$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: I5gUmdIZ9xhMkXnxsiY4D8vP5KtYNbAq5iCxsWnhOoc= Subject key identifier: FD:55:66:B9:39:C7:BF:AE:0F:42:98:FD:E1:F8:F3:43:C0:0A:22:4C Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 069C Signing time: Fri 22 Aug 2025 22:23:22 +0000 Manifest this update: Fri 22 Aug 2025 22:23:22 +0000 Manifest next update: Fri 29 Aug 2025 22:23:22 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: s/CJn37jYpYBc44sMHGOL78f6GB304gApa3e1TMDQ4E=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Aug 22 22:23:22 2025 GMT Not After : Aug 29 22:23:22 2025 GMT Subject: CN=68a8edda-8b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b4:be:04:74:46:ed:51:34:30:98:f1:04:33: 4c:dd:fe:4d:bb:fe:b3:7a:bb:d3:65:5c:b7:b9:e5: 5c:a2:41:d0:6e:2b:c3:62:6c:f1:30:a6:d7:e4:e7: aa:e4:cb:f5:d4:af:93:18:23:4c:e0:62:84:4d:bc: e6:53:fe:09:5f:0d:b0:30:1e:ca:3d:02:78:d5:27: 5a:04:53:01:fd:e5:85:5b:a1:50:ea:fd:e4:d0:77: e3:90:23:c3:69:97:14:41:41:8d:46:21:d8:c1:56: 4a:d9:11:65:38:20:73:6d:67:49:7f:91:c0:b6:f7: a4:3e:0c:48:e6:21:5d:09:14:36:32:82:9b:2f:31: 39:c6:03:ce:6c:8b:ee:20:d5:53:b4:a6:f7:06:08: fa:f6:81:49:16:bc:a4:cc:64:ba:ac:9e:04:3e:32: db:b2:63:33:7e:1a:0a:c4:58:a3:b1:88:51:77:e5: 87:b9:80:1b:9c:60:e1:f0:13:ca:6e:56:5c:bb:90: b0:da:dd:32:a2:02:ff:f2:04:85:71:13:d5:42:dd: d6:42:06:f4:bc:ee:0b:a4:50:04:5e:0a:86:51:b4: a0:ef:1b:6f:28:91:76:b7:1c:d7:a5:2c:7a:76:8c: 95:8c:2c:cb:f8:0b:0c:79:68:09:32:28:d4:60:c8: b8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:55:66:B9:39:C7:BF:AE:0F:42:98:FD:E1:F8:F3:43:C0:0A:22:4C X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:61:aa:63:2b:b0:29:05:67:97:40:9b:eb:a3:d7:f3:29:c1: 83:74:a5:c6:ba:9f:69:b9:46:af:f6:7f:3a:eb:37:a7:ed:f7: 81:cc:e7:f5:f8:ff:1b:4d:0a:f8:e3:fd:e7:5f:db:07:30:d8: 39:1e:cc:14:9e:15:30:03:bd:e9:fa:f0:28:01:25:ec:d6:d5: 70:e4:bf:a8:a8:bb:a7:ab:8d:9e:1d:c1:c9:49:54:e2:27:40: a4:89:4a:38:41:b1:e0:e3:22:ec:55:56:34:a4:e2:9a:ae:98: 40:79:64:d3:9b:90:43:4b:1c:60:82:e3:3e:2b:8e:13:c8:44: fe:36:17:e8:16:3f:ee:ce:20:8c:67:3e:54:fc:9a:db:92:eb: 23:e4:77:71:80:78:e0:60:e6:ac:0e:2d:90:6f:8b:33:84:fc: 94:b3:38:bf:b3:9e:f3:1f:8b:19:f8:24:b7:1e:4b:18:72:d2: 31:f6:7e:2d:39:0d:40:4a:29:07:19:04:8e:0f:5d:49:ab:e9: 7b:35:72:25:ed:36:8e:a7:c6:04:2b:bd:cc:c6:c1:3a:c8:d0: 92:91:9d:75:9b:4e:0c:93:1b:92:59:5b:cb:7a:52:26:7b:a6: d9:0c:5c:94:71:17:24:66:12:5f:97:a6:bd:d4:d9:71:f4:90: 00:03:f6:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwODIyMjIyMzIyWhcNMjUwODI5MjIyMzIyWjAYMRYwFAYD VQQDEw02OGE4ZWRkYS04YjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LS+BHRG7VE0MJjxBDNM3f5Nu/6zervTZVy3ueVcokHQbivDYmzxMKbX5Oeq 5Mv11K+TGCNM4GKETbzmU/4JXw2wMB7KPQJ41SdaBFMB/eWFW6FQ6v3k0HfjkCPD aZcUQUGNRiHYwVZK2RFlOCBzbWdJf5HAtvekPgxI5iFdCRQ2MoKbLzE5xgPObIvu INVTtKb3Bgj69oFJFrykzGS6rJ4EPjLbsmMzfhoKxFijsYhRd+WHuYAbnGDh8BPK blZcu5Cw2t0yogL/8gSFcRPVQt3WQgb0vO4LpFAEXgqGUbSg7xtvKJF2txzXpSx6 doyVjCzL+AsMeWgJMijUYMi4OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1VZrk5 x7+uD0KY/eH480PACiJMMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvYapjK7ApBWeXQJvro9fzKcGDdKXGup9puUav9n866zen7feBzOf1 +P8bTQr44/3nX9sHMNg5HswUnhUwA73p+vAoASXs1tVw5L+oqLunq42eHcHJSVTi J0CkiUo4QbHg4yLsVVY0pOKarphAeWTTm5BDSxxgguM+K44TyET+NhfoFj/uziCM Zz5U/Jrbkusj5HdxgHjgYOasDi2Qb4szhPyUszi/s57zH4sZ+CS3HksYctIx9n4t OQ1ASikHGQSOD11Jq+l7NXIl7TaOp8YEK73MxsE6yNCSkZ11m04MkxuSWVvLelIm e6bZDFyUcRckZhJfl6a91Nlx9JAAA/ZY -----END CERTIFICATE-----Generated at Sat Aug 23 19:31:53 2025 by rpki-client