$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: ePpJw11ei8yseAfduUVMsXPTlepV9MPfbz1fSMI+/aU= Subject key identifier: 56:6D:5F:70:AC:FF:BB:1F:5A:76:AC:4C:7F:19:B5:5A:DD:60:10:13 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: FF Signing time: Sat 21 Jun 2025 04:15:34 +0000 Manifest this update: Sat 21 Jun 2025 04:15:33 +0000 Manifest next update: Sat 28 Jun 2025 04:15:33 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: PcPROPwXxmQu0vox7KxyxN4uWV/WMBh3kMiYoighv3E=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 04:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Jun 21 04:15:33 2025 GMT Not After : Jun 28 04:15:33 2025 GMT Subject: CN=685631e5-dbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:1e:26:25:65:d3:c6:d6:06:b5:8f:a2:4c: 42:ac:8f:7d:17:4b:0d:2a:5d:f3:69:80:ce:a1:e0: 55:5d:d7:29:f8:69:a5:22:04:18:5f:25:fe:85:14: 4b:61:b3:57:74:a0:49:b4:2b:21:35:ee:4f:6a:d0: 25:b2:12:43:0f:d9:bf:88:4a:c3:04:3f:f2:52:ac: fe:f8:f3:3b:04:ae:b8:f0:e3:27:18:6b:6e:e8:c3: ff:d2:76:e3:a8:c4:d1:c2:cf:df:d7:a3:73:93:ef: 49:46:0f:d3:ba:c7:d6:ae:35:a7:01:d9:5b:aa:34: 4d:88:0a:9a:83:6b:c5:d2:69:28:66:b8:2a:48:38: 97:b3:40:e2:01:44:0e:7b:ae:a1:0d:18:98:d5:19: dd:da:df:9b:5f:9a:29:ed:a7:0e:f9:35:85:9b:de: 74:f4:e2:95:3c:37:c5:7d:1a:2f:73:c3:f1:e5:cb: 42:64:37:ca:b7:0d:55:9a:8c:80:ff:3f:ad:62:2e: ef:a9:d9:05:3a:94:02:a5:1a:43:c5:01:a2:53:3f: e4:47:c6:45:d3:40:f4:16:b3:ed:f1:b0:53:63:eb: 28:d3:61:f9:0c:c3:b0:02:71:a1:0c:d8:4a:6b:c4: 7e:63:32:d7:75:83:0e:54:04:ef:c2:4b:d4:c0:b0: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:6D:5F:70:AC:FF:BB:1F:5A:76:AC:4C:7F:19:B5:5A:DD:60:10:13 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1d:d2:71:b5:ab:4a:d3:57:1b:1c:51:33:c4:d4:9b:7f:b0: 8c:01:2b:3a:85:82:6c:83:33:2b:97:ba:26:45:eb:a7:43:13: 12:f4:26:a5:2d:c2:87:03:0e:d7:1e:99:78:06:a2:fa:34:db: 4e:d5:98:83:ba:72:78:2b:5a:95:7c:19:97:6f:27:7c:0e:61: 4a:e9:46:09:99:74:78:7b:ba:15:5b:51:e1:0d:59:b0:1b:6a: d9:b6:5b:ed:df:8f:f1:33:53:fe:e4:a6:39:06:bc:d9:e2:fb: a9:e2:2b:94:75:74:d4:94:e4:46:61:6e:60:de:c7:94:c1:e7: e6:a9:32:a3:5d:28:06:44:49:71:15:da:89:22:77:c7:94:33: d7:dd:9c:a9:7e:13:d0:ad:1a:10:b1:53:47:13:b5:df:a1:87: 02:56:1f:0f:7c:90:0b:ba:0d:66:06:f9:2f:c7:b9:7a:78:33: 3a:c9:d8:29:c9:a6:bc:fa:b7:0f:15:60:3f:f1:d1:48:97:40: 09:af:c1:35:2f:ce:f8:c4:39:88:16:93:27:de:fb:ce:63:f1: 5a:13:68:68:8f:03:62:fa:4d:3f:ea:72:cb:a5:6f:18:bd:31: e5:e1:16:e9:a5:5f:12:b6:30:1f:fd:c3:dd:1d:4f:3b:47:c1: 8f:7a:cf:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwNjIxMDQxNTMzWhcNMjUwNjI4MDQxNTMzWjAYMRYwFAYD VQQDEw02ODU2MzFlNS1kYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20oeJiVl08bWBrWPokxCrI99F0sNKl3zaYDOoeBVXdcp+GmlIgQYXyX+hRRL YbNXdKBJtCshNe5PatAlshJDD9m/iErDBD/yUqz++PM7BK648OMnGGtu6MP/0nbj qMTRws/f16Nzk+9JRg/TusfWrjWnAdlbqjRNiAqag2vF0mkoZrgqSDiXs0DiAUQO e66hDRiY1Rnd2t+bX5op7acO+TWFm9509OKVPDfFfRovc8Px5ctCZDfKtw1VmoyA /z+tYi7vqdkFOpQCpRpDxQGiUz/kR8ZF00D0FrPt8bBTY+so02H5DMOwAnGhDNhK a8R+YzLXdYMOVATvwkvUwLBLmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZtX3Cs /7sfWnasTH8ZtVrdYBATMB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdHdJxtatK01cbHFEzxNSbf7CMASs6hYJsgzMrl7omReunQxMS9Cal LcKHAw7XHpl4BqL6NNtO1ZiDunJ4K1qVfBmXbyd8DmFK6UYJmXR4e7oVW1HhDVmw G2rZtlvt34/xM1P+5KY5BrzZ4vup4iuUdXTUlORGYW5g3seUwefmqTKjXSgGRElx FdqJInfHlDPX3ZypfhPQrRoQsVNHE7XfoYcCVh8PfJALug1mBvkvx7l6eDM6ydgp yaa8+rcPFWA/8dFIl0AJr8E1L874xDmIFpMn3vvOY/FaE2hojwNi+k0/6nLLpW8Y vTHl4RbppV8StjAf/cPdHU87R8GPes+y -----END CERTIFICATE-----Generated at Mon Jun 23 03:14:27 2025 by rpki-client