$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: eFH0Dz8IrIc5U+aGiAh/7JtZTbAHU8rVW6pVbh27ShA= Subject key identifier: 10:3D:01:11:4F:C0:20:0E:97:D8:97:54:4B:13:D2:5D:60:1D:C2:2C Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 0224 Signing time: Sat 23 Aug 2025 02:11:52 +0000 Manifest this update: Sat 23 Aug 2025 02:11:52 +0000 Manifest next update: Sat 30 Aug 2025 02:11:52 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: 2ILGgsYwaFsylMqiGMcoUJuIIwT9ZiwA0I9fJhEj94E=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Aug 23 02:11:52 2025 GMT Not After : Aug 30 02:11:52 2025 GMT Subject: CN=68a92368-916d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:45:28:2b:da:15:90:d0:11:82:3d:92:a9:de: a0:63:95:00:ba:d9:38:d1:96:54:fc:cf:07:f8:3c: cf:aa:09:85:ca:46:90:6d:aa:ae:7e:35:c9:b2:c0: c5:31:56:7a:8f:47:3e:7e:9f:67:6f:fc:d4:b9:ec: 2b:cc:f9:0f:c7:aa:91:ef:15:2a:21:b1:cc:3f:c0: 17:0d:01:cc:cb:3b:b0:71:9d:10:5d:75:cd:e7:28: 5b:59:dd:27:42:dc:9a:26:56:66:cc:b4:33:e6:ca: 4e:89:c3:9a:8a:33:07:5a:6a:2f:10:85:a4:bc:53: ee:a5:66:b6:9e:19:49:92:4d:71:51:e3:1b:ce:5e: c0:29:b8:3c:aa:fc:f5:b3:df:b7:3e:68:21:34:28: d8:c6:ad:7a:dd:f3:af:0a:20:dd:8a:78:68:61:ef: 8b:62:34:a1:d8:5c:de:20:78:6f:cb:d3:cc:e3:58: 95:c7:3c:34:40:a4:f8:dd:47:bb:fd:b3:27:7d:41: 19:89:f5:d3:07:01:37:ec:25:37:55:f4:b0:53:af: 41:4a:3b:be:a6:d9:a4:96:56:df:f9:cd:a5:16:0c: 30:84:92:01:6f:6a:36:f8:46:3a:c1:98:cb:58:fb: f5:2a:e7:de:8e:ff:18:02:53:04:cb:d6:99:7c:43: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:01:11:4F:C0:20:0E:97:D8:97:54:4B:13:D2:5D:60:1D:C2:2C X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:1d:0d:35:99:3d:c3:16:f8:60:f7:7e:0f:bb:e8:38:a5:b3: ed:c0:0d:87:05:97:20:88:f4:22:f5:78:9f:9f:bb:3f:de:36: 7d:49:a0:55:bb:c4:bc:3b:42:25:b9:13:04:bd:bb:6c:df:7e: 9c:f6:f8:66:04:4f:0d:bf:8c:cf:fc:e8:2d:8b:51:10:e2:ee: 86:12:77:75:38:d3:ee:3b:55:bc:59:70:1b:3c:5b:67:8f:bd: 73:b7:34:88:7f:bf:54:1c:a3:fc:f7:cc:b6:03:4d:c3:fe:cb: f1:bd:4e:07:02:f0:ff:cd:26:2d:30:5b:de:e9:ad:c1:0f:6c: 2d:e0:ca:a7:fc:3c:51:27:d3:5a:eb:e4:96:2a:75:7e:5a:8f: 2a:1b:91:96:f2:e4:53:b3:a7:09:60:b5:2a:30:31:68:e2:d5: 86:dd:c2:26:fe:09:3b:10:3b:28:d4:1a:c4:07:92:03:08:88: ac:4d:38:3f:12:d7:97:c8:e9:d1:a5:17:74:34:90:03:6e:69: 80:6c:38:8e:0c:e4:75:98:58:61:a1:79:8a:b3:d2:7f:b3:36: 4b:0b:a7:40:71:b6:8d:1d:78:ba:bf:24:64:bd:2c:aa:bf:cf: 29:5f:2d:dd:ce:f4:09:b4:57:1b:4c:aa:fd:7b:e4:0e:f1:9f: fb:09:fd:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwODIzMDIxMTUyWhcNMjUwODMwMDIxMTUyWjAYMRYwFAYD VQQDEw02OGE5MjM2OC05MTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1kUoK9oVkNARgj2Sqd6gY5UAutk40ZZU/M8H+DzPqgmFykaQbaqufjXJssDF MVZ6j0c+fp9nb/zUuewrzPkPx6qR7xUqIbHMP8AXDQHMyzuwcZ0QXXXN5yhbWd0n QtyaJlZmzLQz5spOicOaijMHWmovEIWkvFPupWa2nhlJkk1xUeMbzl7AKbg8qvz1 s9+3PmghNCjYxq163fOvCiDdinhoYe+LYjSh2FzeIHhvy9PM41iVxzw0QKT43Ue7 /bMnfUEZifXTBwE37CU3VfSwU69BSju+ptmkllbf+c2lFgwwhJIBb2o2+EY6wZjL WPv1Kufejv8YAlMEy9aZfEPBcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBA9ARFP wCAOl9iXVEsT0l1gHcIsMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGHQ01mT3DFvhg934Pu+g4pbPtwA2HBZcgiPQi9Xifn7s/3jZ9SaBV u8S8O0IluRMEvbts336c9vhmBE8Nv4zP/Ogti1EQ4u6GEnd1ONPuO1W8WXAbPFtn j71ztzSIf79UHKP898y2A03D/svxvU4HAvD/zSYtMFve6a3BD2wt4Mqn/DxRJ9Na 6+SWKnV+Wo8qG5GW8uRTs6cJYLUqMDFo4tWG3cIm/gk7EDso1BrEB5IDCIisTTg/ EteXyOnRpRd0NJADbmmAbDiODOR1mFhhoXmKs9J/szZLC6dAcbaNHXi6vyRkvSyq v88pXy3dzvQJtFcbTKr9e+QO8Z/7Cf3j -----END CERTIFICATE-----Generated at Sun Aug 24 06:44:15 2025 by rpki-client