$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: objkJnsqhUowooV9wE8ZMNBwPQ9no5rgNagvujAAAis= Subject key identifier: 53:F8:13:FB:49:A3:38:64:51:9D:3B:65:32:3B:CF:8A:71:C2:80:3A Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 16BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 16B1 Signing time: Fri 22 Aug 2025 16:47:15 +0000 Manifest this update: Fri 22 Aug 2025 16:47:15 +0000 Manifest next update: Fri 29 Aug 2025 16:47:15 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: 8C1CnR+yrdKNPd42y81fQAkM6SFAJvWZCgGhWk6cRDg=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: 85zAa/NDU6R+uxxVwM+5q1AHLvo6RcZxo+KYtDUWQJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5819 (0x16bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: Aug 22 16:47:15 2025 GMT Not After : Aug 29 16:47:15 2025 GMT Subject: CN=68a89f13-f53a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:d6:db:a1:32:51:e3:e4:25:5f:4e:5b:be: f0:4d:7c:57:7b:5a:0e:53:4f:5a:ef:1c:b1:f8:bc: 76:0c:7d:fb:f7:0b:bf:8e:fc:a2:21:0a:8e:2a:c2: 4c:88:b0:23:4b:58:1b:f7:85:c4:09:9d:df:48:ac: 08:14:31:f1:d5:04:76:bb:cf:10:21:e2:e7:51:6a: e6:70:93:c6:2d:af:4a:ee:fa:c7:0d:7c:8a:d9:91: 54:a4:4f:ad:69:4e:de:3b:7d:56:a4:78:6a:d6:0f: cf:01:b5:ff:e8:80:cc:b0:20:c8:a6:90:70:b1:a4: 5d:be:91:a9:ff:dd:89:d5:c4:28:80:29:e4:23:e3: e8:a3:b8:8f:1e:bc:3f:2b:11:9d:fb:a7:13:f9:0c: 95:46:d3:f7:c5:88:05:e8:2b:bb:24:0d:57:da:7f: f7:10:f4:02:61:07:bc:13:ac:65:44:15:d4:82:58: 84:c2:f0:bf:27:08:c6:d6:98:aa:96:29:59:68:45: 64:56:1a:00:10:dd:44:8b:66:62:eb:3a:6b:2b:05: 71:3a:b5:20:bb:3e:26:04:68:46:79:40:18:6f:5a: 20:e8:6d:47:fd:a8:08:98:29:3c:43:fe:1e:e5:44: dd:03:68:a9:81:ec:38:cc:7c:97:f9:0e:b8:bc:8a: 73:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F8:13:FB:49:A3:38:64:51:9D:3B:65:32:3B:CF:8A:71:C2:80:3A X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:69:04:04:c7:3b:3e:25:c8:4a:42:63:62:10:88:9c:0d:f1: ed:3c:46:e9:75:3c:bf:3e:b0:9c:77:32:12:55:5e:21:4a:6e: 21:cb:38:5a:74:bc:c4:bf:bd:06:5c:1a:38:d7:d6:96:b4:d0: 70:c0:49:ac:97:6e:61:29:b4:46:db:f4:a3:3e:ac:1f:88:08: ea:ee:8d:d5:a8:f5:96:7d:12:32:ac:7d:cf:31:71:b5:b1:8c: 57:6c:bb:dc:26:f8:75:a1:f4:2d:cc:1e:53:ff:b6:53:63:7e: 9b:da:87:46:10:49:0e:a6:36:81:1d:8b:cb:23:62:cb:b6:68: 31:fc:fc:e9:e1:67:26:83:3f:f7:13:2a:3a:03:2f:1d:f5:da: be:83:60:b1:72:59:16:40:f1:a8:0c:ea:b0:31:3e:94:03:28: b7:e6:b8:56:e0:e9:41:bc:e8:b0:30:ea:af:42:d9:9f:ba:e3: 83:2f:d5:3e:53:43:38:b2:77:72:43:f7:a2:f0:6d:6a:ef:e1: a0:9a:dc:c7:9b:b7:5b:0b:73:e9:fd:92:10:a3:32:78:02:6a: 30:8f:6b:5a:a0:32:b4:69:bf:c0:06:13:d9:79:8a:df:27:c3: 83:6d:04:3c:e4:3c:3f:5e:15:e1:42:b5:81:6e:a9:70:96:a8: 31:54:f0:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjUwODIyMTY0NzE1WhcNMjUwODI5MTY0NzE1WjAYMRYwFAYD VQQDEw02OGE4OWYxMy1mNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdHW26EyUePkJV9OW77wTXxXe1oOU09a7xyx+Lx2DH379wu/jvyiIQqOKsJM iLAjS1gb94XECZ3fSKwIFDHx1QR2u88QIeLnUWrmcJPGLa9K7vrHDXyK2ZFUpE+t aU7eO31WpHhq1g/PAbX/6IDMsCDIppBwsaRdvpGp/92J1cQogCnkI+Poo7iPHrw/ KxGd+6cT+QyVRtP3xYgF6Cu7JA1X2n/3EPQCYQe8E6xlRBXUgliEwvC/JwjG1piq lilZaEVkVhoAEN1Ei2Zi6zprKwVxOrUguz4mBGhGeUAYb1og6G1H/agImCk8Q/4e 5UTdA2ipgew4zHyX+Q64vIpzqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP4E/tJ ozhkUZ07ZTI7z4pxwoA6MB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMaQQExzs+JchKQmNiEIicDfHtPEbpdTy/PrCcdzISVV4hSm4hyzha dLzEv70GXBo419aWtNBwwEmsl25hKbRG2/SjPqwfiAjq7o3VqPWWfRIyrH3PMXG1 sYxXbLvcJvh1ofQtzB5T/7ZTY36b2odGEEkOpjaBHYvLI2LLtmgx/Pzp4Wcmgz/3 Eyo6Ay8d9dq+g2CxclkWQPGoDOqwMT6UAyi35rhW4OlBvOiwMOqvQtmfuuODL9U+ U0M4sndyQ/ei8G1q7+GgmtzHm7dbC3Pp/ZIQozJ4Amowj2taoDK0ab/ABhPZeYrf J8ODbQQ85Dw/XhXhQrWBbqlwlqgxVPA3 -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:22 2025 by rpki-client