$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: t0JngQreAAJt2OhnpgrYwCjow4yhpJsoEWwmsE11/bg= Subject key identifier: 15:00:E4:D6:E7:DC:38:3A:B0:0F:BC:EA:B0:20:3D:6E:AD:B4:62:F7 Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 0527 Signing time: Fri 22 Aug 2025 23:45:44 +0000 Manifest this update: Fri 22 Aug 2025 23:45:44 +0000 Manifest next update: Fri 29 Aug 2025 23:45:43 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: X3i/PTshwgPA7rVkE+9t0xXs4gPkm0XOJEUm2JxGUR0=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=) 3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:45:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Aug 22 23:45:44 2025 GMT Not After : Aug 29 23:45:43 2025 GMT Subject: CN=68a90128-0f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:5e:29:8a:39:e0:90:8f:e8:f9:1f:91:4f: b6:5f:33:84:37:d5:23:a8:95:96:e4:f0:80:f5:b7: a2:db:7e:af:70:2e:e1:a4:fb:a5:3c:fb:f8:94:ca: a9:4f:9e:b4:0e:a8:1b:32:07:ea:09:15:e1:b1:23: f3:44:c0:a6:ce:92:50:7f:80:dd:e9:cb:7b:89:41: fb:57:aa:c2:af:80:7e:dd:67:86:8f:97:dc:f0:4f: 82:df:ee:85:16:3f:18:81:c3:8b:a9:a5:88:0d:d5: dd:92:f6:db:11:08:36:fc:dd:36:61:05:6a:6e:98: 59:6a:a4:80:d8:42:9c:ad:0d:7f:86:25:59:9e:9f: 84:fe:6d:b9:3c:84:e1:7f:02:d0:19:d5:f7:f4:83: 23:e5:30:ba:3c:2f:35:b9:f6:67:30:24:41:cf:15: 08:4c:4c:2b:b1:7e:e9:c9:19:d3:9f:46:0f:d0:1d: 46:70:87:f1:45:b6:68:6a:21:7c:15:f3:1e:b9:a1: 11:8a:c4:0f:9b:52:e7:ea:e7:8c:eb:c6:f7:04:c0: fe:d7:df:47:13:60:d7:f7:d3:f1:9f:c3:7d:8f:2c: c5:81:84:29:e4:4b:03:8f:fb:41:96:0a:9c:fc:49: e5:2e:aa:e7:9e:47:80:34:b7:81:ea:cc:90:53:c5: a3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:00:E4:D6:E7:DC:38:3A:B0:0F:BC:EA:B0:20:3D:6E:AD:B4:62:F7 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:d1:34:85:df:98:ef:ac:6b:f3:1b:fd:ad:fe:51:d3:c0:23: 4a:10:1d:ff:0a:6b:bf:d9:2f:73:8c:bb:06:29:d0:c7:ef:e5: 57:90:00:cd:a3:91:ec:d3:43:63:a7:67:13:d0:d9:58:b0:45: c0:9a:83:d0:90:d7:95:7e:93:ce:e2:c3:b5:b1:9f:76:ad:90: 06:75:33:b4:66:7a:7c:a0:89:1d:04:a4:89:79:75:8a:bb:08: ce:d1:99:37:2b:c8:07:c8:c7:d5:bd:94:28:8c:6a:8a:21:b3: 08:3e:2d:ba:f6:69:72:91:33:03:2d:c1:11:36:1b:45:f9:f0: 0c:e1:2c:a0:22:8f:1f:66:85:57:4c:7e:7a:04:c4:e9:4b:72: f3:53:38:6e:dd:b8:cb:50:45:03:7a:6d:b6:36:3c:b4:99:8b: 69:a9:1f:1b:d8:43:0c:40:c5:03:a9:27:f2:e9:93:a5:e4:2f: 11:00:c3:cb:89:18:0c:1e:dd:4e:93:f1:7b:88:f4:f5:88:2d: 83:9b:61:47:c2:ea:47:69:44:b5:0b:ac:f4:fb:6b:cd:2d:ed: 33:f7:68:c8:33:13:76:6a:d8:5d:59:96:b2:bc:d1:21:9c:7e: 92:3e:3a:19:fb:f4:57:a9:a5:4c:c6:f0:3a:20:d6:a6:e6:70: 8e:11:ca:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwODIyMjM0NTQ0WhcNMjUwODI5MjM0NTQzWjAYMRYwFAYD VQQDEw02OGE5MDEyOC0wZjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzF5eKYo54JCP6PkfkU+2XzOEN9UjqJWW5PCA9bei236vcC7hpPulPPv4lMqp T560DqgbMgfqCRXhsSPzRMCmzpJQf4Dd6ct7iUH7V6rCr4B+3WeGj5fc8E+C3+6F Fj8YgcOLqaWIDdXdkvbbEQg2/N02YQVqbphZaqSA2EKcrQ1/hiVZnp+E/m25PITh fwLQGdX39IMj5TC6PC81ufZnMCRBzxUITEwrsX7pyRnTn0YP0B1GcIfxRbZoaiF8 FfMeuaERisQPm1Ln6ueM68b3BMD+199HE2DX99Pxn8N9jyzFgYQp5EsDj/tBlgqc /EnlLqrnnkeANLeB6syQU8WjlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUA5Nbn 3Dg6sA+86rAgPW6ttGL3MB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH0TSF35jvrGvzG/2t/lHTwCNKEB3/Cmu/2S9zjLsGKdDH7+VXkADN o5Hs00Njp2cT0NlYsEXAmoPQkNeVfpPO4sO1sZ92rZAGdTO0Znp8oIkdBKSJeXWK uwjO0Zk3K8gHyMfVvZQojGqKIbMIPi269mlykTMDLcERNhtF+fAM4SygIo8fZoVX TH56BMTpS3LzUzhu3bjLUEUDem22Njy0mYtpqR8b2EMMQMUDqSfy6ZOl5C8RAMPL iRgMHt1Ok/F7iPT1iC2Dm2FHwupHaUS1C6z0+2vNLe0z92jIMxN2athdWZayvNEh nH6SPjoZ+/RXqaVMxvA6INam5nCOEcrG -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:28 2025 by rpki-client