$ rpki-client -vvf rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft File: HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft (raw, json) Hash identifier: 4JgxOBQGOOjCXRwDPnvwNZvUwVbt0qhMMaEjytvki/w= Subject key identifier: 6D:B1:76:6E:A9:2F:7F:FA:57:7A:F9:BF:25:48:5C:C0:F9:89:36:9A Authority key identifier: 1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 Certificate issuer: /CN=A918742C/serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Certificate serial: 176F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft Manifest number: 1761 Signing time: Wed 22 Jul 2026 16:42:04 +0000 Manifest this update: Wed 22 Jul 2026 16:42:03 +0000 Manifest next update: Wed 29 Jul 2026 16:42:03 +0000 Files and hashes: 1: HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl (hash: G4ohuc6PUFTJPbzOCbOjJq2a62vsV0Fb4UsQL1Sa5Xc=) 2: 8DFAE1DA019D11E8A7804A1EC4F9AE02.roa (hash: +mlsrBxdIyOlCH9NElXmLFuWulBGulTkwg1yRe34F2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5999 (0x176f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918742C, serialNumber=1C3F99A0C182B58CC45B8112F291E12A153331E9 Validity Not Before: Jul 22 16:42:03 2026 GMT Not After : Jul 29 16:42:03 2026 GMT Subject: CN=6a60f2db-afea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:a8:5c:58:0e:df:e3:e4:1f:32:25:dc:6d: a4:56:d4:4e:10:44:96:0c:31:a0:97:34:07:a6:74: e7:d9:90:5e:48:80:67:ad:60:2b:7a:00:76:f0:6c: df:28:ec:f1:04:bc:da:c0:b5:f7:0e:03:58:76:03: d5:4a:8a:65:37:60:35:76:cd:e4:ce:8a:90:96:80: 00:45:67:b5:dc:ac:a9:43:e6:f3:e0:64:02:87:18: fb:c1:5e:8c:31:d2:15:3b:6a:a3:7f:04:d4:ec:83: 3c:a0:b7:81:f9:2a:c9:49:30:8a:2b:ab:be:c1:ae: 39:0d:62:4f:21:4d:da:0d:4d:f1:58:7c:aa:bf:09: 41:80:ee:e6:0d:2e:72:fb:65:6c:f7:91:ab:01:47: d0:37:cc:5f:11:ad:a4:ce:cb:e9:da:08:9d:eb:45: 73:3a:11:4e:d5:99:73:4c:bd:c8:27:ff:1a:bc:63: a9:6f:f9:77:06:83:77:48:ed:8f:66:35:7f:74:ce: 56:ca:f8:e4:3d:a8:dc:a4:48:cd:33:cf:dc:20:2c: 71:d7:82:76:0e:70:78:ba:c5:9f:61:05:f9:a2:f8: 2a:0c:be:4d:32:01:5f:3e:73:a9:56:aa:2a:38:61: 6b:02:21:07:15:26:76:ee:15:73:7d:f4:8c:cc:01: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:76:6E:A9:2F:7F:FA:57:7A:F9:BF:25:48:5C:C0:F9:89:36:9A X509v3 Authority Key Identifier: keyid:1C:3F:99:A0:C1:82:B5:8C:C4:5B:81:12:F2:91:E1:2A:15:33:31:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HD-ZoMGCtYzEW4ES8pHhKhUzMek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918742C/F28C89C4019C11E89035F919C4F9AE02/HD-ZoMGCtYzEW4ES8pHhKhUzMek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:5a:b2:20:3e:d4:2d:54:40:d7:c2:0e:dc:f9:f4:32:74:c7: