$ rpki-client -vvf rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft File: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft (raw, json) Hash identifier: 6xCTewTUMeqDwwOYilqlTMlIN1WETwH+ExDP03sH1gA= Subject key identifier: 66:57:85:8F:8E:28:5D:BB:03:86:C5:5D:D8:6E:6A:43:A1:5B:37:97 Authority key identifier: DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA Certificate issuer: /CN=A919DC74/serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft Manifest number: 01E8 Signing time: Fri 25 Apr 2025 01:53:58 +0000 Manifest this update: Fri 25 Apr 2025 01:53:58 +0000 Manifest next update: Fri 02 May 2025 01:53:58 +0000 Files and hashes: 1: 3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl (hash: Eb1Z/8pmuMwMZCKeuDV6i0BZLjaPAYtTx2EfC4hTx0M=) 2: C07FAA5C804311EE928AA523C4F9AE02.roa (hash: AZy7/TxMpzRlcr6hksesm9lJQNr2Dwt8ilbyJ2QESrI=) 3: 9A7071C0462E11ED90035452C4F9AE02.roa (hash: 2fC6LApklarDYBE/kWA2dAk9w9yvCtuTpXuMhEXBEEU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DC74, serialNumber=DECFC7534398C48578B9E474AEB80B1C94CBC5BA Validity Not Before: Apr 25 01:53:58 2025 GMT Not After : May 2 01:53:58 2025 GMT Subject: CN=680aeb36-4d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:3b:21:cf:98:be:b9:58:3b:69:56:49:8b: 57:1c:20:5c:8a:9c:d8:46:39:2b:55:ed:df:77:62: 2f:94:ce:14:70:9a:1f:83:ea:96:58:87:26:82:ea: 98:b6:d7:78:f5:fe:90:3f:9c:50:c1:64:0f:80:48: 7a:b0:a2:b5:60:27:47:92:72:04:e2:c8:17:21:d5: 71:0e:dd:78:16:96:1a:93:48:30:a6:ba:25:97:e5: 20:02:9e:c7:10:89:c2:de:f2:49:ef:7c:aa:79:41: a7:b0:c0:ea:7a:f5:ea:bc:60:ff:76:9c:59:a6:57: 18:27:c1:e8:f0:16:c3:80:df:18:19:22:7d:00:58: 1e:93:34:6c:45:4f:f9:8b:35:7f:3a:06:3a:f4:52: 58:5c:c8:90:23:ee:80:d3:00:92:67:40:3a:db:e4: b2:04:ad:a9:b4:1c:39:61:7e:9f:a5:10:58:d8:54: 7b:ee:8f:3d:56:47:35:55:6e:ce:4d:2a:d2:0b:5c: f7:16:55:66:24:c5:48:95:d4:76:e6:1f:be:64:06: f9:ab:d2:c6:33:d9:1f:6d:a2:ed:40:10:73:c5:36: 23:69:3f:25:20:11:1b:ac:c2:d0:e1:da:27:ce:25: bf:34:c6:c6:9e:c9:92:d2:98:8a:85:74:7b:69:95: 83:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:57:85:8F:8E:28:5D:BB:03:86:C5:5D:D8:6E:6A:43:A1:5B:37:97 X509v3 Authority Key Identifier: keyid:DE:CF:C7:53:43:98:C4:85:78:B9:E4:74:AE:B8:0B:1C:94:CB:C5:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3s_HU0OYxIV4ueR0rrgLHJTLxbo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DC74/E42CBC4C462911EDAE78B235C4F9AE02/3s_HU0OYxIV4ueR0rrgLHJTLxbo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a7:ff:51:52:c5:15:b3:91:b3:6e:c9:d1:32:bd:c0:67:c9: