$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: 3tQQbC2yEYYSQabArOiJ1PQvvEDAUOSyXspbuJHn4yQ= Subject key identifier: EB:9D:F9:DB:70:2F:E0:6C:20:31:D2:7E:ED:A5:A1:12:7F:A0:72:9C Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 0104 Signing time: Tue 01 Jul 2025 05:34:52 +0000 Manifest this update: Tue 01 Jul 2025 05:34:51 +0000 Manifest next update: Tue 08 Jul 2025 05:34:51 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: RiG5ILuZSTzuUznXeEPqo+1BLuK2UojUzkqBRu5XmKY=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Jul 1 05:34:51 2025 GMT Not After : Jul 8 05:34:51 2025 GMT Subject: CN=6863737c-38ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:0f:2a:2f:a1:65:28:5f:30:d6:22:94:d2: 20:ee:57:52:90:19:ec:ad:e2:17:ef:f7:fd:fc:f3: 1e:61:2a:88:10:d6:13:1f:91:63:53:d4:e6:59:44: e9:18:2e:4f:ec:31:af:93:82:5a:cb:ec:72:0d:e5: bc:e2:8d:59:36:c4:94:3d:e1:47:d6:fb:f2:0c:ef: 1a:e5:1d:ac:60:d0:5a:29:48:a7:fd:31:21:3a:7a: 76:ce:bc:0d:b0:3a:ae:b6:8d:2a:1c:c9:e4:b5:58: e8:90:16:b5:63:15:bf:b9:3c:d4:85:88:1b:b1:24: 27:59:3c:6b:3d:5c:c2:8d:33:a1:c4:f8:63:27:dd: 46:f0:a0:f2:60:29:c2:30:b0:87:b0:cf:14:28:80: aa:32:4b:63:2a:a4:28:81:f1:21:8f:da:60:3b:38: 94:a2:0b:c4:3c:24:4b:8e:2d:1d:ee:bf:2d:ea:e1: ee:76:0e:43:06:51:13:67:e3:41:bc:1e:52:00:10: d2:5f:55:4a:50:a0:c0:e6:97:1b:52:62:f3:4e:7c: 94:e7:c3:a6:87:dc:ec:e1:45:bc:81:ae:a9:c8:4d: 39:77:43:b0:97:3a:51:1f:db:22:6b:81:d8:98:17: 80:2d:b0:76:a7:78:29:73:2e:8e:81:62:52:cc:45: e3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9D:F9:DB:70:2F:E0:6C:20:31:D2:7E:ED:A5:A1:12:7F:A0:72:9C X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:2c:9f:b0:8a:22:cf:71:55:5d:1b:c4:4c:c3:b8:8b:b2:35: 23:14:2f:3b:9e:80:5a:eb:8f:07:98:48:12:9d:9e:52:d4:89: 7f:28:ef:36:dc:fc:0e:62:0c:41:5e:c1:88:1c:81:98:a1:ee: 03:7a:64:b6:b7:aa:6f:84:89:c2:a1:b7:fd:10:a1:44:55:14: d6:7e:93:02:a6:e8:b2:48:c4:dd:cd:fc:53:f9:96:44:70:8a: f6:a3:ba:9f:ee:dd:17:50:2b:be:e2:02:80:fb:90:e3:a3:ae: c3:45:7e:99:2c:2c:83:06:e3:58:c9:1f:85:b0:cc:94:81:e3: b3:b3:37:b7:ec:2d:8e:b4:10:b4:31:54:22:c9:ba:93:a2:51: fe:68:d4:d1:b9:bb:10:eb:b8:80:96:14:86:df:6c:55:97:f1: 67:cf:2a:73:1d:f9:f3:5c:dd:1b:e6:f8:fc:80:7b:20:28:c2: 4d:02:75:8a:38:39:72:3a:23:62:33:e3:80:16:d5:91:79:9a: 3d:2e:ab:4c:69:39:23:a6:fb:7a:4e:26:d4:c2:36:b3:9b:ac: af:03:f0:34:0d:6c:8f:02:bf:3b:54:13:c2:65:02:21:8e:9b: c4:31:b6:99:90:bb:30:b9:82:f1:e8:3d:b4:37:1c:20:5f:62: 7c:8f:60:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwNzAxMDUzNDUxWhcNMjUwNzA4MDUzNDUxWjAYMRYwFAYD VQQDEw02ODYzNzM3Yy0zOGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTAPKi+hZShfMNYilNIg7ldSkBnsreIX7/f9/PMeYSqIENYTH5FjU9TmWUTp GC5P7DGvk4Jay+xyDeW84o1ZNsSUPeFH1vvyDO8a5R2sYNBaKUin/TEhOnp2zrwN sDquto0qHMnktVjokBa1YxW/uTzUhYgbsSQnWTxrPVzCjTOhxPhjJ91G8KDyYCnC MLCHsM8UKICqMktjKqQogfEhj9pgOziUogvEPCRLji0d7r8t6uHudg5DBlETZ+NB vB5SABDSX1VKUKDA5pcbUmLzTnyU58Omh9zs4UW8ga6pyE05d0OwlzpRH9sia4HY mBeALbB2p3gpcy6OgWJSzEXjcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOud+dtw L+BsIDHSfu2loRJ/oHKcMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6LJ+wiiLPcVVdG8RMw7iLsjUjFC87noBa648HmEgSnZ5S1Il/KO82 3PwOYgxBXsGIHIGYoe4DemS2t6pvhInCobf9EKFEVRTWfpMCpuiySMTdzfxT+ZZE cIr2o7qf7t0XUCu+4gKA+5Djo67DRX6ZLCyDBuNYyR+FsMyUgeOzsze37C2OtBC0 MVQiybqTolH+aNTRubsQ67iAlhSG32xVl/FnzypzHfnzXN0b5vj8gHsgKMJNAnWK ODlyOiNiM+OAFtWReZo9LqtMaTkjpvt6TibUwjazm6yvA/A0DWyPAr87VBPCZQIh jpvEMbaZkLswuYLx6D20NxwgX2J8j2BO -----END CERTIFICATE-----Generated at Wed Jul 2 20:02:12 2025 by rpki-client