:42:67:e8:7d:62:9f:d5:ee:c3:c7:d2:c5:ba: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:97:EB:2A:52:0D:EC:34:F6:C2:75:49:9E:CB:F6:2E:8C:D7:03:95 X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bf:d6:a1:11:34:49:84:ad:ad:30:e0:d5:dc:e3:20:98:22: d6:59:8b:cf:ce:11:eb:fb:1a:79:b8:99:3a:3f:aa:25:3c:d5: 43:f0:ed:1f:20:69:b1:95:c4:da:0d:02:fa:d2:37:03:1d:70: fe:9c:b5:85:25:3e:62:be:b4:6b:9f:65:6a:ed:38:d6:2a:8b: 0b:64:a7:b6:d3:b7:32:72:16:d7:cb:5f:45:14:e8:9a:98:ed: aa:33:b5:3f:5e:14:43:9d:75:d9:7b:21:a6:c1:58:53:9b:d6: 87:f0:5b:1b:91:e1:26:21:a2:43:ea:41:86:de:7e:7b:f0:4c: 58:8a:75:2f:6e:ff:01:9e:5b:d8:3e:98:f8:66:4b:4d:fe:fc: 42:fd:18:1d:ba:d7:91:52:62:b1:31:3d:f1:79:50:a6:93:5c: a9:ae:83:10:5a:2e:00:40:f4:b7:8f:2b:ea:06:bb:a6:b5:da: 32:a4:40:a0:59:eb:44:c2:58:38:3d:25:f3:1c:31:46:40:23: 08:86:e6:fa:38:4b:ca:43:84:36:ff:6b:ca:43:b9:1f:2b:f3: 78:cd:a8:d4:50:a8:ea:b4:5d:13:0f:4e:9b:9b:82:19:76:b3: 29:54:50:3e:5e:46:dd:2c:6c:7e:c5:fb:ef:6c:c7:dc:d2:3a: 4b:53:23:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjYwNDE1MDQ1MDM4WhcNMjYwNDIyMDQ1MDM4WjAYMRYwFAYD VQQDEw02OWRmMTkxZS0zMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAioFQ6hZaiEs9bebPpd/jHyOGZG8r1wro1EUFLgjJNcmS0lYs5eB8y6XRly/+ a7JIHCsRGKz0yxhwk6VPOewiuxVb5jwwK713ZSjz+P4vw26+0h6tPvHl9aKfi/ho T+lLuYLLQZHwDN7lddOW3rcd788D0bz0b2+a7pe5pXzoBdk9zNyIzNClixivR6At cjDfBjv50FefwqzBRzss6F9lTJiu4/d18tXRrHd73b386Iq0W3HrP4utWBA6wosN MVPVbK2SvBaBOzhF2Wlt/h+q+e7oiHsVKAduYssIA50G8LbiC2PFGJwqFNfOYm8j WrJ5NUJn6H1in9Xuw8fSxbqOrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFSX6ypS Dew09sJ1SZ7L9i6M1wOVMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX7/WoRE0SYStrTDg1dzjIJgi1lmLz84R6/saebiZOj+qJTzVQ/DtHyBpsZXE 2g0C+tI3Ax1w/py1hSU+Yr60a59lau041iqLC2SnttO3MnIW18tfRRTompjtqjO1 P14UQ5112XshpsFYU5vWh/BbG5HhJiGiQ+pBht5+e/BMWIp1L27/AZ5b2D6Y+GZL Tf78Qv0YHbrXkVJisTE98XlQppNcqa6DEFouAED0t48r6ga7prXaMqRAoFnrRMJY OD0l8xwxRkAjCIbm+jhLykOENv9rykO5HyvzeM2o1FCo6rRdEw9Om5uCGXazKVRQ Pl5G3SxsfsX772zH3NI6S1MjVA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:31:04 2026 by rpki-client