$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: VIyP0SBbc1xuYWZpgaepUz5nh2JzTcUNpGnyWxznz4A= Subject key identifier: 3D:F6:C4:96:DB:A3:AA:30:7F:DA:DB:79:A6:59:2D:D8:A9:49:6E:D4 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 01F1 Signing time: Tue 13 May 2025 01:54:16 +0000 Manifest this update: Tue 13 May 2025 01:54:16 +0000 Manifest next update: Tue 20 May 2025 01:54:16 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: jEt2dYIRXZfJqCS0eDYztl4M6pWPHk82KdEXqxX0e08=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: May 13 01:54:16 2025 GMT Not After : May 20 01:54:16 2025 GMT Subject: CN=6822a648-1524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:d8:cd:30:f1:88:72:80:c5:24:00:ce:4a: c4:c5:97:93:5a:81:8d:fc:b3:46:44:26:a5:89:4f: c6:f2:9e:87:70:4c:9e:38:ae:df:93:ed:e1:22:f1: 8e:26:cb:dc:fa:37:42:9a:47:fa:92:2d:54:56:75: f0:42:66:e8:33:58:57:d2:5d:29:ef:db:c5:01:7f: 61:a7:22:3b:27:61:a9:55:e4:28:f3:d9:2c:ef:bd: 18:b3:0c:d8:0a:cb:38:94:37:d1:75:60:dd:d4:ae: 27:8e:21:6c:6b:16:f2:22:c6:99:22:93:20:04:96: 33:94:8b:93:7a:6c:05:f4:13:ab:5e:91:a0:92:b6: 94:42:48:0e:e1:19:62:b0:78:1f:f7:1a:1b:dd:5a: 4b:67:1a:ca:71:14:50:f5:5e:66:95:c1:2a:be:f0: 29:43:e1:61:b1:e3:51:16:52:6b:a5:3f:e1:df:ad: 67:75:d4:60:dd:f3:ec:bb:1e:96:b5:b4:66:a4:df: b0:bf:a4:73:5e:3c:ae:f9:14:3c:2e:f9:66:20:58: e0:a2:4d:f6:60:7e:ed:8b:4b:08:b7:d6:f8:4c:24: e5:d0:c0:71:21:aa:64:c4:ad:e1:c9:dd:8a:91:bd: 70:e0:8d:68:62:8f:fa:52:d4:5c:b7:0d:45:d6:f0: d5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F6:C4:96:DB:A3:AA:30:7F:DA:DB:79:A6:59:2D:D8:A9:49:6E:D4 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:00:86:6d:a3:1a:0c:1b:7e:88:f4:35:b0:b5:e2:e9:44:a6: 74:9f:34:13:f6:cd:d9:4e:5c:ce:0e:47:90:76:6e:b5:92:6b: 2c:78:20:2b:65:fd:51:b1:39:ce:71:fe:1c:18:73:7c:7b:a3: a4:de:05:9d:ed:e6:3b:56:fe:43:6a:4f:52:da:c1:19:25:c8: b9:1e:6a:fc:8b:bb:cc:3e:2d:45:0f:4d:77:49:bb:2b:97:57: 3a:4f:33:a4:5f:99:9c:49:82:ec:97:4c:b1:f8:72:d0:a4:19: 8f:17:ef:76:f6:58:38:76:26:b4:ae:cb:f1:09:63:65:5e:11: e3:82:a7:3b:be:8a:2b:17:48:b7:8a:48:9d:4d:a6:32:ab:fc: bc:b5:ee:0c:20:14:cd:73:75:5b:a0:2d:3a:c3:04:bc:ae:ee: 66:54:d2:f2:e2:ed:45:1a:ed:75:7c:07:d8:93:a0:ce:d5:89: c2:59:30:99:3f:0a:59:15:7a:b9:74:29:7a:71:99:c6:cb:41: 4e:cd:7a:d6:45:78:ee:c1:63:50:45:03:b2:7c:a2:64:13:c4: 7d:08:2a:10:36:ee:7e:65:71:4b:e7:3e:d6:bd:3d:95:39:f6: 74:73:f5:48:94:79:57:08:52:ef:cf:55:b5:3f:01:46:ec:95: 73:77:87:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwNTEzMDE1NDE2WhcNMjUwNTIwMDE1NDE2WjAYMRYwFAYD VQQDEw02ODIyYTY0OC0xNTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSbYzTDxiHKAxSQAzkrExZeTWoGN/LNGRCaliU/G8p6HcEyeOK7fk+3hIvGO Jsvc+jdCmkf6ki1UVnXwQmboM1hX0l0p79vFAX9hpyI7J2GpVeQo89ks770YswzY Css4lDfRdWDd1K4njiFsaxbyIsaZIpMgBJYzlIuTemwF9BOrXpGgkraUQkgO4Rli sHgf9xob3VpLZxrKcRRQ9V5mlcEqvvApQ+FhseNRFlJrpT/h361nddRg3fPsux6W tbRmpN+wv6RzXjyu+RQ8LvlmIFjgok32YH7ti0sIt9b4TCTl0MBxIapkxK3hyd2K kb1w4I1oYo/6UtRctw1F1vDV2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD32xJbb o6owf9rbeaZZLdipSW7UMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcAIZtoxoMG36I9DWwteLpRKZ0nzQT9s3ZTlzODkeQdm61kmsseCAr Zf1RsTnOcf4cGHN8e6Ok3gWd7eY7Vv5Dak9S2sEZJci5Hmr8i7vMPi1FD013Sbsr l1c6TzOkX5mcSYLsl0yx+HLQpBmPF+929lg4dia0rsvxCWNlXhHjgqc7voorF0i3 ikidTaYyq/y8te4MIBTNc3VboC06wwS8ru5mVNLy4u1FGu11fAfYk6DO1YnCWTCZ PwpZFXq5dCl6cZnGy0FOzXrWRXjuwWNQRQOyfKJkE8R9CCoQNu5+ZXFL5z7WvT2V OfZ0c/VIlHlXCFLvz1W1PwFG7JVzd4dc -----END CERTIFICATE-----Generated at Wed May 14 16:29:59 2025 by rpki-client