$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: eoyaA95W0o/CdTPJSTGh/Grr8yyxCw1Av7bwL6soQqo= Subject key identifier: 91:81:8B:51:DD:2D:44:99:95:EB:6C:B2:4C:5A:BA:B9:ED:E5:75:F1 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 018C Signing time: Fri 13 Jun 2025 02:32:24 +0000 Manifest this update: Fri 13 Jun 2025 02:32:24 +0000 Manifest next update: Fri 20 Jun 2025 02:32:24 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: YISZsIzAaekrjUgqE5IOSQJKAbsUkLJ1/CwqMViVHDY=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Jun 13 02:32:24 2025 GMT Not After : Jun 20 02:32:24 2025 GMT Subject: CN=684b8db8-f74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:ee:75:65:d9:9f:36:5b:f4:5e:07:26:63: 65:1d:69:0a:51:8a:eb:a4:b4:6b:2a:d5:f8:fc:ac: cb:0e:f4:11:16:fd:b2:c7:1c:65:a4:20:20:b8:6b: 7d:54:9e:ae:ef:ce:ac:43:df:ff:8f:7d:03:ff:0a: bd:99:2e:21:bc:71:3b:db:b0:6f:19:f1:56:b5:fa: e5:36:e7:58:c0:8a:64:fe:b4:a1:2a:40:bd:97:64: 06:82:df:bf:47:d8:4a:5c:4a:02:85:cd:58:36:00: 55:41:8b:50:3f:fd:c2:94:31:38:43:3c:d9:fc:03: 78:de:3e:2a:24:91:0e:d9:fe:c3:df:ab:14:fd:a7: 8a:64:ac:24:11:51:c9:c9:fa:3f:28:2d:bf:aa:cf: 6e:3a:65:e5:9d:52:42:cc:31:99:3b:30:30:63:7f: 9b:e0:a9:a8:c7:1b:cf:ce:ab:40:3b:32:9c:f6:6a: f4:d3:f9:1c:90:db:98:6d:41:56:e4:4f:92:42:07: 7c:c1:04:18:da:cb:03:b5:d0:10:96:4b:0d:b1:23: 17:a5:87:e9:16:c1:f5:21:74:7c:9b:04:ac:e3:b5: f5:a2:ac:16:11:f0:bb:44:b6:5c:c5:54:1e:c3:d4: 91:bc:6f:44:7f:6b:ea:e7:c5:4c:39:9b:cb:81:35: cf:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:81:8B:51:DD:2D:44:99:95:EB:6C:B2:4C:5A:BA:B9:ED:E5:75:F1 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:81:06:12:3a:77:52:0d:fc:a4:1c:22:a6:84:c9:0a:39:ed: 50:14:33:fb:13:85:27:8e:a1:ea:c0:6b:6b:c0:99:69:97:9f: 81:6b:f3:d3:79:47:2a:b3:ea:54:71:21:94:04:16:26:78:a8: 7d:6b:bf:73:f5:fb:86:92:12:f0:74:1f:7e:b9:d0:27:8a:e6: 8a:76:f6:a1:7d:fd:5d:b8:d9:ed:27:04:e6:67:e1:a0:32:8d: 8d:0d:b4:3a:e1:df:63:1f:b5:ba:29:7c:53:e1:87:d5:e1:48: 19:36:3c:00:7f:8f:9d:ea:75:7e:42:76:4a:a2:68:21:35:6f: 2e:be:eb:d4:ef:5b:c4:23:74:0b:da:e3:e3:f1:f1:a4:77:11: e5:63:c0:10:fa:08:1f:a2:ac:84:88:90:ad:af:b0:1f:fe:e7: ba:39:da:b0:72:d6:57:f6:64:e5:9c:5e:7d:20:5f:95:16:68: d2:49:8e:d5:d0:e6:10:37:b9:8c:f0:6b:64:d0:c7:e3:fa:45: 87:90:11:b5:d0:cc:48:bc:b6:e4:76:89:94:4e:64:42:16:49: 79:d2:59:b0:5b:78:fd:87:b0:a0:54:c4:cb:46:78:c3:9f:64: 0d:40:b1:e7:f1:41:f1:3e:5f:66:84:bd:6c:b8:e9:20:e4:39: e9:74:9b:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwNjEzMDIzMjI0WhcNMjUwNjIwMDIzMjI0WjAYMRYwFAYD VQQDEw02ODRiOGRiOC1mNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYLudWXZnzZb9F4HJmNlHWkKUYrrpLRrKtX4/KzLDvQRFv2yxxxlpCAguGt9 VJ6u786sQ9//j30D/wq9mS4hvHE727BvGfFWtfrlNudYwIpk/rShKkC9l2QGgt+/ R9hKXEoChc1YNgBVQYtQP/3ClDE4QzzZ/AN43j4qJJEO2f7D36sU/aeKZKwkEVHJ yfo/KC2/qs9uOmXlnVJCzDGZOzAwY3+b4KmoxxvPzqtAOzKc9mr00/kckNuYbUFW 5E+SQgd8wQQY2ssDtdAQlksNsSMXpYfpFsH1IXR8mwSs47X1oqwWEfC7RLZcxVQe w9SRvG9Ef2vq58VMOZvLgTXPOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGBi1Hd LUSZletsskxaurnt5XXxMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmgQYSOndSDfykHCKmhMkKOe1QFDP7E4UnjqHqwGtrwJlpl5+Ba/PT eUcqs+pUcSGUBBYmeKh9a79z9fuGkhLwdB9+udAniuaKdvahff1duNntJwTmZ+Gg Mo2NDbQ64d9jH7W6KXxT4YfV4UgZNjwAf4+d6nV+QnZKomghNW8uvuvU71vEI3QL 2uPj8fGkdxHlY8AQ+ggfoqyEiJCtr7Af/ue6OdqwctZX9mTlnF59IF+VFmjSSY7V 0OYQN7mM8Gtk0Mfj+kWHkBG10MxIvLbkdomUTmRCFkl50lmwW3j9h7CgVMTLRnjD n2QNQLHn8UHxPl9mhL1suOkg5DnpdJsC -----END CERTIFICATE-----Generated at Sat Jun 14 19:15:41 2025 by rpki-client