$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: UpEQ1wdQi42nKNwurki3QLcNL4BIPXhxGWHplVUN5S4= Subject key identifier: 67:77:84:C7:41:CB:03:39:B4:7C:6D:B0:BA:9D:3A:E4:26:DE:18:2A Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 01DD Signing time: Thu 03 Apr 2025 02:10:01 +0000 Manifest this update: Thu 03 Apr 2025 02:10:00 +0000 Manifest next update: Thu 10 Apr 2025 02:10:00 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: yWsXkvFfis7caaDPjRyeFU3iXxYc+4MSawA6qOgeo+4=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:10:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74 Validity Not Before: Apr 3 02:10:00 2025 GMT Not After : Apr 10 02:10:00 2025 GMT Subject: CN=67ededf9-411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:76:e1:16:35:72:56:47:7d:e8:1b:19:b5: 84:d9:38:ad:c4:7c:7f:b1:20:24:c3:cd:dd:50:4b: b9:6a:5f:9a:82:93:ae:b8:a3:b9:59:e6:14:1b:b7: a9:99:7d:10:a4:b9:1c:44:cc:6c:50:d4:4a:1a:00: 85:36:6c:06:81:74:4a:0e:9c:9a:a0:83:b6:a8:df: c8:dc:f0:7f:6a:dd:25:1e:fc:6c:0d:26:76:e9:d3: 32:2d:a2:e4:6a:bd:74:40:d2:7b:08:d5:c2:26:a3: 5e:99:3b:d7:16:06:3d:74:0f:b1:e6:25:a0:22:40: 3c:70:81:cb:43:9f:ce:56:1f:5a:0b:ef:fc:66:8e: e5:47:48:ef:69:00:92:b0:e8:d0:3b:c5:22:97:4c: ec:c4:60:b2:08:38:cb:17:88:46:71:e2:7d:a5:4d: 40:9c:b7:2c:7a:bf:00:51:e0:16:a4:bf:5f:6f:55: db:a0:95:0c:0c:27:e4:fc:c5:c9:75:91:6a:f4:01: 34:69:ea:c6:34:ca:e1:57:60:56:1e:d2:1c:a8:ba: e6:0b:30:fe:11:93:6f:a3:de:2a:89:02:44:95:91: ee:df:0e:2a:92:79:a0:be:1f:d5:59:bb:c6:26:f2: 4e:e8:ef:08:63:bb:67:6f:78:26:91:23:51:38:01: d0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:77:84:C7:41:CB:03:39:B4:7C:6D:B0:BA:9D:3A:E4:26:DE:18:2A X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:af:88:53:48:b9:8c:6a:67:a5:d2:71:f3:0b:14:38:33:c1: 92:6a:e3:85:10:1d:86:6d:c9:67:84:a5:a7:1e:70:df:1d:e4: de:0f:cb:f2:66:99:80:e2:d1:b1:7d:14:66:cb:d9:47:f6:f7: 07:df:f9:3f:d9:9b:2f:7b:4d:11:79:e7:f9:1f:23:42:52:7b: af:2c:6e:c0:e3:11:e5:2d:fc:da:e7:55:2d:e3:6c:46:fd:28: 83:4d:42:4c:54:ea:72:0e:6b:c9:b9:1b:a2:bb:fc:c5:ac:f7: 34:7a:11:cf:10:d9:10:8e:a4:e9:58:37:b0:e0:a0:2e:e8:24: c3:e0:d1:b9:76:61:6e:22:25:f1:f8:c3:49:5c:4d:11:d5:04: 57:ef:f8:2f:32:19:43:f3:15:25:a5:5a:b6:b0:6e:c2:36:4e: 65:49:23:2f:db:40:1e:1a:a5:51:e7:59:10:e3:20:4b:a1:f4: 05:66:76:fa:7f:18:3a:fb:1d:b9:8d:6e:f2:ee:1f:15:33:b5: c3:c2:76:34:e6:66:66:70:7a:0b:cd:0f:f3:36:d4:0e:97:94: b9:17:25:71:cb:81:5e:85:ef:28:0d:1c:de:e1:83:f9:49:a0: d3:88:9b:dd:31:ba:15:be:a4:3b:5f:29:1a:00:fe:7e:00:5c: 31:e1:74:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwNDAzMDIxMDAwWhcNMjUwNDEwMDIxMDAwWjAYMRYwFAYD VQQDEw02N2VkZWRmOS00MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXl24RY1clZHfegbGbWE2TitxHx/sSAkw83dUEu5al+agpOuuKO5WeYUG7ep mX0QpLkcRMxsUNRKGgCFNmwGgXRKDpyaoIO2qN/I3PB/at0lHvxsDSZ26dMyLaLk ar10QNJ7CNXCJqNemTvXFgY9dA+x5iWgIkA8cIHLQ5/OVh9aC+/8Zo7lR0jvaQCS sOjQO8Uil0zsxGCyCDjLF4hGceJ9pU1AnLcser8AUeAWpL9fb1XboJUMDCfk/MXJ dZFq9AE0aerGNMrhV2BWHtIcqLrmCzD+EZNvo94qiQJElZHu3w4qknmgvh/VWbvG JvJO6O8IY7tnb3gmkSNROAHQ8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd3hMdB ywM5tHxtsLqdOuQm3hgqMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGr4hTSLmMamel0nHzCxQ4M8GSauOFEB2GbclnhKWnHnDfHeTeD8vy ZpmA4tGxfRRmy9lH9vcH3/k/2Zsve00Reef5HyNCUnuvLG7A4xHlLfza51Ut42xG /SiDTUJMVOpyDmvJuRuiu/zFrPc0ehHPENkQjqTpWDew4KAu6CTD4NG5dmFuIiXx +MNJXE0R1QRX7/gvMhlD8xUlpVq2sG7CNk5lSSMv20AeGqVR51kQ4yBLofQFZnb6 fxg6+x25jW7y7h8VM7XDwnY05mZmcHoLzQ/zNtQOl5S5FyVxy4Fehe8oDRze4YP5 SaDTiJvdMboVvqQ7XykaAP5+AFwx4XRm -----END CERTIFICATE-----Generated at Fri Apr 4 22:13:45 2025 by rpki-client