$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: LWGDquLJmeADb+Nh/41mNLhMV4lhEajbp6lVPpQLJLo= Subject key identifier: 07:90:C1:BE:4B:D8:87:E9:22:F9:F6:85:5B:22:28:FF:05:70:B9:70 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 0671 Signing time: Fri 30 May 2025 22:34:15 +0000 Manifest this update: Fri 30 May 2025 22:34:15 +0000 Manifest next update: Fri 06 Jun 2025 22:34:15 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: 434yeo4dFZsC1keGMJcFYQlyDaRi6IXuB9MbDqZHWgc=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: May 30 22:34:15 2025 GMT Not After : Jun 6 22:34:15 2025 GMT Subject: CN=683a3267-88c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:91:92:27:0d:b9:b7:dd:dc:47:4f:51:ca:0f: c8:78:99:95:32:c5:87:a7:fa:c8:c4:77:4d:8c:ef: f9:01:a2:16:67:7e:cc:eb:b0:e0:1f:8a:0c:f4:d4: b0:7b:7f:96:04:1e:97:2e:29:90:fa:b2:f1:d7:8f: 10:53:0e:12:11:e8:ea:de:3a:e1:30:ec:de:e6:e7: 95:76:47:ba:48:a5:b4:fe:a6:f2:00:78:46:59:51: 5e:5b:90:f1:fb:b2:db:d3:35:59:53:26:96:4f:23: 0a:01:e0:3b:80:ec:b5:1d:e0:03:6c:43:e4:b0:17: 3e:e2:5e:93:5a:d5:24:92:a4:b2:1b:f8:5c:e2:4e: 4a:9f:3f:85:31:9f:d2:e9:48:2c:98:6c:7b:78:74: d9:bf:c2:a1:25:d9:8d:22:18:80:78:52:b2:ba:da: 44:0a:b3:90:35:f7:d0:c4:25:66:03:0b:b0:e4:7e: b6:28:05:05:0f:14:a5:7a:62:b3:67:7b:a6:9a:5f: 5c:af:e1:30:37:2d:0b:7d:71:6d:e8:45:80:32:08: da:0b:ee:88:d5:ef:b3:c5:d8:e8:c3:ac:1a:cb:f8: ec:f0:70:55:d4:73:44:c7:5c:c4:7b:1a:7e:11:94: d3:a0:ee:75:e8:31:17:19:c6:f7:4c:62:d7:d3:3e: 7e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:90:C1:BE:4B:D8:87:E9:22:F9:F6:85:5B:22:28:FF:05:70:B9:70 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:86:93:cd:62:38:dd:6b:e3:e3:3f:5e:8c:2e:13:a2:75:fe: f4:81:5d:30:b7:b6:fc:b5:5d:2a:f2:44:9d:80:e1:97:63:a7: 36:6a:b9:34:40:ad:4b:9b:8b:6f:5d:27:f7:d4:2d:d5:15:8b: 7e:09:12:e5:5c:79:97:55:7f:79:e8:66:63:39:a3:f6:02:8e: f5:cb:66:72:64:3f:b1:e2:35:af:0a:4d:ac:24:56:33:16:98: 66:79:7a:67:45:18:89:8c:29:cc:8d:83:54:f4:15:88:c9:91: e3:63:d0:22:78:13:27:38:3e:36:f5:93:a4:46:cf:f9:d3:95: fb:fe:fb:1b:dd:b2:39:76:61:94:59:33:59:7b:ff:c2:cb:94: a1:c9:ae:58:02:fa:77:9b:45:15:df:48:83:a1:39:0f:ab:85: 6d:8b:3a:82:fc:b0:55:7c:72:64:64:59:16:9a:46:2b:b5:46: f6:67:87:d8:f5:a3:9d:3d:49:03:6d:36:f2:9d:ba:86:d9:9b: c2:be:dd:96:35:69:b6:a9:35:d5:90:80:c1:ef:14:79:84:2b: 06:6c:c8:78:c5:a0:c0:da:e8:11:b4:c3:0a:3a:a6:04:79:22: f5:4e:21:8a:d4:54:c0:05:3e:54:b2:8a:ac:61:be:76:b9:cc: f0:e3:b4:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNTMwMjIzNDE1WhcNMjUwNjA2MjIzNDE1WjAYMRYwFAYD VQQDEw02ODNhMzI2Ny04OGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JGSJw25t93cR09Ryg/IeJmVMsWHp/rIxHdNjO/5AaIWZ37M67DgH4oM9NSw e3+WBB6XLimQ+rLx148QUw4SEejq3jrhMOze5ueVdke6SKW0/qbyAHhGWVFeW5Dx +7Lb0zVZUyaWTyMKAeA7gOy1HeADbEPksBc+4l6TWtUkkqSyG/hc4k5Knz+FMZ/S 6UgsmGx7eHTZv8KhJdmNIhiAeFKyutpECrOQNffQxCVmAwuw5H62KAUFDxSlemKz Z3umml9cr+EwNy0LfXFt6EWAMgjaC+6I1e+zxdjow6way/js8HBV1HNEx1zEexp+ EZTToO516DEXGcb3TGLX0z5+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeQwb5L 2IfpIvn2hVsiKP8FcLlwMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAhpPNYjjda+PjP16MLhOidf70gV0wt7b8tV0q8kSdgOGXY6c2ark0 QK1Lm4tvXSf31C3VFYt+CRLlXHmXVX956GZjOaP2Ao71y2ZyZD+x4jWvCk2sJFYz FphmeXpnRRiJjCnMjYNU9BWIyZHjY9AieBMnOD429ZOkRs/505X7/vsb3bI5dmGU WTNZe//Cy5Shya5YAvp3m0UV30iDoTkPq4VtizqC/LBVfHJkZFkWmkYrtUb2Z4fY 9aOdPUkDbTbynbqG2ZvCvt2WNWm2qTXVkIDB7xR5hCsGbMh4xaDA2ugRtMMKOqYE eSL1TiGK1FTABT5UsoqsYb52uczw47Sm -----END CERTIFICATE-----Generated at Sat May 31 17:06:27 2025 by rpki-client