$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: MuhAPXz0nlZYy22XErUgX5aVaonqp4LuwFyzqAQWRCo= Subject key identifier: AD:C7:BA:04:0D:14:08:F7:56:53:BC:52:8C:F8:D7:FB:12:B7:8D:B6 Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 050F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 0503 Signing time: Thu 12 Jun 2025 23:16:16 +0000 Manifest this update: Thu 12 Jun 2025 23:16:15 +0000 Manifest next update: Thu 19 Jun 2025 23:16:15 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: 8/+jedmgTD6kuwjc4pGXO+7vV15nAfKbh0bhP9zrNzY=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=) 3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1295 (0x50f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Jun 12 23:16:15 2025 GMT Not After : Jun 19 23:16:15 2025 GMT Subject: CN=684b5fbf-667a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:b2:21:b1:a4:fb:ad:08:aa:29:4d:48:09: 16:a1:9e:ce:e0:83:b9:b5:a9:c9:02:e2:ee:1c:46: 0b:22:50:37:11:aa:76:52:83:f5:90:6a:a5:ea:54: 8d:a7:2a:6b:46:32:17:cb:0b:11:a3:4b:dc:91:d4: d0:a7:39:88:f4:c4:ee:22:c6:55:f5:0c:f3:a9:1b: 03:5d:e0:b3:09:cc:8e:f0:4f:5c:5a:bc:64:06:72: e1:66:8b:43:1d:f4:02:a6:28:e6:c1:9e:b5:7c:2f: 42:d7:48:1b:cf:3c:5f:80:6e:38:1e:ce:19:e6:a7: 06:9c:25:ab:aa:31:dc:88:10:ec:6e:d5:a3:11:59: b5:65:03:5a:a5:2a:75:98:84:02:e4:78:c2:45:49: f4:d8:ee:35:21:e1:74:cc:c4:4b:4b:7e:78:e1:66: 7b:22:a2:23:d3:ec:9a:96:4f:bb:0c:27:3c:b6:cd: 48:57:97:88:fe:23:d3:28:27:0d:99:ae:c6:34:f8: 9f:00:88:dc:6a:9d:b2:7a:00:f9:4b:78:13:a4:f6: c3:6c:d9:2c:11:aa:e0:d0:af:b7:9c:f8:34:fd:76: bd:16:5a:66:89:3e:d7:9b:2a:26:b2:68:f5:45:c1: b6:4d:ad:bb:3d:0b:a9:05:7d:c1:27:3b:51:bf:a8: e7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C7:BA:04:0D:14:08:F7:56:53:BC:52:8C:F8:D7:FB:12:B7:8D:B6 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e6:d8:f8:8e:b5:2a:f0:f5:da:43:40:12:87:ae:78:64:c9: ab:d5:1b:9d:08:ec:98:2a:28:20:b9:3b:04:fe:48:d2:19:db: d9:9d:db:36:68:1f:65:82:e1:31:98:62:96:e9:c8:ad:c3:42: 05:5a:af:ad:72:dd:91:89:04:12:33:10:d6:6d:9a:f7:a1:07: 2e:1c:ac:b4:08:69:e0:62:fd:02:fe:82:de:9b:b9:3b:bc:dc: 62:73:5f:d8:fb:0d:2e:cd:e6:04:c4:e2:13:a7:e9:00:b6:ac: ab:19:91:fd:62:81:3a:eb:7d:6b:4d:32:aa:da:1b:62:52:20: 5c:02:bc:cc:80:23:bb:83:a1:69:06:8f:b8:97:38:e2:95:4a: b4:5d:72:c4:e4:9b:29:ac:6e:8d:b9:65:88:ff:99:78:e5:97: b6:4e:54:33:9f:20:41:59:fe:b1:f5:1b:50:15:f7:28:4a:f1: 91:ab:be:6e:fc:ad:13:71:bf:b1:d3:45:cd:41:48:11:f4:69: bd:63:90:63:90:17:a3:ea:55:90:5d:52:6a:2b:2f:00:ee:b3: 32:8e:f7:9e:96:70:79:8d:54:a4:9c:35:f0:61:b0:b8:b5:14: ea:01:09:8d:5b:34:77:c0:6c:31:00:ff:94:70:45:3a:6a:c6: b0:28:d7:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwNjEyMjMxNjE1WhcNMjUwNjE5MjMxNjE1WjAYMRYwFAYD VQQDEw02ODRiNWZiZi02NjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W6yIbGk+60IqilNSAkWoZ7O4IO5tanJAuLuHEYLIlA3Eap2UoP1kGql6lSN pyprRjIXywsRo0vckdTQpzmI9MTuIsZV9QzzqRsDXeCzCcyO8E9cWrxkBnLhZotD HfQCpijmwZ61fC9C10gbzzxfgG44Hs4Z5qcGnCWrqjHciBDsbtWjEVm1ZQNapSp1 mIQC5HjCRUn02O41IeF0zMRLS3544WZ7IqIj0+yalk+7DCc8ts1IV5eI/iPTKCcN ma7GNPifAIjcap2yegD5S3gTpPbDbNksEarg0K+3nPg0/Xa9FlpmiT7Xmyomsmj1 RcG2Ta27PQupBX3BJztRv6jnzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3HugQN FAj3VlO8Uoz41/sSt422MB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC15tj4jrUq8PXaQ0ASh654ZMmr1RudCOyYKigguTsE/kjSGdvZnds2 aB9lguExmGKW6citw0IFWq+tct2RiQQSMxDWbZr3oQcuHKy0CGngYv0C/oLem7k7 vNxic1/Y+w0uzeYExOITp+kAtqyrGZH9YoE6631rTTKq2htiUiBcArzMgCO7g6Fp Bo+4lzjilUq0XXLE5JsprG6NuWWI/5l45Ze2TlQznyBBWf6x9RtQFfcoSvGRq75u /K0Tcb+x00XNQUgR9Gm9Y5BjkBej6lWQXVJqKy8A7rMyjveelnB5jVSknDXwYbC4 tRTqAQmNWzR3wGwxAP+UcEU6asawKNeO -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:17 2025 by rpki-client