$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: O3caSJpruCHwLDgNfEWbPefYP4SXrIh79Eoyk1YiopM= Subject key identifier: 17:4C:C4:37:AA:F3:0A:DA:FB:9C:47:56:F3:99:2B:03:3C:01:B4:31 Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 16D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 16CF Signing time: Mon 20 Oct 2025 17:01:33 +0000 Manifest this update: Mon 20 Oct 2025 17:01:32 +0000 Manifest next update: Mon 27 Oct 2025 17:01:32 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: sFVvaPov6jfj5yOi5Q7EB99PhnoSiHERNHU0ucJa72w=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: 85zAa/NDU6R+uxxVwM+5q1AHLvo6RcZxo+KYtDUWQJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5849 (0x16d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: Oct 20 17:01:32 2025 GMT Not After : Oct 27 17:01:32 2025 GMT Subject: CN=68f66aed-aaf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ce:b6:c3:3f:02:fa:f2:3e:e6:8f:50:f6:68: 03:1b:ee:63:56:94:fa:1e:0c:23:83:97:86:2f:bb: aa:41:e2:84:d8:df:34:f6:08:c7:14:cb:ff:f0:6a: f1:55:ed:cd:46:aa:aa:ed:d9:0f:86:5f:49:02:71: ff:2b:68:0f:50:0b:49:78:ae:a4:d6:16:a4:d4:70: 4c:ed:73:aa:db:6b:d3:25:73:8a:f8:29:69:e7:e8: ea:27:14:b2:59:05:cd:0c:c1:c5:9f:4c:35:44:fa: 77:7d:70:06:61:da:6b:ee:51:51:75:df:75:0b:7f: 14:17:c1:96:a6:bf:e1:8e:f2:42:d9:4b:78:e6:3f: 72:72:ae:4c:e9:81:84:a8:84:fc:33:0a:0a:ef:34: aa:9c:ae:78:4d:3d:08:66:df:c7:2e:56:7a:2e:be: 3d:d1:1b:bc:a1:09:6e:bd:e7:63:0e:90:68:bf:a4: 15:2a:53:0a:be:95:09:ca:55:bb:ca:24:38:6c:ad: c6:9e:c3:21:80:ba:c6:7b:d6:ac:cb:31:5e:9d:fb: 39:a4:47:0c:21:7e:11:4a:dd:e4:36:3a:3f:98:0e: 0d:fc:2c:6e:5a:fe:7f:56:1e:f5:e9:91:5b:ad:d4: 52:e1:49:93:8d:90:81:30:ab:67:7b:ac:28:a1:35: 0a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4C:C4:37:AA:F3:0A:DA:FB:9C:47:56:F3:99:2B:03:3C:01:B4:31 X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:7a:35:81:d4:5b:9b:23:27:77:15:f0:59:55:d6:b8:13:05: 78:1a:36:05:26:19:20:7d:0e:7e:76:a8:47:0d:ad:f5:60:13: b9:e8:ff:6f:a8:ad:47:3c:23:07:0b:b6:1d:fc:d9:db:21:a6: 01:79:8e:c9:09:2b:1e:08:79:b9:93:82:c8:cb:a0:0d:a6:30: b7:8e:ea:72:fe:53:6e:80:63:3f:62:c8:77:cd:fa:9e:8c:20: 28:9e:72:40:b2:c2:93:7a:4d:43:5e:ff:a4:31:91:9e:31:68: 60:45:27:7d:21:7b:1b:b0:c0:c8:7c:94:65:91:a7:a3:53:ac: 05:8b:95:ac:c3:de:e4:f2:e9:ad:1a:d9:58:a2:70:aa:0b:e9: 94:49:d1:bc:5d:a3:c8:43:e7:6f:ca:51:37:0b:e5:0b:e8:1a: 31:ed:03:9a:f8:b5:24:77:7d:67:33:ef:94:2d:9e:7a:23:c6: 9e:4a:7c:4c:12:62:55:27:72:8e:3d:e1:5e:0b:61:04:a1:22: 36:e2:66:af:1a:7e:b8:83:39:2a:49:c8:92:b2:cb:f9:f5:4e: 38:37:54:4b:02:d6:ac:9e:55:95:8c:49:56:73:ae:84:36:d5: 9a:09:49:0a:c3:07:c1:6a:dd:5a:13:f5:c7:60:8d:43:00:87: d8:a4:00:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjUxMDIwMTcwMTMyWhcNMjUxMDI3MTcwMTMyWjAYMRYwFAYD VQQDEw02OGY2NmFlZC1hYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAms62wz8C+vI+5o9Q9mgDG+5jVpT6Hgwjg5eGL7uqQeKE2N809gjHFMv/8Grx Ve3NRqqq7dkPhl9JAnH/K2gPUAtJeK6k1hak1HBM7XOq22vTJXOK+Clp5+jqJxSy WQXNDMHFn0w1RPp3fXAGYdpr7lFRdd91C38UF8GWpr/hjvJC2Ut45j9ycq5M6YGE qIT8MwoK7zSqnK54TT0IZt/HLlZ6Lr490Ru8oQluvedjDpBov6QVKlMKvpUJylW7 yiQ4bK3GnsMhgLrGe9asyzFenfs5pEcMIX4RSt3kNjo/mA4N/CxuWv5/Vh716ZFb rdRS4UmTjZCBMKtne6wooTUKBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBdMxDeq 8wra+5xHVvOZKwM8AbQxMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFejWB1FubIyd3FfBZVda4EwV4GjYFJhkgfQ5+dqhHDa31YBO56P9v qK1HPCMHC7Yd/NnbIaYBeY7JCSseCHm5k4LIy6ANpjC3jupy/lNugGM/Ysh3zfqe jCAonnJAssKTek1DXv+kMZGeMWhgRSd9IXsbsMDIfJRlkaejU6wFi5Wsw97k8umt GtlYonCqC+mUSdG8XaPIQ+dvylE3C+UL6Box7QOa+LUkd31nM++ULZ56I8aeSnxM EmJVJ3KOPeFeC2EEoSI24mavGn64gzkqSciSssv59U44N1RLAtasnlWVjElWc66E NtWaCUkKwwfBat1aE/XHYI1DAIfYpACN -----END CERTIFICATE-----Generated at Mon Oct 20 21:22:08 2025 by rpki-client