$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft File: H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json) Hash identifier: cK9DhNxtNsCrcyZUsP6lxNreo0YtBn+phUEqCA2glHM= Subject key identifier: 08:6F:BC:56:10:5D:61:AD:3A:01:E4:98:7E:73:39:11:3C:E3:99:1D Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 Certificate issuer: /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft Manifest number: 04FC Signing time: Fri 30 May 2025 23:54:02 +0000 Manifest this update: Fri 30 May 2025 23:54:01 +0000 Manifest next update: Fri 06 Jun 2025 23:54:01 +0000 Files and hashes: 1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: kHJZe3gnviCWw3I/b1tH/ePAuWiPhuuAwuPWsT962bc=) 2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=) 3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41 Validity Not Before: May 30 23:54:01 2025 GMT Not After : Jun 6 23:54:01 2025 GMT Subject: CN=683a451a-23f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:df:71:a0:fe:b2:3c:e0:df:eb:b9:7f:6e: 40:13:5d:3a:92:6a:d6:10:17:8e:8d:e6:5f:78:a7: db:14:39:32:72:00:29:bb:b9:c8:dd:63:1c:fd:52: 9a:8d:3c:ee:87:34:64:0b:06:b5:4b:de:e2:69:47: b3:84:b5:af:47:57:2d:74:cc:a3:3f:8e:ce:47:d4: 15:a9:4d:df:63:0f:85:ce:cf:79:54:f9:e4:90:64: 39:b4:f9:12:a0:db:b2:2d:81:fb:eb:2c:92:68:5d: 54:17:a6:bf:88:45:aa:4d:ab:97:39:13:3f:6f:fc: 05:14:e4:43:9c:ce:a8:30:5c:56:67:fa:4b:44:58: b5:c2:0e:96:db:e3:8d:38:d4:50:b2:33:31:33:f4: 15:1c:02:0c:36:20:54:15:82:b5:1f:09:0e:e7:10: 86:52:bd:fa:bc:df:df:aa:5f:30:26:a0:c6:a4:cd: 62:af:b3:9c:57:d7:2d:eb:86:1b:0f:d5:d6:2a:2d: 7f:ef:d2:19:b6:80:a1:0e:17:3c:df:42:6d:d9:d7: f5:d1:55:1d:cc:98:78:94:7d:80:f7:2d:89:e6:ab: b8:42:3d:48:73:a4:63:c7:cf:87:de:9a:5d:08:97: 6f:dd:61:d9:ab:df:bc:7f:08:63:67:78:c3:04:bc: 24:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:6F:BC:56:10:5D:61:AD:3A:01:E4:98:7E:73:39:11:3C:E3:99:1D X509v3 Authority Key Identifier: keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b6:17:39:f4:d7:4f:1b:c9:1d:5a:17:e8:02:f9:0c:53:39: b0:50:5a:84:39:b6:cc:14:18:31:a5:13:4e:cc:64:9e:76:e2: d1:6e:ff:99:cc:f4:63:c9:ed:24:0b:c9:8e:d6:15:36:42:2e: 4e:7a:e4:da:b5:a9:fc:29:93:d4:dc:84:5a:59:f1:d3:4c:ec: ae:39:57:a2:24:1d:a2:c3:d3:fe:99:4c:d7:51:4c:a8:f1:a8: 78:a4:69:9c:50:b9:b4:fc:e5:ea:ed:d2:53:ad:8a:99:cf:2f: 70:2b:22:e4:6d:37:2d:62:34:a6:b7:11:08:2e:3f:bb:8e:38: 33:c2:85:84:3d:53:88:0d:3f:04:66:02:bd:70:e0:99:94:35: 24:a8:90:3b:70:0e:34:09:ec:0b:10:64:3a:02:46:19:ed:be: de:ac:b5:16:b1:67:52:98:3b:3e:15:45:25:93:23:7c:89:17: 9f:72:07:2a:b2:1e:aa:4a:ad:cf:ea:03:65:86:b5:cf:96:d9: 28:f6:31:54:a2:8f:a7:b8:90:99:08:ea:d3:fa:09:79:23:8b: c7:33:bd:be:8c:f9:2f:5d:76:75:37:77:19:d8:d5:b6:5d:4b: 58:7c:a9:99:3a:3f:5b:43:19:fd:64:28:34:8e:d5:6b:44:c6: d9:94:e8:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw RDI5NERCNDEwHhcNMjUwNTMwMjM1NDAxWhcNMjUwNjA2MjM1NDAxWjAYMRYwFAYD VQQDEw02ODNhNDUxYS0yM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrzfcaD+sjzg3+u5f25AE106kmrWEBeOjeZfeKfbFDkycgApu7nI3WMc/VKa jTzuhzRkCwa1S97iaUezhLWvR1ctdMyjP47OR9QVqU3fYw+Fzs95VPnkkGQ5tPkS oNuyLYH76yySaF1UF6a/iEWqTauXORM/b/wFFORDnM6oMFxWZ/pLRFi1wg6W2+ON ONRQsjMxM/QVHAIMNiBUFYK1HwkO5xCGUr36vN/fql8wJqDGpM1ir7OcV9ct64Yb D9XWKi1/79IZtoChDhc830Jt2df10VUdzJh4lH2A9y2J5qu4Qj1Ic6Rjx8+H3ppd CJdv3WHZq9+8fwhjZ3jDBLwkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAhvvFYQ XWGtOgHkmH5zORE845kdMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNthc59NdPG8kdWhfoAvkMUzmwUFqEObbMFBgxpRNOzGSeduLRbv+Z zPRjye0kC8mO1hU2Qi5OeuTatan8KZPU3IRaWfHTTOyuOVeiJB2iw9P+mUzXUUyo 8ah4pGmcULm0/OXq7dJTrYqZzy9wKyLkbTctYjSmtxEILj+7jjgzwoWEPVOIDT8E ZgK9cOCZlDUkqJA7cA40CewLEGQ6AkYZ7b7erLUWsWdSmDs+FUUlkyN8iRefcgcq sh6qSq3P6gNlhrXPltko9jFUoo+nuJCZCOrT+gl5I4vHM72+jPkvXXZ1N3cZ2NW2 XUtYfKmZOj9bQxn9ZCg0jtVrRMbZlOgl -----END CERTIFICATE-----Generated at Sat May 31 17:37:51 2025 by rpki-client