c1:0b:03:31:6d:d8:02:63:83:5a:27:39:49:0d:e5:45:c3:34: 0f:59:45:b0:22:6d:c6:9b:fc:32:db:b7:8e:69:75:ef:88:80: 04:95:54:a8:d1:0e:e1:da:6d:73:70:ac:24:45:cb:9f:67:f6: c1:d6:90:0c:fd:8d:42:af:1a:66:85:c5:09:42:f3:cf:33:a7: fb:be:e4:f7:08:20:04:bc:64:c6:ef:76:e6:3f:c0:b3:6f:9d: fd:06:a7:7e:9c:e7:c1:57:d8:28:c7:6a:0f:58:36:a4:96:03: 8b:16:e8:e8:bb:60:da:27:ec:2e:c7:97:65:7c:d8:96:3b:62: 32:d0:2b:14:de:51:6b:d0:f8:a7:3f:d0:10:71:8c:81:7a:df: f7:fc:7e:03:4a:7d:c8:3f:87:75:3f:16:56:f3:88:19:30:93: 40:72:e9:c0:e0:2b:ff:2c:e8:d0:88:e9:0c:da:98:a9:1a:4f: d3:9f:8a:f9:1d:37:2d:bb:6b:bd:b9:79:4e:d5:69:d2:44:1c: 17:a0:f1:53:5d:3d:f5:e1:64:8a:90:01:d0:ce:7a:a3:b8:41: 6c:f7:3f:92:b9:16:41:f8:ef:24:b4:fa:7c:eb:f4:a9:11:61: 43:97:1c:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURDNzQxMTAvBgNVBAUTKERFQ0ZDNzUzNDM5OEM0ODU3OEI5RTQ3NEFFQjgwQjFD OTRDQkM1QkEwHhcNMjUwNDI1MDE1MzU4WhcNMjUwNTAyMDE1MzU4WjAYMRYwFAYD VQQDEw02ODBhZWIzNi00ZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmI7Ic+YvrlYO2lWSYtXHCBcipzYRjkrVe3fd2IvlM4UcJofg+qWWIcmguqY ttd49f6QP5xQwWQPgEh6sKK1YCdHknIE4sgXIdVxDt14FpYak0gwproll+UgAp7H EInC3vJJ73yqeUGnsMDqevXqvGD/dpxZplcYJ8Ho8BbDgN8YGSJ9AFgekzRsRU/5 izV/OgY69FJYXMiQI+6A0wCSZ0A62+SyBK2ptBw5YX6fpRBY2FR77o89Vkc1VW7O TSrSC1z3FlVmJMVIldR25h++ZAb5q9LGM9kfbaLtQBBzxTYjaT8lIBEbrMLQ4don ziW/NMbGnsmS0piKhXR7aZWDPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZXhY+O KF27A4bFXdhuakOhWzeXMB8GA1UdIwQYMBaAFN7Px1NDmMSFeLnkdK64CxyUy8W6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REM3NC9FNDJDQkM0QzQ2 MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJVjR1ZVIwcnJnTEhKVEx4 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNzX0hVME9ZeElWNHVlUjBycmdMSEpUTHhiby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REM3NC9FNDJDQkM0QzQ2MjkxMUVEQUU3OEIyMzVDNEY5QUUwMi8zc19IVTBPWXhJ VjR1ZVIwcnJnTEhKVEx4Ym8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpp/9RUsUVs5GzbsnRMr3AZ8nBCwMxbdgCY4NaJzlJDeVFwzQPWUWw Im3Gm/wy27eOaXXviIAElVSo0Q7h2m1zcKwkRcufZ/bB1pAM/Y1CrxpmhcUJQvPP M6f7vuT3CCAEvGTG73bmP8Czb539Bqd+nOfBV9gox2oPWDaklgOLFujou2DaJ+wu x5dlfNiWO2Iy0CsU3lFr0PinP9AQcYyBet/3/H4DSn3IP4d1PxZW84gZMJNAcunA 4Cv/LOjQiOkM2pipGk/Tn4r5HTctu2u9uXlO1WnSRBwXoPFTXT314WSKkAHQznqj uEFs9z+SuRZB+O8ktPp86/SpEWFDlxx3 -----END CERTIFICATE-----Generated at Sat Apr 26 05:24:47 2025 by rpki-client