$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: P9rlCYxB8a4smJ1fBZHCwAarXQTUqPcxRrb7Vjqme9s= Subject key identifier: 9D:6A:A3:24:7A:9B:CC:93:D5:F1:A7:A6:D3:AF:45:0C:16:92:9B:D9 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 0213 Signing time: Mon 21 Jul 2025 02:19:09 +0000 Manifest this update: Mon 21 Jul 2025 02:19:09 +0000 Manifest next update: Mon 28 Jul 2025 02:19:09 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: M6XkolksefxM7Vx+1ZoIEMK5gQIpNARHD5mX0XQzlwo=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Jul 21 02:19:09 2025 GMT Not After : Jul 28 02:19:09 2025 GMT Subject: CN=687da39d-6c09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:74:84:53:f9:b8:3f:d0:df:dc:21:5b:52: ac:88:0f:d1:06:46:3d:40:ef:06:7e:d9:23:9b:d6: ac:16:3d:b6:6c:98:8a:17:6a:c9:31:0a:94:f3:09: d8:31:91:4c:1d:40:53:16:75:21:92:f9:4a:75:bb: 5e:11:a2:80:ed:9b:b4:1a:3e:3d:b2:66:04:d4:4b: 6c:30:8c:93:b0:bb:1c:1e:82:81:63:6d:a3:6b:2c: b4:58:fe:7d:55:54:1b:9e:24:6e:89:f3:d3:f1:03: f8:91:d4:41:14:e2:60:2d:d2:29:a3:77:1f:c4:4f: e5:f5:ff:dc:5f:4e:b4:ed:c2:e4:71:c9:76:41:40: 1f:e7:0f:59:50:4e:b2:d1:a2:15:f3:3a:cf:41:96: 46:53:ae:17:21:a0:d9:ef:e3:8e:9e:ab:ea:21:71: 02:9d:14:46:fd:4f:8f:34:a4:98:6e:3c:8f:c1:92: 74:95:de:95:7c:33:6f:a2:1a:63:a4:6c:9e:af:7f: 01:d5:8a:59:fc:f8:f3:10:a3:97:da:e1:b8:8a:fb: 51:11:aa:02:ff:ee:05:d6:d6:84:56:2b:7f:da:9a: 1d:dd:f9:8e:3c:e1:e8:36:2c:6d:3a:eb:db:2d:95: a5:17:45:d2:dd:d4:b7:b0:10:4c:6f:b4:00:2c:9c: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:A3:24:7A:9B:CC:93:D5:F1:A7:A6:D3:AF:45:0C:16:92:9B:D9 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:55:99:ff:fe:ad:dd:b5:47:f1:22:ea:e0:73:5a:40:9f:d7: b0:ea:02:f7:9f:fb:ee:21:a3:27:87:9c:b8:51:4c:3c:b1:dd: d7:24:83:26:57:bd:9d:3c:85:86:6b:21:55:59:69:23:ce:22: b4:7e:d9:fc:72:74:e3:13:12:71:0a:8b:f1:99:85:0f:e7:ba: ab:d2:3f:f6:22:23:76:3c:14:7f:87:43:a7:44:50:27:18:a6: 20:13:54:35:f7:07:f8:5b:15:c9:c6:bf:28:ec:c9:3f:d9:08: 40:29:79:18:d7:c1:4b:5c:f7:b7:5a:c8:6a:21:d6:42:2f:f8: 07:69:6f:3f:8b:3e:59:d7:41:44:c5:c5:5d:a5:37:c6:84:a3: 8b:62:40:7c:bb:36:1b:53:90:3b:90:82:78:e7:3a:ed:15:4e: d7:27:26:62:2d:b0:5b:56:08:76:76:52:23:7f:01:98:33:9d: c1:2c:be:ce:43:af:75:e6:06:99:bb:e3:67:4b:a8:57:69:0c: f1:00:77:8b:fe:f5:9b:53:17:3a:8d:53:99:1c:e6:da:e4:dd: f5:ab:34:de:56:02:30:18:13:b1:f1:25:a7:6d:3a:d5:bc:11: 80:a6:e5:bd:b0:f3:7a:fb:b7:85:c2:8d:4d:b8:e7:6c:2c:bf: a0:53:a2:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwNzIxMDIxOTA5WhcNMjUwNzI4MDIxOTA5WjAYMRYwFAYD VQQDEw02ODdkYTM5ZC02YzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzh0hFP5uD/Q39whW1KsiA/RBkY9QO8Gftkjm9asFj22bJiKF2rJMQqU8wnY MZFMHUBTFnUhkvlKdbteEaKA7Zu0Gj49smYE1EtsMIyTsLscHoKBY22jayy0WP59 VVQbniRuifPT8QP4kdRBFOJgLdIpo3cfxE/l9f/cX0607cLkccl2QUAf5w9ZUE6y 0aIV8zrPQZZGU64XIaDZ7+OOnqvqIXECnRRG/U+PNKSYbjyPwZJ0ld6VfDNvohpj pGyer38B1YpZ/PjzEKOX2uG4ivtREaoC/+4F1taEVit/2pod3fmOPOHoNixtOuvb LZWlF0XS3dS3sBBMb7QALJwV3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1qoyR6 m8yT1fGnptOvRQwWkpvZMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnVZn//q3dtUfxIurgc1pAn9ew6gL3n/vuIaMnh5y4UUw8sd3XJIMm V72dPIWGayFVWWkjziK0ftn8cnTjExJxCovxmYUP57qr0j/2IiN2PBR/h0OnRFAn GKYgE1Q19wf4WxXJxr8o7Mk/2QhAKXkY18FLXPe3WshqIdZCL/gHaW8/iz5Z10FE xcVdpTfGhKOLYkB8uzYbU5A7kIJ45zrtFU7XJyZiLbBbVgh2dlIjfwGYM53BLL7O Q6915gaZu+NnS6hXaQzxAHeL/vWbUxc6jVOZHOba5N31qzTeVgIwGBOx8SWnbTrV vBGApuW9sPN6+7eFwo1NuOdsLL+gU6LR -----END CERTIFICATE-----Generated at Wed Jul 23 02:29:17 2025 by rpki-client