$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: +jLsE/9cg8/f7HuhhJV70b1kfjAFD+sgF+CiaVLAlF4= Subject key identifier: 0A:D5:2D:B1:D9:D5:8C:06:83:FA:88:C1:08:AD:FD:C9:18:2E:BD:B3 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 0144 Signing time: Wed 05 Nov 2025 04:29:37 +0000 Manifest this update: Wed 05 Nov 2025 04:29:36 +0000 Manifest next update: Wed 12 Nov 2025 04:29:36 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: RDAIZXHKFaE4XNpepuM9oc4jraZooWaI3RH8DIJCpbM=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Nov 5 04:29:36 2025 GMT Not After : Nov 12 04:29:36 2025 GMT Subject: CN=690ad2b1-e6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:45:4c:c2:4e:12:97:83:41:b0:57:63:40: 0b:1f:9e:62:ed:62:f8:3f:54:5e:d2:2c:6d:bf:c0: c6:23:f4:4b:6c:02:0b:91:70:6d:e9:49:4e:77:8f: 7e:7a:55:86:f5:9d:8b:55:58:03:03:54:b1:3f:37: dc:53:e1:8f:a3:3f:6f:bb:9b:b0:1c:11:57:5e:32: 5f:ad:7a:2e:7e:17:28:67:a8:a0:51:6e:f5:79:3b: 2c:84:6f:63:1b:7d:9f:2d:e1:7a:1d:3a:30:9d:bc: 17:51:68:d4:2e:fc:c5:96:20:31:95:7c:09:2f:bd: 50:13:a3:fa:20:d3:ab:b0:a4:e1:fa:dc:9a:b0:b5: 83:18:39:f1:e4:2b:d3:09:69:08:e4:db:75:7a:a5: 8f:43:17:d8:ee:b9:41:a0:0a:11:6f:cc:03:1b:12: 02:d6:24:dd:6e:c8:ec:aa:02:85:2a:3c:a0:c4:46: d7:62:b6:f9:ce:18:81:ca:ea:01:ee:cc:8d:77:dd: 32:07:c4:8f:8b:3f:43:b8:9c:2b:09:d8:67:b8:dc: ec:8c:26:5b:55:24:cd:bc:a7:7c:9a:c4:9c:2a:45: 69:ae:87:a2:3f:2f:b2:3e:17:51:f5:57:5a:2a:d1: 11:63:78:20:8e:17:b8:59:16:1c:1f:7a:ec:ad:fa: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:2D:B1:D9:D5:8C:06:83:FA:88:C1:08:AD:FD:C9:18:2E:BD:B3 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:07:7b:5f:85:5c:dc:11:ed:6d:52:bb:dd:e8:5d:00:29:8d: 51:1b:fe:1a:95:e1:62:68:15:91:11:3a:b5:00:df:d7:08:b6: 83:2d:70:35:91:b6:38:51:d8:c4:36:98:9b:87:2b:b3:53:9f: 80:b8:7c:89:1e:e5:61:04:9a:3c:08:6f:ed:91:62:dc:26:e5: cb:70:2b:64:53:99:62:f2:dd:a2:f9:61:44:e2:f0:7f:70:fd: 69:42:5e:f4:16:08:35:64:95:7e:77:8b:f5:bb:1d:24:41:26: 2d:c8:b8:8a:3e:0c:82:2d:be:74:60:8b:d7:0c:e8:ae:10:db: 49:c1:3c:3d:bf:cd:92:70:e0:cc:0b:0e:05:6b:af:d4:e3:24: 3a:f8:c4:2f:34:a8:60:09:56:2c:b8:7a:14:ea:a9:80:14:0b: d3:5b:76:4a:81:a2:18:5d:44:f9:14:1b:bf:cb:6a:6f:6d:fd: bc:38:22:41:62:90:e4:9d:38:a5:0a:fd:f7:94:ea:30:dd:eb: b7:01:23:fe:b0:aa:d4:95:e4:b2:2d:8a:b4:f9:af:82:66:31: 9f:7f:b0:da:d6:7c:82:cf:d7:48:eb:17:09:ab:25:9f:36:41: 69:1e:77:7b:d9:f6:e4:73:32:16:f2:69:84:71:5e:84:b2:65: c8:69:26:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUxMTA1MDQyOTM2WhcNMjUxMTEyMDQyOTM2WjAYMRYwFAYD VQQDEw02OTBhZDJiMS1lNmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszFFTMJOEpeDQbBXY0ALH55i7WL4P1Re0ixtv8DGI/RLbAILkXBt6UlOd49+ elWG9Z2LVVgDA1SxPzfcU+GPoz9vu5uwHBFXXjJfrXoufhcoZ6igUW71eTsshG9j G32fLeF6HTownbwXUWjULvzFliAxlXwJL71QE6P6INOrsKTh+tyasLWDGDnx5CvT CWkI5Nt1eqWPQxfY7rlBoAoRb8wDGxIC1iTdbsjsqgKFKjygxEbXYrb5zhiByuoB 7syNd90yB8SPiz9DuJwrCdhnuNzsjCZbVSTNvKd8msScKkVproeiPy+yPhdR9Vda KtERY3ggjhe4WRYcH3rsrfojgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArVLbHZ 1YwGg/qIwQit/ckYLr2zMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFB3tfhVzcEe1tUrvd6F0AKY1RG/4aleFiaBWRETq1AN/XCLaDLXA1 kbY4UdjENpibhyuzU5+AuHyJHuVhBJo8CG/tkWLcJuXLcCtkU5li8t2i+WFE4vB/ cP1pQl70Fgg1ZJV+d4v1ux0kQSYtyLiKPgyCLb50YIvXDOiuENtJwTw9v82ScODM Cw4Fa6/U4yQ6+MQvNKhgCVYsuHoU6qmAFAvTW3ZKgaIYXUT5FBu/y2pvbf28OCJB YpDknTilCv33lOow3eu3ASP+sKrUleSyLYq0+a+CZjGff7Da1nyCz9dI6xcJqyWf NkFpHnd72fbkczIW8mmEcV6EsmXIaSZD -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:18 2025 by rpki-client