$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: XH91naacZWfAAiHrJRHAntb3vJJorGbcrvZu8s+cfz4= Subject key identifier: AF:7B:2B:D6:21:1B:AC:91:EC:84:06:3A:20:AB:40:25:89:44:4E:3B Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 0664 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 0658 Signing time: Tue 08 Apr 2025 22:11:09 +0000 Manifest this update: Tue 08 Apr 2025 22:11:09 +0000 Manifest next update: Tue 15 Apr 2025 22:11:09 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: lMVcPvG4JAO5utX05hTYGc+Z3UZI/Mb98p4L1iwP/zs=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1636 (0x664) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7 Validity Not Before: Apr 8 22:11:09 2025 GMT Not After : Apr 15 22:11:09 2025 GMT Subject: CN=67f59efd-eb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:f3:bb:4a:e0:dd:4e:af:4a:c7:fe:a3:10: ed:3c:d9:b7:a9:9c:11:d7:c6:ed:ad:fa:54:da:a1: 21:c2:62:6a:15:5a:be:72:8e:6c:84:ea:cc:af:fc: 7e:91:5c:6e:d9:92:9f:80:11:ee:ba:b7:dc:eb:f9: 63:b0:4d:4b:e4:3c:86:0f:38:9b:85:c0:b7:71:5b: ce:e4:93:7d:81:11:12:bf:e7:b5:e5:e9:c4:50:15: 1a:6a:ec:9c:36:e6:0a:1b:11:82:56:14:41:f0:f1: 0b:f7:cc:31:21:54:72:87:ca:83:20:e5:69:f1:78: bc:bb:e0:f1:45:e8:97:46:a4:ef:eb:94:e8:f6:19: f0:41:d4:df:e9:fb:2f:f3:b2:0f:f8:76:91:6e:13: d0:be:5f:9a:4f:d3:e1:20:32:57:11:df:e3:99:c9: 15:81:b9:e6:b8:04:41:ef:73:03:4b:92:ed:90:3b: ef:25:9e:70:17:d2:83:ee:81:06:39:c1:2d:94:56: 80:e8:56:23:d0:82:82:a1:96:f4:17:79:b4:8e:86: c5:44:ce:d4:d5:b2:a4:ae:0e:d0:89:34:49:55:04: a0:d5:d7:c7:e3:e7:4f:ab:11:88:32:2a:25:a0:fe: d0:bd:36:e4:78:c4:88:e0:0f:f0:4e:d7:5d:63:53: ad:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7B:2B:D6:21:1B:AC:91:EC:84:06:3A:20:AB:40:25:89:44:4E:3B X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ce:1c:6e:af:a7:ac:3e:fe:d7:78:66:c5:1c:e2:43:1e:56: 18:f9:4b:16:49:d9:bb:ce:55:8d:57:0f:3e:0e:66:e6:03:e3: 0a:f0:6c:c8:d7:e5:04:6c:05:37:af:fb:17:b2:f8:50:0b:0e: 28:e2:3c:ae:5e:38:4f:76:41:96:cf:72:ac:8b:5f:d1:93:00: c2:62:a3:41:fc:5a:28:99:56:39:2a:04:19:90:85:4c:56:a9: 36:59:c0:4a:2f:8d:fb:c2:66:18:00:43:8f:cf:d4:b2:99:fe: f5:82:10:5c:e2:a6:87:86:aa:fb:88:66:85:2b:21:dd:f4:5b: fd:f8:7c:57:65:dd:21:7e:21:c8:49:13:6e:c7:7a:6f:83:bf: 94:6b:f4:4e:20:5c:bc:6a:a3:fb:d5:78:5a:d6:40:cb:67:40: 7e:1b:69:95:a8:f7:b5:cd:bb:5b:1e:7e:cf:17:0f:5c:3d:da: 03:63:6c:75:ed:2d:b4:59:17:97:b6:87:ab:99:b0:6c:cc:46: ca:df:f3:06:60:4e:e1:9a:90:ad:25:69:3f:8b:41:41:85:f7: 1e:f5:6e:5b:5f:6e:96:91:48:2c:06:03:ce:9d:a2:23:89:9b: 6c:8a:c9:f9:c0:c9:76:72:e6:1d:9e:be:09:22:88:68:b4:be: 27:ab:c7:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNDA4MjIxMTA5WhcNMjUwNDE1MjIxMTA5WjAYMRYwFAYD VQQDEw02N2Y1OWVmZC1lYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyrzu0rg3U6vSsf+oxDtPNm3qZwR18btrfpU2qEhwmJqFVq+co5shOrMr/x+ kVxu2ZKfgBHuurfc6/ljsE1L5DyGDzibhcC3cVvO5JN9gRESv+e15enEUBUaauyc NuYKGxGCVhRB8PEL98wxIVRyh8qDIOVp8Xi8u+DxReiXRqTv65To9hnwQdTf6fsv 87IP+HaRbhPQvl+aT9PhIDJXEd/jmckVgbnmuARB73MDS5LtkDvvJZ5wF9KD7oEG OcEtlFaA6FYj0IKCoZb0F3m0jobFRM7U1bKkrg7QiTRJVQSg1dfH4+dPqxGIMiol oP7QvTbkeMSI4A/wTtddY1OtoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK97K9Yh G6yR7IQGOiCrQCWJRE47MB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhzhxur6esPv7XeGbFHOJDHlYY+UsWSdm7zlWNVw8+DmbmA+MK8GzI 1+UEbAU3r/sXsvhQCw4o4jyuXjhPdkGWz3Ksi1/RkwDCYqNB/FoomVY5KgQZkIVM Vqk2WcBKL437wmYYAEOPz9Symf71ghBc4qaHhqr7iGaFKyHd9Fv9+HxXZd0hfiHI SRNux3pvg7+Ua/ROIFy8aqP71Xha1kDLZ0B+G2mVqPe1zbtbHn7PFw9cPdoDY2x1 7S20WReXtoermbBszEbK3/MGYE7hmpCtJWk/i0FBhfce9W5bX26WkUgsBgPOnaIj iZtsisn5wMl2cuYdnr4JIohotL4nq8dS -----END CERTIFICATE-----Generated at Thu Apr 10 18:56:12 2025 by rpki-client