a3:9e:4d:08:47:a2:29:39:ba:2f:e6:9d:95:88:b0:79:e8:96: 39:5e:00:2c:78:99:37:b0:29:e6:c9:92:88:d6:1a:89:01:4d: 09:7d:98:b0:31:c1:a0:d4:91:4e:3a:50:f6:46:0d:ec:19:fc: e9:95:5a:2f:89:e8:95:1c:25:97:74:aa:bf:be:15:a3:45:bf: 29:c6:96:ce:7e:5e:e4:90:3c:26:68:1a:2f:18:29:7f:15:30: 1e:4d:a9:e0:e2:f2:33:ba:b1:a8:92:9a:3b:41:c5:4f:45:d0: 0f:b3:ab:65:9d:a6:5a:92:63:6f:d7:9b:ad:d1:ab:e4:78:01: 1e:32:3d:27:32:92:0f:35:ac:30:ea:39:80:68:bb:d5:29:87: d7:23:f1:ed:e3:13:e1:9d:19:c9:50:ea:17:50:c9:be:54:04: 4a:16:d8:b3:96:ae:87:5b:ce:f1:c2:9b:2f:6f:47:71:8a:1d: e5:76:b7:56:cb:86:b5:27:7e:6a:c8:9d:08:88:26:3c:28:7e: 1b:6a:6b:71:b9:97:9e:30:95:8b:29:48:ab:47:69:3a:38:e6: fa:ac:9d:d2:6e:a5:22:57:32:fe:f9:da:d5:36:03:b3:44:b8: dd:d1:bd:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc0MkMxMTAvBgNVBAUTKDFDM0Y5OUEwQzE4MkI1OENDNDVCODExMkYyOTFFMTJB MTUzMzMxRTkwHhcNMjYwNzIyMTY0MjAzWhcNMjYwNzI5MTY0MjAzWjAYMRYwFAYD VQQDEw02YTYwZjJkYi1hZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3ioXFgO3+PkHzIl3G2kVtROEESWDDGglzQHpnTn2ZBeSIBnrWAregB28Gzf KOzxBLzawLX3DgNYdgPVSoplN2A1ds3kzoqQloAARWe13KypQ+bz4GQChxj7wV6M MdIVO2qjfwTU7IM8oLeB+SrJSTCKK6u+wa45DWJPIU3aDU3xWHyqvwlBgO7mDS5y +2Vs95GrAUfQN8xfEa2kzsvp2gid60VzOhFO1ZlzTL3IJ/8avGOpb/l3BoN3SO2P ZjV/dM5WyvjkPajcpEjNM8/cICxx14J2DnB4usWfYQX5ovgqDL5NMgFfPnOpVqoq OGFrAiEHFSZ27hVzffSMzAER6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2xdm6p L3/6V3r5vyVIXMD5iTaaMB8GA1UdIwQYMBaAFBw/maDBgrWMxFuBEvKR4SoVMzHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzQyQy9GMjhDODlDNDAx OUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZekVXNEVTOHBIaEtoVXpN ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hELVpvTUdDdFl6RVc0RVM4cEhoS2hVek1lay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzQyQy9GMjhDODlDNDAxOUMxMUU4OTAzNUY5MTlDNEY5QUUwMi9IRC1ab01HQ3RZ ekVXNEVTOHBIaEtoVXpNZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1qyID7ULVRA18IO3Pn0MnTHo55NCEeiKTm6L+adlYiweeiWOV4ALHiZN7Ap 5smSiNYaiQFNCX2YsDHBoNSRTjpQ9kYN7Bn86ZVaL4nolRwll3Sqv74Vo0W/KcaW zn5e5JA8JmgaLxgpfxUwHk2p4OLyM7qxqJKaO0HFT0XQD7OrZZ2mWpJjb9ebrdGr 5HgBHjI9JzKSDzWsMOo5gGi71SmH1yPx7eMT4Z0ZyVDqF1DJvlQEShbYs5auh1vO 8cKbL29HcYod5Xa3VsuGtSd+asidCIgmPCh+G2prcbmXnjCViylIq0dpOjjm+qyd 0m6lIlcy/vna1TYDs0S43dG9IQ== -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:25 2026 by rpki-client