$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: 4uMeG92EQLcFagOVAq2M23nPmiiolW3xeyQQfmx/UIY= Subject key identifier: 31:4A:13:BB:C0:5A:3B:39:B5:B6:C1:32:47:4C:51:B7:B6:EB:28:B3 Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 16A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 1696 Signing time: Mon 30 Jun 2025 16:50:39 +0000 Manifest this update: Mon 30 Jun 2025 16:50:38 +0000 Manifest next update: Mon 07 Jul 2025 16:50:38 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: jWM3Oy+8fgu7X96dtnkZK5zo1uimUKO2CRTPS9isrkc=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: 85zAa/NDU6R+uxxVwM+5q1AHLvo6RcZxo+KYtDUWQJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5792 (0x16a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: Jun 30 16:50:38 2025 GMT Not After : Jul 7 16:50:38 2025 GMT Subject: CN=6862c05f-e506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4b:e7:2e:00:81:10:97:60:46:a9:1d:ef:c0: a6:0e:f3:ce:4c:43:dd:de:03:b2:46:46:91:b4:28: bc:84:d4:da:23:d8:dd:f6:2d:53:aa:6e:ef:5f:4f: 5a:83:8c:20:42:e1:c1:4c:f8:4d:8b:f9:67:05:ee: 86:c6:3d:82:a2:a2:57:64:41:21:4f:c2:05:c7:d8: 24:8c:97:17:77:66:21:36:21:8e:75:15:72:40:fa: c1:26:6f:e5:e2:8e:40:68:e3:8b:e8:52:13:0a:e0: 52:d9:62:a0:76:57:72:f7:b3:3c:8d:83:ca:22:54: 20:41:80:84:eb:0c:a7:0d:6f:84:e3:2b:11:d2:19: 54:44:8b:26:04:35:d1:2d:30:03:3a:97:d1:0d:c9: ec:42:3c:11:ba:de:61:17:50:29:86:0a:b6:dd:bd: 79:ac:1e:16:db:ee:1f:ff:71:58:6d:82:5c:51:e7: 01:de:3a:f1:de:1c:a9:9c:8e:4c:aa:f3:e7:a9:f5: ae:5d:60:19:3c:85:8f:d8:0d:df:72:a9:85:d5:86: cd:d3:a4:45:1c:28:fc:4a:97:b9:58:65:b7:04:fb: 27:df:a6:71:a6:fa:05:7a:26:70:01:b2:1e:e7:8d: 23:9d:7d:38:6b:e3:d4:c2:ee:5f:f3:49:af:38:99: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:13:BB:C0:5A:3B:39:B5:B6:C1:32:47:4C:51:B7:B6:EB:28:B3 X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:71:cc:e6:aa:42:8b:30:42:77:78:eb:40:51:ca:98:c0:ec: 65:69:00:bf:a4:90:75:35:d5:3c:9f:a8:47:71:fa:c5:27:08: a2:a7:72:fb:4e:d8:7e:c0:98:87:95:e2:73:f6:f9:86:15:80: 4c:28:1e:63:d6:7c:fe:61:e0:76:e8:2f:77:c6:68:6c:d4:f7: 1b:53:ea:e2:65:1b:b9:ac:9e:3d:64:7c:9e:68:62:e3:48:c5: af:6e:3a:bf:ed:27:65:75:ea:e5:9f:1a:fc:bc:b1:8e:3e:cf: 77:ff:b2:05:11:87:a9:42:23:12:90:f2:6b:56:ff:97:a3:c0: 2c:27:3c:2a:ef:cb:02:d3:0b:8b:3a:dd:1b:45:27:b4:10:1a: c2:4c:3f:39:f7:b0:6b:5b:f9:84:10:d8:ca:c9:60:36:b6:d9: 1a:28:d2:16:11:94:e6:38:0e:fe:ad:1e:cd:9b:79:3a:2b:09: f8:f4:bb:f1:12:9d:33:8d:21:36:e7:f0:3f:0b:4a:4a:c4:e8: 6a:e8:b8:e9:77:0f:28:2b:8c:e3:de:7a:a2:a9:91:a1:28:8e: 1f:08:da:ad:fa:bb:b8:5c:de:63:8f:79:4a:65:fc:b4:5d:c8: 30:27:ff:b2:61:f3:88:3b:fa:69:af:4c:3d:e9:e7:86:9c:dc: de:f9:60:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjUwNjMwMTY1MDM4WhcNMjUwNzA3MTY1MDM4WjAYMRYwFAYD VQQDEw02ODYyYzA1Zi1lNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kvnLgCBEJdgRqkd78CmDvPOTEPd3gOyRkaRtCi8hNTaI9jd9i1Tqm7vX09a g4wgQuHBTPhNi/lnBe6Gxj2CoqJXZEEhT8IFx9gkjJcXd2YhNiGOdRVyQPrBJm/l 4o5AaOOL6FITCuBS2WKgdldy97M8jYPKIlQgQYCE6wynDW+E4ysR0hlURIsmBDXR LTADOpfRDcnsQjwRut5hF1Aphgq23b15rB4W2+4f/3FYbYJcUecB3jrx3hypnI5M qvPnqfWuXWAZPIWP2A3fcqmF1YbN06RFHCj8Spe5WGW3BPsn36ZxpvoFeiZwAbIe 540jnX04a+PUwu5f80mvOJnTlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFKE7vA Wjs5tbbBMkdMUbe26yizMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLcczmqkKLMEJ3eOtAUcqYwOxlaQC/pJB1NdU8n6hHcfrFJwiip3L7 Tth+wJiHleJz9vmGFYBMKB5j1nz+YeB26C93xmhs1PcbU+riZRu5rJ49ZHyeaGLj SMWvbjq/7Sdlderlnxr8vLGOPs93/7IFEYepQiMSkPJrVv+Xo8AsJzwq78sC0wuL Ot0bRSe0EBrCTD8597BrW/mEENjKyWA2ttkaKNIWEZTmOA7+rR7Nm3k6Kwn49Lvx Ep0zjSE25/A/C0pKxOhq6Ljpdw8oK4zj3nqiqZGhKI4fCNqt+ru4XN5jj3lKZfy0 XcgwJ/+yYfOIO/ppr0w96eeGnNze+WDg -----END CERTIFICATE-----Generated at Wed Jul 2 13:58:02 2025 by rpki-client