$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: w2LohTIQZBFP/Rwu0RNiH9LOboHLdqMRcvryumRnIwg= Subject key identifier: 92:FB:9C:9A:99:F5:5B:09:8F:42:E6:DE:B3:8F:7C:D6:64:D6:71:F1 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 068A Signing time: Fri 18 Jul 2025 22:34:32 +0000 Manifest this update: Fri 18 Jul 2025 22:34:31 +0000 Manifest next update: Fri 25 Jul 2025 22:34:31 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: W1sMVWf6Vt26QyJ7E+SpHUSKrCYihefH+MVX9KR2QlE=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Jul 18 22:34:31 2025 GMT Not After : Jul 25 22:34:31 2025 GMT Subject: CN=687acbf8-86ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:df:84:41:72:a4:75:95:4c:3f:7e:4d:39: 37:65:bb:16:c4:79:75:86:25:de:ef:24:63:49:79: 53:f5:3f:19:00:44:39:41:e6:b1:8a:54:6e:ea:b1: ae:cc:45:d7:be:8c:c0:4e:16:e5:57:88:a1:ff:e8: 82:95:24:73:53:19:22:de:7c:dc:2f:49:70:b9:c6: 5d:82:e3:60:10:30:ce:fc:bb:d2:55:6f:40:c7:e5: ba:5e:cb:b8:13:01:71:15:01:d2:08:b3:bb:17:12: ba:24:84:89:6f:77:52:e4:f7:4b:30:ec:74:81:f8: 59:59:67:34:c9:1e:29:5e:77:60:d7:f4:1d:6c:53: 64:64:dc:03:be:b0:ac:81:5b:6e:9f:07:9c:42:94: ff:9e:9c:5a:79:89:c7:3e:2e:f5:7b:9e:f8:42:6d: 93:f8:f5:b9:a5:de:9b:cd:79:93:3d:ea:51:4d:db: d5:a8:29:f3:6f:7e:b7:93:cf:da:a9:c9:03:0c:a0: 70:fd:59:88:cc:f0:85:89:39:49:e2:35:dd:d4:35: 8e:8e:32:db:6b:55:5c:ab:d1:e4:29:78:c3:55:f0: 6b:12:19:7d:f9:21:0c:ba:b2:da:fe:46:92:5c:22: 44:02:3d:e5:61:75:31:2e:ed:92:df:54:70:9d:1b: f7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:9C:9A:99:F5:5B:09:8F:42:E6:DE:B3:8F:7C:D6:64:D6:71:F1 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:cc:89:a3:5c:38:72:24:a5:e2:99:fe:40:85:0f:30:43:1f: 94:cc:ea:a6:d9:ca:79:44:9b:46:20:aa:79:d4:55:ef:50:31: 74:4f:c4:aa:6a:20:16:e6:e9:cb:26:2c:6b:b2:5f:b3:5a:d4: fa:90:f7:28:aa:e9:3e:e5:3b:3d:40:97:fa:6e:e1:a5:9e:6b: 4e:38:b7:d8:b0:83:93:c2:dc:5c:1a:ea:21:6c:93:3b:8c:92: e5:72:1d:93:b6:39:25:ba:01:83:d3:bf:e5:14:fa:2d:e8:bb: ca:5a:ae:cb:3b:97:85:ac:3a:ee:32:df:94:2b:c4:b5:a5:67: 3a:f3:d4:37:46:e2:5e:de:83:10:9c:b9:cc:5c:d7:d8:fa:06: 18:ad:19:6d:a7:a6:e4:46:b2:34:31:cc:ac:d3:3a:07:2a:c9: 90:ee:e5:ee:d8:0d:60:25:0f:d2:f0:34:bf:65:c4:0d:32:bc: cf:c3:07:06:37:20:f5:42:b3:d2:b5:24:e1:46:57:29:c7:9d: 4e:16:df:08:41:73:4e:90:9b:19:34:8a:69:20:c7:31:05:21: 39:05:15:26:ad:0e:20:27:90:20:13:9e:16:8b:6d:56:a3:ad: 68:76:de:15:de:0f:dd:a7:a9:30:16:8e:18:80:d2:79:c0:13: af:41:cd:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNzE4MjIzNDMxWhcNMjUwNzI1MjIzNDMxWjAYMRYwFAYD VQQDEw02ODdhY2JmOC04NmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmjfhEFypHWVTD9+TTk3ZbsWxHl1hiXe7yRjSXlT9T8ZAEQ5QeaxilRu6rGu zEXXvozAThblV4ih/+iClSRzUxki3nzcL0lwucZdguNgEDDO/LvSVW9Ax+W6Xsu4 EwFxFQHSCLO7FxK6JISJb3dS5PdLMOx0gfhZWWc0yR4pXndg1/QdbFNkZNwDvrCs gVtunwecQpT/npxaeYnHPi71e574Qm2T+PW5pd6bzXmTPepRTdvVqCnzb363k8/a qckDDKBw/VmIzPCFiTlJ4jXd1DWOjjLba1Vcq9HkKXjDVfBrEhl9+SEMurLa/kaS XCJEAj3lYXUxLu2S31RwnRv3MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL7nJqZ 9VsJj0Lm3rOPfNZk1nHxMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqzImjXDhyJKXimf5AhQ8wQx+UzOqm2cp5RJtGIKp51FXvUDF0T8Sq aiAW5unLJixrsl+zWtT6kPcoquk+5Ts9QJf6buGlnmtOOLfYsIOTwtxcGuohbJM7 jJLlch2TtjklugGD07/lFPot6LvKWq7LO5eFrDruMt+UK8S1pWc689Q3RuJe3oMQ nLnMXNfY+gYYrRltp6bkRrI0Mcys0zoHKsmQ7uXu2A1gJQ/S8DS/ZcQNMrzPwwcG NyD1QrPStSThRlcpx51OFt8IQXNOkJsZNIppIMcxBSE5BRUmrQ4gJ5AgE54Wi21W o61odt4V3g/dp6kwFo4YgNJ5wBOvQc0x -----END CERTIFICATE-----Generated at Sun Jul 20 11:29:06 2025 by rpki-client