$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: F/MKGQAhAZfDp4Bk0lllU1hTLEFM1eUhvRRp6RQuun8= Subject key identifier: 54:7C:4F:EA:C2:30:46:4B:7A:90:83:EA:6C:05:7A:D3:DD:64:F6:A6 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 011B Signing time: Fri 15 Aug 2025 05:18:13 +0000 Manifest this update: Fri 15 Aug 2025 05:18:13 +0000 Manifest next update: Fri 22 Aug 2025 05:18:12 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: 8Qwzdv09+7/D+pJ+cNSm3VOda3Fax6AmM5tzD9AuUFg=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 22 Aug 2025 05:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Aug 15 05:18:13 2025 GMT Not After : Aug 22 05:18:12 2025 GMT Subject: CN=689ec315-3dc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:ba:ba:8d:06:c6:9f:2f:d4:aa:b8:80:ec: 41:5c:4a:d8:44:18:67:29:18:50:fa:71:70:f6:94: 08:22:76:a6:be:7b:bc:62:73:26:2c:e8:6d:d3:7a: c7:43:5a:d8:1e:37:35:12:c7:db:2f:19:53:4c:e0: 4c:79:44:db:d0:20:d6:ae:8a:8f:72:10:5c:90:71: c4:cb:57:0f:a7:b6:3e:01:4f:91:b2:f2:f9:9c:00: 86:23:d2:c2:cc:0e:f6:64:68:bf:b8:1d:ee:cc:f3: 9b:4f:0d:25:2a:1c:15:41:b9:5d:76:94:75:74:4a: c3:06:00:80:a9:63:15:ae:f7:b5:b3:0e:2d:ca:36: 94:0a:6c:78:89:47:c7:c3:3c:2b:04:fa:d5:43:f3: b8:f9:d9:6d:e7:ca:c2:eb:1b:f0:5c:30:32:12:6f: 7b:1e:bc:7f:73:42:3e:a2:ac:00:33:12:e9:da:19: aa:42:d1:c7:07:9d:bb:b7:ee:43:04:63:7a:7b:ed: 09:35:22:9f:6e:c1:f3:51:32:4c:cd:cf:78:6b:69: f0:7f:ef:8f:4b:4a:27:c9:e6:4b:bb:d8:dc:49:69: db:96:73:48:ef:2c:4e:e5:a7:d3:0e:b2:57:0c:27: 54:4b:80:23:97:f4:c4:17:a3:7c:b8:c8:c0:2e:f8: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7C:4F:EA:C2:30:46:4B:7A:90:83:EA:6C:05:7A:D3:DD:64:F6:A6 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cf:c8:20:fe:a1:e8:08:74:09:9e:10:16:b9:a6:84:bf:cd: ed:c4:a7:6c:a2:ec:3c:d0:76:f2:6a:21:ab:63:70:2f:f2:d4: 51:17:96:55:89:16:a7:74:f0:26:a0:6d:97:40:aa:4a:0e:48: bd:92:bb:75:f8:ce:65:45:22:3e:a7:ac:19:66:f1:50:ea:68: c2:e8:70:af:18:ec:73:46:9d:87:77:fb:de:68:1e:16:93:85: 31:ba:68:bd:3d:92:46:a2:4e:a1:55:9b:5f:89:e3:c3:a3:71: 1d:7d:92:39:79:3e:9a:2f:c0:4d:68:a0:a8:0a:1a:73:fd:08: 02:a7:d8:2b:fd:c2:78:8d:11:1f:52:20:15:5f:87:ad:99:10: 2b:c0:e2:1f:df:f6:84:4c:c0:56:6f:91:99:f9:8c:35:33:5e: fd:94:25:df:4d:91:a2:76:19:56:a1:be:06:1b:86:63:b4:68: b8:fc:d0:98:2b:20:36:58:da:5b:68:0d:dd:b7:71:6a:16:b1: 93:95:7c:22:15:19:77:6b:ea:0d:96:f9:a5:ba:b7:d5:4c:32: a8:8d:8b:f8:21:44:10:9d:ae:fd:70:e7:2b:32:27:56:b0:f2: e2:55:18:15:b9:05:48:d2:49:ef:82:a4:7a:23:e2:0e:7f:8b: 64:b6:21:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwODE1MDUxODEzWhcNMjUwODIyMDUxODEyWjAYMRYwFAYD VQQDEw02ODllYzMxNS0zZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KK6uo0Gxp8v1Kq4gOxBXErYRBhnKRhQ+nFw9pQIInamvnu8YnMmLOht03rH Q1rYHjc1EsfbLxlTTOBMeUTb0CDWroqPchBckHHEy1cPp7Y+AU+RsvL5nACGI9LC zA72ZGi/uB3uzPObTw0lKhwVQblddpR1dErDBgCAqWMVrve1sw4tyjaUCmx4iUfH wzwrBPrVQ/O4+dlt58rC6xvwXDAyEm97Hrx/c0I+oqwAMxLp2hmqQtHHB527t+5D BGN6e+0JNSKfbsHzUTJMzc94a2nwf++PS0onyeZLu9jcSWnblnNI7yxO5afTDrJX DCdUS4Ajl/TEF6N8uMjALvhg5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFR8T+rC MEZLepCD6mwFetPdZPamMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGz8gg/qHoCHQJnhAWuaaEv83txKdsouw80HbyaiGrY3Av8tRRF5ZV iRandPAmoG2XQKpKDki9krt1+M5lRSI+p6wZZvFQ6mjC6HCvGOxzRp2Hd/veaB4W k4Uxumi9PZJGok6hVZtfiePDo3EdfZI5eT6aL8BNaKCoChpz/QgCp9gr/cJ4jREf UiAVX4etmRArwOIf3/aETMBWb5GZ+Yw1M179lCXfTZGidhlWob4GG4ZjtGi4/NCY KyA2WNpbaA3dt3FqFrGTlXwiFRl3a+oNlvmlurfVTDKojYv4IUQQna79cOcrMidW sPLiVRgVuQVI0knvgqR6I+IOf4tktiGs -----END CERTIFICATE-----Generated at Sat Aug 16 08:19:35 2025 by rpki-client