$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: UQDlLTA0Sn7KZsxkXfSQ9UmR1teXTOyKt7nTksNeDuY= Subject key identifier: 84:E4:EE:C4:4A:07:DF:A5:5E:32:C3:A8:D7:09:2C:1E:E6:91:0A:D5 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 0238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 022D Signing time: Tue 09 Sep 2025 02:02:23 +0000 Manifest this update: Tue 09 Sep 2025 02:02:23 +0000 Manifest next update: Tue 16 Sep 2025 02:02:23 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: mkYgOQXvd3EcZJ8xZwi8AwvYEoeNWQAf3Myot8J4en4=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 568 (0x238) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Sep 9 02:02:23 2025 GMT Not After : Sep 16 02:02:23 2025 GMT Subject: CN=68bf8aaf-f285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e2:da:0f:20:a7:cd:d1:13:58:75:f2:c9:22: 00:b8:24:34:36:19:4e:3a:ec:5f:24:32:ff:c0:b5: dc:0b:cc:8a:24:9f:88:7c:1b:19:35:9d:46:72:eb: 67:ca:78:61:ab:a0:70:ac:87:0e:05:fd:02:64:87: c9:9a:42:9b:b6:04:6a:15:3b:c0:5f:14:7f:9b:8b: 25:7b:6d:71:50:2c:f3:2b:9a:03:74:35:45:47:2a: cf:9c:7e:f9:3a:9a:d3:5d:fe:6b:bf:7e:f8:66:e8: 43:83:5b:91:70:c2:2e:ee:82:9c:c9:43:c2:1b:41: e7:b7:71:d3:96:73:6d:91:42:ad:c5:83:b5:5f:ef: e5:44:76:8a:d5:eb:49:c6:9a:7a:41:81:39:01:e1: 37:8d:08:aa:5c:64:3e:6d:2a:ec:93:a8:d3:ef:5b: 3d:95:ee:e1:2c:f6:36:97:98:e5:82:53:34:65:2d: 20:28:5f:e2:44:52:7a:74:eb:db:a8:a4:1d:36:db: a3:3c:a7:8c:5e:23:18:70:38:1a:53:37:d6:dd:a5: ad:79:b5:61:f8:5e:e0:39:bd:59:0b:d1:be:cd:db: 22:d7:a4:27:1f:14:b1:1b:e3:64:d9:47:5c:ba:af: de:6f:a4:1c:a8:b7:44:27:f6:04:af:ae:9f:68:e4: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E4:EE:C4:4A:07:DF:A5:5E:32:C3:A8:D7:09:2C:1E:E6:91:0A:D5 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:41:20:5b:f6:4e:42:c1:1c:db:cd:f5:98:81:c8:40:2d:cb: 48:f2:c7:3c:c6:a7:bc:99:f8:5b:36:d5:43:2f:5d:6a:a7:36: 34:ac:27:a9:4e:a8:1e:3b:4b:a9:1e:29:fd:bb:c6:31:e7:e0: 1b:69:4f:4b:9e:87:29:df:76:15:b7:ee:db:cd:30:dd:ca:95: 29:02:06:22:45:9b:f3:70:1d:36:8e:75:cc:94:91:9b:9d:f1: 26:3c:90:1d:c4:88:3c:bd:b6:1c:fc:62:7b:12:7a:84:0b:29: 91:a8:52:53:ba:c1:54:58:52:bd:5f:0d:f5:cd:28:2d:1e:74: 53:0f:08:18:9a:f6:65:4c:dd:0e:80:1c:71:f8:de:12:f1:db: 06:bb:16:9a:ee:80:bb:b7:13:82:4c:8c:83:1c:b8:75:43:db: 74:4b:2d:69:5c:cc:0d:a4:81:4c:fc:af:e2:11:df:21:d3:d2: ab:9a:9d:16:93:91:af:60:8c:cb:e5:45:35:ea:fb:99:8b:83: dc:2e:cd:d7:a2:4c:30:b4:4c:8c:44:03:5d:dd:7a:36:3f:02: 6c:42:78:19:04:0c:77:72:3b:b4:9f:d8:f1:8d:01:28:a5:15: de:98:b1:1e:47:c0:46:58:c5:9e:bc:25:97:dc:77:d4:42:7b: 6e:b1:2d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwOTA5MDIwMjIzWhcNMjUwOTE2MDIwMjIzWjAYMRYwFAYD VQQDEw02OGJmOGFhZi1mMjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+LaDyCnzdETWHXyySIAuCQ0NhlOOuxfJDL/wLXcC8yKJJ+IfBsZNZ1Gcutn ynhhq6BwrIcOBf0CZIfJmkKbtgRqFTvAXxR/m4sle21xUCzzK5oDdDVFRyrPnH75 OprTXf5rv374ZuhDg1uRcMIu7oKcyUPCG0Hnt3HTlnNtkUKtxYO1X+/lRHaK1etJ xpp6QYE5AeE3jQiqXGQ+bSrsk6jT71s9le7hLPY2l5jlglM0ZS0gKF/iRFJ6dOvb qKQdNtujPKeMXiMYcDgaUzfW3aWtebVh+F7gOb1ZC9G+zdsi16QnHxSxG+Nk2Udc uq/eb6QcqLdEJ/YEr66faORaZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITk7sRK B9+lXjLDqNcJLB7mkQrVMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRQSBb9k5CwRzbzfWYgchALctI8sc8xqe8mfhbNtVDL11qpzY0rCep TqgeO0upHin9u8Yx5+AbaU9Lnocp33YVt+7bzTDdypUpAgYiRZvzcB02jnXMlJGb nfEmPJAdxIg8vbYc/GJ7EnqECymRqFJTusFUWFK9Xw31zSgtHnRTDwgYmvZlTN0O gBxx+N4S8dsGuxaa7oC7txOCTIyDHLh1Q9t0Sy1pXMwNpIFM/K/iEd8h09Krmp0W k5GvYIzL5UU16vuZi4PcLs3XokwwtEyMRANd3Xo2PwJsQngZBAx3cju0n9jxjQEo pRXemLEeR8BGWMWevCWX3HfUQntusS2Z -----END CERTIFICATE-----Generated at Tue Sep 9 13:21:24 2025 by rpki-client