$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: huiqgNnTrNw1ibqc0k1aI0rgMFctqtEyMJ09H4L/PSQ= Subject key identifier: 2D:8D:A5:5B:0F:BF:C1:8E:C3:94:B4:F8:D2:FC:EF:8B:55:D8:C9:D4 Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 04F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 04EB Signing time: Thu 24 Apr 2025 23:31:46 +0000 Manifest this update: Thu 24 Apr 2025 23:31:46 +0000 Manifest next update: Thu 01 May 2025 23:31:46 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: 4JGi+7j6woD+6NS2mREXrMTtZ6VMDypK2AwnK4NA01c=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=) 3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1271 (0x4f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: Apr 24 23:31:46 2025 GMT Not After : May 1 23:31:46 2025 GMT Subject: CN=680ac9e2-d2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:40:b6:3b:1b:f2:c6:1d:43:c6:aa:5d:e4: 66:42:e0:18:2d:a9:0b:51:28:68:80:ff:41:86:3a: a1:83:57:de:0a:65:a5:3f:95:58:fb:a8:51:1a:80: d8:a3:59:4c:3c:20:7c:74:67:02:ff:29:31:79:72: 9b:13:0e:f0:40:95:18:fd:28:d4:f3:85:13:61:f6: 44:1a:a8:34:c5:e6:4a:1f:ba:68:9f:e2:5d:5c:3f: 73:b9:8c:71:be:d6:eb:e2:8d:f5:bf:ad:44:ba:62: ca:18:39:26:a3:73:1e:c9:42:06:85:3d:28:8a:6c: 4a:d5:89:26:b8:52:8c:75:36:23:a1:d3:b6:e8:62: 14:52:df:7c:c2:9e:68:d1:42:f8:81:ef:9b:a5:d2: 41:dd:1a:1e:ed:30:a1:72:3c:13:8f:ee:66:ad:77: f9:96:40:26:2e:b0:ff:e0:53:47:06:21:14:84:2b: 5b:da:09:e4:01:75:6d:2d:ca:b6:ed:be:25:39:38: 64:99:00:b5:ff:28:9f:0d:26:39:b6:a2:9a:fd:98: 67:a9:05:91:42:e9:6d:42:88:f9:cb:01:47:63:cd: 3e:09:3d:68:77:d7:0e:40:dd:21:c2:3e:ad:4b:81: 31:6d:12:8b:46:2d:aa:99:70:5f:48:b5:2a:e7:35: a1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:A5:5B:0F:BF:C1:8E:C3:94:B4:F8:D2:FC:EF:8B:55:D8:C9:D4 X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:89:e1:b0:3d:34:f8:6e:45:67:d6:a1:8e:a8:e9:3c:5d:3f: 69:34:95:a3:56:25:17:ae:1a:1b:1e:77:bf:b9:e3:35:05:7c: fb:9f:cb:75:c5:4f:bf:10:ea:6e:e6:e0:52:82:cc:06:2d:a8: 19:f6:c4:e1:f2:83:05:4f:fc:23:0a:78:6f:f0:e7:98:43:ad: 72:b7:53:ff:f2:31:ae:6f:d3:f9:83:4c:e8:20:76:e0:e9:b0: c0:e7:cc:d6:dc:ef:ea:fb:81:ef:f4:26:01:c2:af:bc:a9:5e: 19:e3:8d:75:c0:0c:b0:26:17:4d:a7:57:b1:55:55:f4:e1:f9: 00:a2:b7:c9:f8:40:e6:f0:d3:15:78:fa:df:83:36:5a:2a:15: 55:57:34:1d:5d:03:df:7e:65:42:6a:91:07:42:8c:39:72:1d: a2:98:e0:13:d5:d9:59:24:d5:5b:cd:29:96:cc:fc:03:97:33: 96:0d:ec:df:80:f4:0f:ef:20:d2:af:c5:42:36:60:70:bc:87: 3d:2a:53:b3:0e:4b:69:61:6a:09:32:94:66:48:4a:cb:29:17: 7d:86:04:69:14:34:a6:14:0a:fe:89:ce:a9:f4:f7:43:00:fd: c3:33:00:ce:a1:8b:99:3c:32:b2:18:ba:ee:73:88:e7:6f:dd: 9a:8c:06:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwNDI0MjMzMTQ2WhcNMjUwNTAxMjMzMTQ2WjAYMRYwFAYD VQQDEw02ODBhYzllMi1kMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvL1Atjsb8sYdQ8aqXeRmQuAYLakLUShogP9Bhjqhg1feCmWlP5VY+6hRGoDY o1lMPCB8dGcC/ykxeXKbEw7wQJUY/SjU84UTYfZEGqg0xeZKH7pon+JdXD9zuYxx vtbr4o31v61EumLKGDkmo3MeyUIGhT0oimxK1YkmuFKMdTYjodO26GIUUt98wp5o 0UL4ge+bpdJB3Roe7TChcjwTj+5mrXf5lkAmLrD/4FNHBiEUhCtb2gnkAXVtLcq2 7b4lOThkmQC1/yifDSY5tqKa/ZhnqQWRQultQoj5ywFHY80+CT1od9cOQN0hwj6t S4ExbRKLRi2qmXBfSLUq5zWhIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2NpVsP v8GOw5S0+NL874tV2MnUMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEieGwPTT4bkVn1qGOqOk8XT9pNJWjViUXrhobHne/ueM1BXz7n8t1 xU+/EOpu5uBSgswGLagZ9sTh8oMFT/wjCnhv8OeYQ61yt1P/8jGub9P5g0zoIHbg 6bDA58zW3O/q+4Hv9CYBwq+8qV4Z4411wAywJhdNp1exVVX04fkAorfJ+EDm8NMV ePrfgzZaKhVVVzQdXQPffmVCapEHQow5ch2imOAT1dlZJNVbzSmWzPwDlzOWDezf gPQP7yDSr8VCNmBwvIc9KlOzDktpYWoJMpRmSErLKRd9hgRpFDSmFAr+ic6p9PdD AP3DMwDOoYuZPDKyGLruc4jnb92ajAYR -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:40 2025 by rpki-client