$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: 8XsurVc2Xn/frjXtGHPlULeHjTgOSDoTlAh9nxLKSoE= Subject key identifier: 66:23:CA:C7:A9:AC:B1:5B:80:BF:CD:B4:65:54:3F:7E:CA:CE:46:FF Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: F4 Signing time: Sat 31 May 2025 04:51:55 +0000 Manifest this update: Sat 31 May 2025 04:51:55 +0000 Manifest next update: Sat 07 Jun 2025 04:51:55 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: obVWKAyiCcGEpQny//TOfAS0lv/EuwNP29+XuCzgYs0=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: May 31 04:51:55 2025 GMT Not After : Jun 7 04:51:55 2025 GMT Subject: CN=683a8aeb-be9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:2e:dc:4c:0f:6d:c1:06:23:eb:bc:f8:ff: 46:ef:09:ff:56:a6:af:ee:af:e3:ec:33:22:da:98: d1:19:a1:60:7e:2e:a2:ce:c1:4a:5e:df:fc:2e:fe: f6:38:90:45:f6:fc:84:d0:1a:6d:23:ce:72:2b:4a: 03:6a:75:c6:dd:24:06:15:0d:08:f4:d5:15:45:2b: 7d:16:7d:9a:5a:46:45:00:b1:e8:ab:72:db:6f:81: 7f:0a:c7:6a:9f:b9:b3:40:28:7c:06:74:f2:5f:80: 8e:32:b5:33:18:ad:6f:6e:d4:96:97:e3:f8:1a:8d: 60:a8:96:d7:40:7a:98:c9:54:78:47:c0:72:04:c2: 1f:54:f0:69:05:82:b5:88:c4:b9:5a:4b:11:4f:e5: 00:d7:20:f6:44:4c:d0:b7:30:54:5a:79:34:8b:6c: d9:00:d0:28:9e:80:ba:d7:aa:6b:00:da:6d:f6:66: bd:03:45:67:6a:ae:cb:2d:39:a0:49:f6:84:d4:f7: 7c:44:96:25:21:54:29:ce:cb:fb:d3:3e:82:a1:a6: 17:52:14:20:68:92:77:2b:55:18:ad:22:32:72:7a: 98:e8:fb:ce:39:f9:0d:45:e6:76:c7:1f:a0:3a:2e: a8:05:7e:0b:b0:6b:4b:76:74:e8:b5:8d:79:73:47: b3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:23:CA:C7:A9:AC:B1:5B:80:BF:CD:B4:65:54:3F:7E:CA:CE:46:FF X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:1c:d0:58:eb:f3:36:e5:95:be:7c:86:c7:fb:bc:20:28:99: ac:9e:ec:23:25:91:22:8d:99:d5:9f:b9:f8:6b:b3:96:52:8d: f2:44:b8:f2:c6:71:8e:a4:e7:67:84:9d:e1:05:67:85:3c:da: 32:91:9d:76:47:69:c9:2b:da:a5:38:eb:a2:17:8f:99:a6:8f: 6e:91:d9:4e:1b:04:fb:24:32:33:61:07:df:9d:09:bc:6e:b2: c3:50:3a:34:39:08:d1:20:6c:91:64:e8:b9:a8:58:ec:6d:d1: 36:b7:cb:67:be:b7:d8:a3:fc:42:71:21:aa:2f:8d:35:65:da: ab:c7:7e:39:f1:d3:e3:c0:b1:7f:24:3c:3c:50:54:38:78:b9: c7:47:22:10:41:9c:03:19:fc:b7:0b:48:dc:e6:a5:be:85:01: 86:f0:21:e4:5c:96:a4:59:6d:83:a3:ac:cc:0c:c4:7a:27:15: a4:c9:c6:71:4d:b9:f5:55:30:a6:b9:cb:26:54:9b:8a:1b:fb: c6:48:f6:20:5d:87:4a:b8:7f:75:00:8c:11:9d:a0:bd:51:da: 05:ba:6e:ed:3d:68:c6:54:84:8f:af:02:df:a3:f9:b0:59:64: 4a:12:3e:54:52:d9:4f:a8:c2:5b:07:0e:78:e7:1f:87:45:de: 46:8f:99:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwNTMxMDQ1MTU1WhcNMjUwNjA3MDQ1MTU1WjAYMRYwFAYD VQQDEw02ODNhOGFlYi1iZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPgu3EwPbcEGI+u8+P9G7wn/Vqav7q/j7DMi2pjRGaFgfi6izsFKXt/8Lv72 OJBF9vyE0BptI85yK0oDanXG3SQGFQ0I9NUVRSt9Fn2aWkZFALHoq3Lbb4F/Csdq n7mzQCh8BnTyX4COMrUzGK1vbtSWl+P4Go1gqJbXQHqYyVR4R8ByBMIfVPBpBYK1 iMS5WksRT+UA1yD2REzQtzBUWnk0i2zZANAonoC616prANpt9ma9A0Vnaq7LLTmg SfaE1Pd8RJYlIVQpzsv70z6CoaYXUhQgaJJ3K1UYrSIycnqY6PvOOfkNReZ2xx+g Oi6oBX4LsGtLdnTotY15c0ezbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYjysep rLFbgL/NtGVUP37Kzkb/MB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqHNBY6/M25ZW+fIbH+7wgKJmsnuwjJZEijZnVn7n4a7OWUo3yRLjy xnGOpOdnhJ3hBWeFPNoykZ12R2nJK9qlOOuiF4+Zpo9ukdlOGwT7JDIzYQffnQm8 brLDUDo0OQjRIGyRZOi5qFjsbdE2t8tnvrfYo/xCcSGqL401Zdqrx3458dPjwLF/ JDw8UFQ4eLnHRyIQQZwDGfy3C0jc5qW+hQGG8CHkXJakWW2Do6zMDMR6JxWkycZx Tbn1VTCmucsmVJuKG/vGSPYgXYdKuH91AIwRnaC9UdoFum7tPWjGVISPrwLfo/mw WWRKEj5UUtlPqMJbBw545x+HRd5Gj5mI -----END CERTIFICATE-----Generated at Sat May 31 16:59:20 2025 by rpki-client