$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft File: H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft (raw, json) Hash identifier: 1KWoe6psKCSAyoN2u+wZGzupS7yNbTFhasVK7caKN8s= Subject key identifier: 0E:DC:CF:DE:28:CD:6F:40:2F:1E:E8:18:B3:F0:A3:47:07:71:FB:F7 Authority key identifier: 1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 Certificate issuer: /CN=A91764E1/serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft Manifest number: 011E Signing time: Thu 21 Aug 2025 04:54:59 +0000 Manifest this update: Thu 21 Aug 2025 04:54:59 +0000 Manifest next update: Thu 28 Aug 2025 04:54:59 +0000 Files and hashes: 1: H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl (hash: V4zaLpgBx6RIPL5mN7D57sc+FP2T89jYe2sGgdGzTe8=) 2: 30A1B4D0C67E11EEB4008058C4F9AE02.roa (hash: F4PEaJfd6HP1/7qcDw3hvzZGyQ0ocll5S0CbxU1lwXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=1F633F72D1C67816C2064A56E5383CD954DDC0E5 Validity Not Before: Aug 21 04:54:59 2025 GMT Not After : Aug 28 04:54:59 2025 GMT Subject: CN=68a6a6a3-3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:09:2d:e5:e0:05:90:29:40:ae:34:42:2a:d0: 7f:04:26:11:77:cf:54:c2:58:b2:77:f8:b2:92:57: 12:ba:b5:35:39:79:6d:5e:ab:86:af:6d:84:72:1c: ed:56:ac:bd:cd:2d:07:8c:d4:46:d4:b3:b1:c3:d6: 55:52:db:9e:24:c5:27:25:4c:5b:fa:53:10:af:4f: 2b:94:45:f6:bc:83:9c:f5:6c:71:d4:2c:bf:43:1c: 31:17:d3:59:b1:d1:94:0e:36:33:fb:59:57:08:a6: 49:67:bf:2d:39:85:43:aa:00:32:21:b7:60:6b:60: ea:4c:25:26:30:3f:ba:31:50:d6:c4:cf:95:68:3a: 3c:06:8d:48:43:3c:a8:16:c2:e8:73:98:bc:a4:02: 55:60:b4:8e:70:16:28:da:c6:79:bf:9d:0d:d2:f2: d7:d6:f5:2c:ac:33:5a:dd:56:90:f2:a8:24:55:02: 09:b6:ad:dc:5c:c1:11:a7:03:22:7c:2f:c3:bd:9f: 29:16:0c:e1:77:1c:65:e6:37:b5:49:07:56:ef:6a: 91:7c:14:32:f4:aa:b3:7e:51:ef:45:72:7d:45:cc: 40:8d:41:c6:d6:da:73:d4:2a:70:4b:9a:b5:5c:cd: a6:b0:ea:98:06:d8:a3:9e:61:ce:06:7f:37:89:3e: 97:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DC:CF:DE:28:CD:6F:40:2F:1E:E8:18:B3:F0:A3:47:07:71:FB:F7 X509v3 Authority Key Identifier: keyid:1F:63:3F:72:D1:C6:78:16:C2:06:4A:56:E5:38:3C:D9:54:DD:C0:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2M_ctHGeBbCBkpW5Tg82VTdwOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6B584D24C67D11EE87027B3AC4F9AE02/H2M_ctHGeBbCBkpW5Tg82VTdwOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:17:67:14:04:60:f5:d5:03:03:a5:c8:4d:6e:70:41:6d:e6: 44:1b:d5:0c:2d:83:74:11:34:96:85:95:ae:94:8d:df:99:db: 6d:5e:08:6f:4f:7e:2f:6c:ef:e0:42:1b:9f:7d:58:04:c4:1c: 3d:de:26:db:e9:4c:ad:22:88:88:5e:69:49:fb:c6:a0:2c:11: 4a:d8:46:16:ea:29:bd:57:a6:20:2d:d6:e8:be:8c:fe:bc:19: 10:19:c7:e1:c6:b1:fc:96:f8:62:87:97:ee:11:ab:fa:42:7a: 4a:be:02:aa:0d:93:67:f1:28:5b:cb:ae:fe:7e:59:86:b6:29: 4e:d2:53:8b:31:bb:98:e0:7d:de:00:c2:43:68:bc:d6:0f:63: 72:83:ea:01:d1:d2:88:d0:45:05:ac:73:13:e4:aa:83:b8:72: d6:8a:19:f5:f5:fe:8d:38:ba:d6:e3:19:19:0d:4d:c7:96:ff: e8:48:5e:25:e8:cf:43:85:48:d7:46:81:de:51:67:65:cc:c1: c0:49:eb:02:a6:9e:46:5c:64:73:73:ae:27:49:d7:27:92:e4: cc:22:1c:57:e9:60:06:b8:d2:86:97:8b:fc:43:5b:85:e6:f8: 5a:45:70:f5:59:31:20:77:7c:13:5e:85:51:58:5c:63:04:27: 67:61:a9:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDFGNjMzRjcyRDFDNjc4MTZDMjA2NEE1NkU1MzgzQ0Q5 NTREREMwRTUwHhcNMjUwODIxMDQ1NDU5WhcNMjUwODI4MDQ1NDU5WjAYMRYwFAYD VQQDEw02OGE2YTZhMy0zYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gkt5eAFkClArjRCKtB/BCYRd89Uwliyd/iyklcSurU1OXltXquGr22Echzt Vqy9zS0HjNRG1LOxw9ZVUtueJMUnJUxb+lMQr08rlEX2vIOc9Wxx1Cy/QxwxF9NZ sdGUDjYz+1lXCKZJZ78tOYVDqgAyIbdga2DqTCUmMD+6MVDWxM+VaDo8Bo1IQzyo FsLoc5i8pAJVYLSOcBYo2sZ5v50N0vLX1vUsrDNa3VaQ8qgkVQIJtq3cXMERpwMi fC/DvZ8pFgzhdxxl5je1SQdW72qRfBQy9KqzflHvRXJ9RcxAjUHG1tpz1CpwS5q1 XM2msOqYBtijnmHOBn83iT6XbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7cz94o zW9ALx7oGLPwo0cHcfv3MB8GA1UdIwQYMBaAFB9jP3LRxngWwgZKVuU4PNlU3cDl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82QjU4NEQyNEM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VCYkNCa3BXNVRnODJWVGR3 T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyTV9jdEhHZUJiQ0JrcFc1VGc4MlZUZHdPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82QjU4NEQyNEM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9IMk1fY3RIR2VC YkNCa3BXNVRnODJWVGR3T1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeF2cUBGD11QMDpchNbnBBbeZEG9UMLYN0ETSWhZWulI3fmdttXghv T34vbO/gQhuffVgExBw93ibb6UytIoiIXmlJ+8agLBFK2EYW6im9V6YgLdbovoz+ vBkQGcfhxrH8lvhih5fuEav6QnpKvgKqDZNn8Shby67+flmGtilO0lOLMbuY4H3e AMJDaLzWD2Nyg+oB0dKI0EUFrHMT5KqDuHLWihn19f6NOLrW4xkZDU3Hlv/oSF4l 6M9DhUjXRoHeUWdlzMHASesCpp5GXGRzc64nSdcnkuTMIhxX6WAGuNKGl4v8Q1uF 5vhaRXD1WTEgd3wTXoVRWFxjBCdnYam2 -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:51 2025 by rpki-client