$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: xnRHg2V5DZrWhXGTsOKePGG9mZMNr4A4W7rrU0Da+CY= Subject key identifier: 30:01:FD:16:99:99:2E:E8:ED:73:6B:CA:3C:C2:92:E1:CD:D2:C1:F3 Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 1680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 1677 Signing time: Sun 04 May 2025 16:37:23 +0000 Manifest this update: Sun 04 May 2025 16:37:22 +0000 Manifest next update: Sun 11 May 2025 16:37:22 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: ytMCIFaD2jU6QwQySYrbvVW1X8tJww1DZTkW9+pcEw4=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: DwaSXkwadhXmFgNGjila+YsFoYHDPOwpBM4h3mtwuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 16:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5760 (0x1680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: May 4 16:37:22 2025 GMT Not After : May 11 16:37:22 2025 GMT Subject: CN=681797c3-b69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:be:32:91:fc:28:08:46:3f:36:6a:8e:ba: 6b:e4:60:ed:cd:ce:f9:91:d8:76:4d:e0:4e:b2:86: 43:67:ac:f4:57:2d:f4:75:ba:47:c4:69:38:c9:2d: d1:0c:28:ac:ee:c4:f8:ae:48:71:dd:17:9f:71:b0: 94:c1:84:6e:af:91:e7:83:da:98:66:57:a8:be:66: 1b:f2:a0:ea:e4:e5:45:1d:5a:8e:14:78:b8:48:c2: 30:a8:76:ec:d6:78:68:48:33:09:1d:8c:c8:d7:fa: 50:d3:7d:ce:02:17:d5:58:fb:c8:5d:03:2b:8a:24: e2:83:ab:67:cb:45:94:46:2c:ae:d6:ac:9a:b4:00: 86:66:e0:d1:5f:1d:8b:c6:fa:29:35:f3:c9:27:99: b3:b0:ff:a3:32:43:fa:c6:9e:0f:4d:c9:b7:77:f8: f1:8a:ba:c3:3f:45:9a:18:7d:85:13:33:1e:b8:4e: fd:ac:e8:d9:80:f2:7b:b4:a5:a2:61:c0:fd:4d:60: 82:9f:c0:62:98:49:21:b7:00:f5:ba:03:9d:0e:74: 4c:3b:06:b9:cb:1a:2c:3e:57:b1:57:d2:b1:d1:bf: a3:23:1d:28:9d:7b:d8:65:2b:0c:6e:59:69:b5:47: 18:2c:42:2d:76:3a:b4:b3:a9:f9:09:fd:44:5f:4f: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:01:FD:16:99:99:2E:E8:ED:73:6B:CA:3C:C2:92:E1:CD:D2:C1:F3 X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:36:58:97:48:70:c1:78:1a:14:0b:36:21:61:9f:41:52:f3: ca:c6:ea:dd:da:aa:ae:09:29:aa:cc:1e:a4:e7:67:e6:60:dd: 6e:6d:1f:1e:26:a5:42:0f:7c:60:12:8a:8d:42:0b:d4:fd:93: a2:84:2c:98:e1:3c:8d:3f:96:bb:cf:4f:c0:40:63:2a:a1:43: 3e:a2:b0:86:2b:31:84:2d:3a:83:a0:c2:65:c5:8b:b1:4d:01: 8b:98:a5:ab:ee:32:f5:e4:03:40:2b:90:2e:d5:59:78:97:79: 4f:d4:85:15:8c:31:64:32:29:4a:29:62:0f:5c:05:ef:37:8d: 0e:97:e4:8f:8f:a6:ef:40:ed:98:a1:b5:4a:8f:90:28:0f:9a: ed:5b:30:d1:e2:33:c0:30:17:0e:45:af:a7:b7:97:2f:2d:93: cf:61:fc:fc:99:3f:56:73:63:8d:5f:36:19:bb:70:97:2e:cb: 02:31:0a:f1:f2:24:21:c9:87:c7:2b:51:d8:7c:47:34:07:d0: 63:43:59:04:67:79:a2:e3:cc:07:bb:8a:2f:30:83:eb:67:0c: b3:f7:f0:36:7e:e7:4a:7e:43:75:8e:43:0a:8b:be:75:a4:6f: ec:38:dd:08:d9:0a:61:13:4d:10:f5:b1:70:95:a5:56:64:85: 6e:30:73:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjUwNTA0MTYzNzIyWhcNMjUwNTExMTYzNzIyWjAYMRYwFAYD VQQDEw02ODE3OTdjMy1iNjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDe+MpH8KAhGPzZqjrpr5GDtzc75kdh2TeBOsoZDZ6z0Vy30dbpHxGk4yS3R DCis7sT4rkhx3RefcbCUwYRur5Hng9qYZleovmYb8qDq5OVFHVqOFHi4SMIwqHbs 1nhoSDMJHYzI1/pQ033OAhfVWPvIXQMriiTig6tny0WURiyu1qyatACGZuDRXx2L xvopNfPJJ5mzsP+jMkP6xp4PTcm3d/jxirrDP0WaGH2FEzMeuE79rOjZgPJ7tKWi YcD9TWCCn8BimEkhtwD1ugOdDnRMOwa5yxosPlexV9Kx0b+jIx0onXvYZSsMbllp tUcYLEItdjq0s6n5Cf1EX0/hqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAB/RaZ mS7o7XNryjzCkuHN0sHzMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfNliXSHDBeBoUCzYhYZ9BUvPKxurd2qquCSmqzB6k52fmYN1ubR8e JqVCD3xgEoqNQgvU/ZOihCyY4TyNP5a7z0/AQGMqoUM+orCGKzGELTqDoMJlxYux TQGLmKWr7jL15ANAK5Au1Vl4l3lP1IUVjDFkMilKKWIPXAXvN40Ol+SPj6bvQO2Y obVKj5AoD5rtWzDR4jPAMBcORa+nt5cvLZPPYfz8mT9Wc2ONXzYZu3CXLssCMQrx 8iQhyYfHK1HYfEc0B9BjQ1kEZ3mi48wHu4ovMIPrZwyz9/A2fudKfkN1jkMKi751 pG/sON0I2QphE00Q9bFwlaVWZIVuMHMS -----END CERTIFICATE-----Generated at Mon May 5 03:28:06 2025 by rpki-client