$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: Q90wUIYuhbIaGEN+97bs4AXBv+465wJsTMl7beAs5io= Subject key identifier: 61:98:69:51:51:4F:3F:62:BF:4A:4A:26:F7:D8:67:AA:5B:D0:0A:E3 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 0679 Signing time: Sat 14 Jun 2025 22:04:12 +0000 Manifest this update: Sat 14 Jun 2025 22:04:12 +0000 Manifest next update: Sat 21 Jun 2025 22:04:12 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: bHQ6hGeYi1DVAbNa8pW+nJnOGU/St8wyzRwJO1ogWvc=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Jun 14 22:04:12 2025 GMT Not After : Jun 21 22:04:12 2025 GMT Subject: CN=684df1dc-f036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bd:47:1e:11:19:90:fc:0a:8c:14:a7:50:65: 59:56:e4:3f:8c:73:be:aa:7b:3b:04:87:36:7c:35: d5:6e:a9:f4:2b:87:85:b9:af:f6:c6:b8:ee:2c:08: 8e:f8:de:b8:1d:e5:91:c2:46:a7:94:cf:99:d1:88: 53:64:f8:f5:69:03:ce:4b:d4:02:74:ac:72:07:d7: a8:0c:db:15:3a:72:66:61:ff:4e:12:d6:3b:1a:51: 74:2a:2b:af:62:04:8a:2f:0f:70:cd:fb:de:fe:ec: ae:d3:a0:bc:f5:7a:1a:23:f5:ec:92:4a:52:52:86: 28:77:1c:d0:af:b9:17:75:26:bc:76:f5:d8:24:91: d7:a7:d5:3d:42:6f:4d:2f:fc:01:90:c1:34:f5:6b: fd:b6:6e:1f:11:57:8c:48:e1:b0:29:c1:5a:9a:65: 2e:07:0f:c9:87:a1:07:89:d8:f9:34:a9:34:73:42: ce:82:7c:2c:33:21:3a:0e:2e:4a:d5:55:d6:a0:87: 80:b4:24:c1:85:5d:6d:40:75:12:2d:2c:b1:47:7e: 8c:67:d9:a2:d7:f2:f1:fd:ac:bc:2e:7a:39:b5:49: e7:e7:6f:fe:7d:24:62:29:17:35:b8:8c:c2:1a:5b: b6:f8:77:e0:fb:3f:38:bb:39:7b:1f:96:c8:0b:db: 28:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:98:69:51:51:4F:3F:62:BF:4A:4A:26:F7:D8:67:AA:5B:D0:0A:E3 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:6d:49:21:fc:15:ef:c3:90:7e:ee:37:cc:79:0a:50:51:2f: ed:3a:98:e3:c1:1c:d7:4f:1b:11:3c:eb:54:9a:d1:cd:07:04: e3:cb:97:47:ba:51:55:6a:37:62:a5:71:58:8e:55:52:43:15: 7e:e1:3d:9e:5c:0e:eb:21:c6:2e:5d:f8:c4:17:ad:84:ed:fa: 3d:42:a1:4f:a8:b8:35:ba:32:ea:52:79:2f:11:36:e3:cb:66: 15:85:d1:e9:16:a6:76:73:b1:07:24:74:f7:4c:d5:62:af:cd: 9d:9d:bc:1f:ae:9f:a2:b8:0d:05:71:20:41:d9:68:f0:71:4b: 1a:ed:0f:12:55:24:3b:8a:5c:3e:46:27:c8:92:11:53:ac:b1: a0:ea:cd:a7:8f:c2:b6:cb:08:8e:10:f1:79:c5:82:eb:3d:88: b0:a7:57:e9:eb:73:56:3c:36:31:41:4f:61:eb:ec:79:fe:6c: 42:2a:48:5a:47:ba:f3:16:43:fd:3b:e5:bb:e8:96:c9:d6:db: 61:0c:88:45:9c:b0:5e:ff:e2:59:ce:d7:7f:32:94:49:e8:2a: 51:ea:8d:2b:0f:b6:df:a6:af:f0:24:e4:65:c7:71:91:3f:2f: b7:07:a2:0f:b1:19:c3:f9:49:59:41:36:97:b6:ef:30:cf:d2: 43:82:34:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNjE0MjIwNDEyWhcNMjUwNjIxMjIwNDEyWjAYMRYwFAYD VQQDEw02ODRkZjFkYy1mMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb1HHhEZkPwKjBSnUGVZVuQ/jHO+qns7BIc2fDXVbqn0K4eFua/2xrjuLAiO +N64HeWRwkanlM+Z0YhTZPj1aQPOS9QCdKxyB9eoDNsVOnJmYf9OEtY7GlF0Kiuv YgSKLw9wzfve/uyu06C89XoaI/XskkpSUoYodxzQr7kXdSa8dvXYJJHXp9U9Qm9N L/wBkME09Wv9tm4fEVeMSOGwKcFammUuBw/Jh6EHidj5NKk0c0LOgnwsMyE6Di5K 1VXWoIeAtCTBhV1tQHUSLSyxR36MZ9mi1/Lx/ay8Lno5tUnn52/+fSRiKRc1uIzC Glu2+Hfg+z84uzl7H5bIC9sorQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGYaVFR Tz9iv0pKJvfYZ6pb0ArjMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXbUkh/BXvw5B+7jfMeQpQUS/tOpjjwRzXTxsRPOtUmtHNBwTjy5dH ulFVajdipXFYjlVSQxV+4T2eXA7rIcYuXfjEF62E7fo9QqFPqLg1ujLqUnkvETbj y2YVhdHpFqZ2c7EHJHT3TNVir82dnbwfrp+iuA0FcSBB2WjwcUsa7Q8SVSQ7ilw+ RifIkhFTrLGg6s2nj8K2ywiOEPF5xYLrPYiwp1fp63NWPDYxQU9h6+x5/mxCKkha R7rzFkP9O+W76JbJ1tthDIhFnLBe/+JZztd/MpRJ6CpR6o0rD7bfpq/wJORlx3GR Py+3B6IPsRnD+UlZQTaXtu8wz9JDgjS0 -----END CERTIFICATE-----Generated at Sun Jun 15 08:42:11 2025 by rpki-client