$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: rabCeLOxvB/dNsTR36LzJcAb494kIr8XgHbRIjl9BYs= Subject key identifier: 43:0A:60:92:4F:C8:A9:75:D4:1D:1C:1F:64:D6:00:4C:87:6C:98:82 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 0660 Signing time: Thu 24 Apr 2025 22:12:26 +0000 Manifest this update: Thu 24 Apr 2025 22:12:26 +0000 Manifest next update: Thu 01 May 2025 22:12:26 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: 4lKYoacMpeahnSUBBVNLI1lfk4W3kmQsJnjKnSIJ2qw=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Apr 24 22:12:26 2025 GMT Not After : May 1 22:12:26 2025 GMT Subject: CN=680ab74a-3b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:f3:25:48:0c:16:e4:46:ed:cc:38:30:61: 1d:b4:b5:0c:f3:d7:e8:bb:1b:c0:42:a2:5d:62:76: 39:84:21:bb:6a:ba:e8:55:95:72:d3:e1:ca:64:cc: 0e:83:97:8f:eb:ea:1f:15:73:34:94:a2:5a:79:01: 84:db:c6:3e:7a:84:51:47:37:f6:82:e6:c5:63:44: 52:23:f2:00:5c:3f:7b:57:ed:28:ed:45:80:34:fb: ea:7e:0a:dd:d8:bf:a7:c9:c9:02:a5:b9:2c:ce:8f: db:88:6f:02:d5:81:6e:83:ce:a7:42:c3:33:32:7f: c3:62:b4:74:05:a4:ce:14:21:22:50:06:1c:e9:ca: d7:fe:c6:0c:f5:42:47:2d:29:54:f5:44:da:c2:ea: 11:0b:f9:e2:29:d1:23:29:cd:c3:bf:f5:de:f6:bd: a9:fa:b6:0b:00:fb:13:80:c8:a7:0c:29:c9:2a:67: 71:2b:46:29:92:95:e0:ef:e2:21:98:92:90:f0:81: 45:b4:4f:72:48:3a:8c:9b:70:dd:da:f2:d4:9b:ac: 68:29:42:d5:fe:1e:98:0b:3b:78:1e:a2:a0:87:cd: 70:6c:9b:af:6e:0c:f7:20:e2:9d:a8:08:88:94:96: 4c:7c:30:07:bf:a8:94:6b:d7:c8:d8:e2:c0:97:19: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0A:60:92:4F:C8:A9:75:D4:1D:1C:1F:64:D6:00:4C:87:6C:98:82 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6c:ae:1c:60:16:bc:1f:08:85:15:71:3a:3c:74:14:b8:bf: 66:60:3c:dd:a3:e1:09:74:a0:a8:1d:35:3a:f4:15:f7:7c:56: 65:af:4f:bd:73:4b:eb:c1:5a:f7:f0:d2:73:f3:0d:4a:e5:49: 87:05:df:67:48:7c:05:e7:7a:d2:ee:f3:7b:e0:23:d7:9d:a4: 28:41:17:59:95:34:a7:cd:37:d2:55:d7:a1:f0:c8:29:80:6d: d5:73:7f:78:08:7b:f7:3a:8f:e4:43:7e:50:26:32:21:98:f2: 0f:10:5a:0b:19:c8:45:bc:e3:40:99:e1:58:8d:d5:92:7e:bc: 72:92:fd:b3:50:40:8b:5c:9f:31:b6:63:ae:89:cb:5d:10:09: 94:7a:7d:a8:e6:22:a1:ee:fc:b3:f9:3a:9b:13:3a:86:90:16: 82:de:d4:a7:08:d3:ff:bc:dc:b9:7c:1c:5a:88:d0:29:8e:7b: 6f:ee:8f:cf:4f:34:d8:86:67:a1:b0:33:ed:75:cb:4e:d4:f4: 7c:02:8d:22:b6:3a:29:b7:ec:a9:e4:59:aa:87:20:4d:a1:5e: cf:f6:1f:d3:bc:80:16:92:e0:2d:8b:09:f0:dc:a6:32:cd:52: 6f:42:b6:00:da:c0:55:56:3b:5d:f2:38:78:d0:04:35:d8:48: e9:79:ad:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUwNDI0MjIxMjI2WhcNMjUwNTAxMjIxMjI2WjAYMRYwFAYD VQQDEw02ODBhYjc0YS0zYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwjzJUgMFuRG7cw4MGEdtLUM89fouxvAQqJdYnY5hCG7arroVZVy0+HKZMwO g5eP6+ofFXM0lKJaeQGE28Y+eoRRRzf2gubFY0RSI/IAXD97V+0o7UWANPvqfgrd 2L+nyckCpbkszo/biG8C1YFug86nQsMzMn/DYrR0BaTOFCEiUAYc6crX/sYM9UJH LSlU9UTawuoRC/niKdEjKc3Dv/Xe9r2p+rYLAPsTgMinDCnJKmdxK0YpkpXg7+Ih mJKQ8IFFtE9ySDqMm3Dd2vLUm6xoKULV/h6YCzt4HqKgh81wbJuvbgz3IOKdqAiI lJZMfDAHv6iUa9fI2OLAlxlqcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMKYJJP yKl11B0cH2TWAEyHbJiCMB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUbK4cYBa8HwiFFXE6PHQUuL9mYDzdo+EJdKCoHTU69BX3fFZlr0+9 c0vrwVr38NJz8w1K5UmHBd9nSHwF53rS7vN74CPXnaQoQRdZlTSnzTfSVdeh8Mgp gG3Vc394CHv3Oo/kQ35QJjIhmPIPEFoLGchFvONAmeFYjdWSfrxykv2zUECLXJ8x tmOuictdEAmUen2o5iKh7vyz+TqbEzqGkBaC3tSnCNP/vNy5fBxaiNApjntv7o/P TzTYhmehsDPtdctO1PR8Ao0itjopt+yp5FmqhyBNoV7P9h/TvIAWkuAtiwnw3KYy zVJvQrYA2sBVVjtd8jh40AQ12Ejpea1E -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:50 2025 by rpki-client