$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: sYD85NrmWtLtDNq7zm5auoqPOVcOi7X773KZC62JV4w= Subject key identifier: F8:A4:BB:F0:A9:19:25:42:67:EA:3E:FB:D1:2D:BF:32:C5:D9:1A:12 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 0675 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 0669 Signing time: Mon 12 May 2025 22:10:11 +0000 Manifest this update: Mon 12 May 2025 22:10:11 +0000 Manifest next update: Mon 19 May 2025 22:10:11 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: CDixl+/kNnmjec8TUL0KFHn8b2pLGJ4FxisCAYKN0cc=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: May 12 22:10:11 2025 GMT Not After : May 19 22:10:11 2025 GMT Subject: CN=682271c3-fc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:47:6b:b1:18:9e:57:f2:b0:6d:69:eb:54: c9:86:e0:d8:e7:3f:2d:32:2d:b5:67:7c:66:52:af: 86:d8:a8:aa:52:bf:7e:4f:62:38:81:6e:f5:10:dd: f4:1e:7b:83:b9:da:58:6d:94:e3:fa:5b:21:e5:54: 95:3a:ae:3f:e4:1b:9f:b9:c3:e4:e5:e5:9d:8d:e5: 56:12:c5:88:76:ae:b0:ae:ca:74:79:7a:ab:a1:fc: 18:2b:f3:d3:7c:4f:26:12:7c:82:e8:27:67:04:66: 54:65:26:3e:98:a7:57:05:92:4c:df:2b:86:2d:7a: 26:b4:59:0b:74:d5:c3:18:24:22:69:12:53:a1:80: 26:30:29:bb:70:70:6d:cc:92:cd:4f:a1:c5:3d:3b: c2:f0:f6:ea:0f:c2:01:dd:ad:cf:21:e4:1f:1d:14: 23:23:6a:51:0f:45:dc:65:4c:49:33:8a:1d:51:b7: a3:41:38:75:72:f1:da:35:55:04:78:2e:59:a9:5f: 5a:92:c5:32:b3:77:72:0e:ca:1a:5f:00:4c:1b:ee: 96:02:c1:3e:fd:25:fd:43:3e:20:53:9a:4f:63:37: e6:31:00:8a:de:c5:84:93:4d:8d:78:f3:8b:65:c2: 46:93:7d:4f:a0:3b:b8:ab:03:7c:c0:38:bc:38:7e: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:BB:F0:A9:19:25:42:67:EA:3E:FB:D1:2D:BF:32:C5:D9:1A:12 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:50:5f:a2:37:3f:55:12:a8:c7:34:b7:96:cf:0f:d9:7c:9f: 63:4f:6d:83:14:20:ed:d4:03:f6:9c:83:c5:9b:bf:e3:8c:b0: 2d:29:e7:3a:74:ef:60:af:17:42:ed:f5:b9:c2:3e:b3:00:b4: 39:80:61:6e:89:c7:52:c4:3c:58:c3:65:12:ec:00:46:a7:f5: ea:08:5c:5c:32:dd:98:be:ab:da:43:df:83:66:fb:50:7c:5f: a0:4f:88:3e:da:52:46:4c:18:e9:44:f7:de:7f:d2:7f:df:ba: b8:0f:85:ce:75:fb:14:02:c7:7e:b9:09:7d:56:ea:c1:d0:bd: 9b:39:56:be:d3:7b:e4:dd:e9:b5:6d:77:2b:22:be:4f:c1:79: 98:3d:a5:13:09:ba:7b:d1:e0:3b:a4:2e:d6:1d:0e:9d:ec:b3: c0:04:5d:61:66:b0:e2:f4:c7:dd:f6:31:70:d4:39:79:9c:ad: 5f:d1:9e:f9:e9:6f:a7:1b:44:1d:5c:28:79:86:36:cd:d5:99: 5d:d7:7b:6f:8b:56:88:e9:91:2c:02:b7:c8:92:70:d0:0c:c6: 3b:b6:1f:5d:20:43:36:a9:44:65:1c:1e:37:fb:48:e9:19:38: 3d:1d:77:ba:b5:88:b7:5f:31:ca:c8:b4:35:cc:fe:54:55:da: 40:89:d2:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNTEyMjIxMDExWhcNMjUwNTE5MjIxMDExWjAYMRYwFAYD VQQDEw02ODIyNzFjMy1mYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudJHa7EYnlfysG1p61TJhuDY5z8tMi21Z3xmUq+G2KiqUr9+T2I4gW71EN30 HnuDudpYbZTj+lsh5VSVOq4/5BufucPk5eWdjeVWEsWIdq6wrsp0eXqrofwYK/PT fE8mEnyC6CdnBGZUZSY+mKdXBZJM3yuGLXomtFkLdNXDGCQiaRJToYAmMCm7cHBt zJLNT6HFPTvC8PbqD8IB3a3PIeQfHRQjI2pRD0XcZUxJM4odUbejQTh1cvHaNVUE eC5ZqV9aksUys3dyDsoaXwBMG+6WAsE+/SX9Qz4gU5pPYzfmMQCK3sWEk02NePOL ZcJGk31PoDu4qwN8wDi8OH7YxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiku/Cp GSVCZ+o++9EtvzLF2RoSMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLUF+iNz9VEqjHNLeWzw/ZfJ9jT22DFCDt1AP2nIPFm7/jjLAtKec6 dO9grxdC7fW5wj6zALQ5gGFuicdSxDxYw2US7ABGp/XqCFxcMt2YvqvaQ9+DZvtQ fF+gT4g+2lJGTBjpRPfef9J/37q4D4XOdfsUAsd+uQl9VurB0L2bOVa+03vk3em1 bXcrIr5PwXmYPaUTCbp70eA7pC7WHQ6d7LPABF1hZrDi9Mfd9jFw1Dl5nK1f0Z75 6W+nG0QdXCh5hjbN1Zld13tvi1aI6ZEsArfIknDQDMY7th9dIEM2qURlHB43+0jp GTg9HXe6tYi3XzHKyLQ1zP5UVdpAidLV -----END CERTIFICATE-----Generated at Tue May 13 05:42:29 2025 by rpki-client