$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: RAVB7aYLoqSwlVn4iJxsX3Wbay1R4Skbznn2jRjMQdg= Subject key identifier: 2A:CD:13:1C:6F:0D:6B:23:C2:3A:76:40:E4:D2:C1:15:ED:11:C3:AF Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 011F Signing time: Sat 23 Aug 2025 04:53:46 +0000 Manifest this update: Sat 23 Aug 2025 04:53:45 +0000 Manifest next update: Sat 30 Aug 2025 04:53:45 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: R8l+pHKgYG8zMfNb5nXlUtOqGlGoFwkQ0VCwdADPEWw=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Aug 23 04:53:45 2025 GMT Not After : Aug 30 04:53:45 2025 GMT Subject: CN=68a94959-d4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:6e:d9:2e:74:f4:6f:f2:d8:d4:c2:b3:22: 45:36:ea:97:a1:d2:51:47:b2:77:f2:2d:5b:d4:16: 02:bf:2c:f2:6c:ad:c0:70:73:1f:e1:d6:6f:4f:75: 2b:1e:fa:c3:c7:88:50:a7:78:70:00:a8:3f:26:0e: ba:60:b1:72:79:17:12:25:93:43:7d:bb:e0:19:97: 35:f9:ca:54:d8:1e:66:10:ae:ed:25:49:87:56:87: 9a:7e:de:ba:5a:49:0a:2b:0b:b4:54:45:bc:d6:93: b5:da:9d:97:b1:73:06:cc:3d:fa:73:e2:4c:11:ac: 62:a2:40:5f:1c:51:62:d8:84:be:00:ae:98:ad:24: 17:a3:6c:20:73:c1:f9:06:9b:b3:ae:58:82:92:06: f1:be:50:98:b3:01:26:b1:d9:1d:f2:c4:4d:27:10: 39:f8:64:4e:24:1c:68:52:9b:9c:ea:24:15:ae:db: 2c:ab:93:f7:8f:db:74:69:67:a1:fb:e5:91:10:03: ac:27:41:1a:89:bb:5d:27:fa:9e:79:26:cc:af:ba: 16:e9:9b:5b:ac:8a:00:2f:05:db:8a:a2:09:bc:13: ec:4f:94:8d:4e:99:10:66:31:5e:24:46:08:b1:e1: da:f1:7c:59:25:4a:55:35:34:62:6a:c1:b7:9c:be: 84:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CD:13:1C:6F:0D:6B:23:C2:3A:76:40:E4:D2:C1:15:ED:11:C3:AF X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:01:b7:81:bb:88:31:22:e0:a1:85:c8:6c:4b:1b:de:0b:ca: d2:a9:31:ff:0d:ef:a5:df:db:b2:83:89:ac:53:25:9e:ae:eb: f8:1d:88:a9:76:42:34:f8:85:d3:8a:ca:36:21:2a:49:10:e8: 79:de:0f:9d:85:f1:d2:7c:46:ff:0b:09:d1:bb:81:76:ba:54: bb:18:6e:4a:f8:a6:dc:5c:89:d1:03:59:07:96:6a:5b:39:c9: 98:ac:2b:41:ad:7e:9b:0e:bd:05:a4:09:e8:ae:a5:ab:8a:13: e9:68:00:f5:0f:44:5f:e5:96:fa:2c:b2:21:6c:e9:5e:be:be: 01:7a:10:38:f8:1f:53:28:19:c7:d5:85:25:e9:cc:88:1b:ea: 76:1f:91:84:6c:72:69:55:9b:3f:7e:49:f9:c6:83:ab:1b:4a: db:b6:b6:2d:32:6b:03:8c:94:4b:e1:7d:84:cf:c2:1a:16:f0: 46:2a:3d:72:6f:05:af:54:7b:52:37:97:33:69:08:68:ae:50: 20:5e:3d:c5:55:50:aa:fa:59:76:66:ae:0f:b5:0e:52:ae:b7: 3f:35:24:8b:a5:bf:d0:28:61:14:91:d3:ac:43:af:ce:48:d9: 96:b8:39:5f:53:bd:c8:10:2a:3a:6e:2a:ba:a7:c2:fc:61:a6: 15:c2:89:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwODIzMDQ1MzQ1WhcNMjUwODMwMDQ1MzQ1WjAYMRYwFAYD VQQDEw02OGE5NDk1OS1kNGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0gVu2S509G/y2NTCsyJFNuqXodJRR7J38i1b1BYCvyzybK3AcHMf4dZvT3Ur HvrDx4hQp3hwAKg/Jg66YLFyeRcSJZNDfbvgGZc1+cpU2B5mEK7tJUmHVoeaft66 WkkKKwu0VEW81pO12p2XsXMGzD36c+JMEaxiokBfHFFi2IS+AK6YrSQXo2wgc8H5 BpuzrliCkgbxvlCYswEmsdkd8sRNJxA5+GROJBxoUpuc6iQVrtssq5P3j9t0aWeh ++WREAOsJ0EaibtdJ/qeeSbMr7oW6ZtbrIoALwXbiqIJvBPsT5SNTpkQZjFeJEYI seHa8XxZJUpVNTRiasG3nL6EsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCrNExxv DWsjwjp2QOTSwRXtEcOvMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGAbeBu4gxIuChhchsSxveC8rSqTH/De+l39uyg4msUyWeruv4HYip dkI0+IXTiso2ISpJEOh53g+dhfHSfEb/CwnRu4F2ulS7GG5K+KbcXInRA1kHlmpb OcmYrCtBrX6bDr0FpAnorqWrihPpaAD1D0Rf5Zb6LLIhbOlevr4BehA4+B9TKBnH 1YUl6cyIG+p2H5GEbHJpVZs/fkn5xoOrG0rbtrYtMmsDjJRL4X2Ez8IaFvBGKj1y bwWvVHtSN5czaQhorlAgXj3FVVCq+ll2Zq4PtQ5Srrc/NSSLpb/QKGEUkdOsQ6/O SNmWuDlfU73IECo6biq6p8L8YaYVwokZ -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:05 2025 by rpki-client