$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: ukHb+IWQuEHOZMnYSgQUy+uziy+g+9EuHRuKnh6X7KY= Subject key identifier: 20:5E:2F:5A:57:63:C3:BA:13:49:08:4A:19:20:1C:6F:7C:8F:EF:0B Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 0174 Signing time: Fri 25 Apr 2025 02:55:59 +0000 Manifest this update: Fri 25 Apr 2025 02:55:58 +0000 Manifest next update: Fri 02 May 2025 02:55:58 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: yWsLV1DGjZFDuXOged7w37eL2BMS8HxDt3e86FWnS7g=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:55:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Apr 25 02:55:58 2025 GMT Not After : May 2 02:55:58 2025 GMT Subject: CN=680af9bf-3d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:48:96:0d:b1:5d:36:ee:db:2b:5a:05:6b: aa:fc:ec:96:50:dc:a1:12:b1:41:f7:12:55:c4:24: a1:b2:ae:67:a0:c7:ba:11:f2:de:ef:98:9c:27:c1: fe:33:c5:02:ed:3a:48:03:4a:c4:02:23:c9:bd:3d: fa:e9:53:c2:d9:bb:36:db:9b:93:d0:2c:33:60:92: 06:81:9d:f5:46:ea:cc:cb:ee:af:93:68:c5:22:8e: 07:24:d6:dc:1e:7d:51:dd:23:6b:94:aa:da:a8:0b: b0:77:00:e6:3e:28:db:55:fd:73:5c:c6:d1:5f:23: d4:2c:c0:93:8a:8b:42:4f:09:ed:52:a8:3d:44:ef: 60:b6:0d:17:2c:2f:a4:13:ff:16:2d:fd:c6:be:e2: 0a:cb:54:bb:e2:65:b2:b6:07:fa:1b:ce:b9:9c:e7: c6:2d:40:94:54:29:2e:ef:68:6b:41:0b:bf:b7:7e: 9f:a2:f5:78:62:d8:87:be:8f:e5:89:bd:f1:96:78: c5:a8:09:11:7f:b4:ee:56:c8:ef:5b:6a:03:1d:4a: 1d:2c:22:6f:4e:10:0f:06:9d:76:bb:69:a9:6a:a0: 5f:b2:c5:36:96:4e:9a:cd:6d:66:1b:8a:c5:f5:d6: 65:d2:61:cb:ef:14:bf:7e:56:82:ae:94:da:70:a4: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5E:2F:5A:57:63:C3:BA:13:49:08:4A:19:20:1C:6F:7C:8F:EF:0B X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:35:eb:c1:35:d7:9d:a3:2e:ef:9a:60:5f:ec:fe:0b:f6:f3: 29:40:43:0f:b8:9d:88:d0:61:9d:1b:b6:1c:98:e5:c4:5c:d0: 0a:19:fa:00:c5:2e:b8:67:23:67:a2:85:9c:53:ab:29:6a:0d: 06:d9:66:60:21:5b:43:74:7a:ad:6d:ba:c9:a4:8d:3b:ad:0e: ad:c2:b1:a5:f3:af:4d:2b:85:ed:8b:63:d0:f4:65:87:03:0e: d4:26:82:3f:a0:8d:af:99:bf:0a:12:0b:dc:b1:e1:91:80:5a: e1:0f:4b:ff:f7:28:17:f5:93:19:a6:3b:c8:ee:6a:5a:04:76: a9:22:d6:3f:d2:bd:d2:7b:33:b8:0d:7a:11:8d:0f:f1:51:88: 90:ec:3d:0c:e8:f4:d2:f1:1f:72:28:08:a6:90:de:02:4a:da: 90:86:fd:66:d7:8e:b5:ce:5a:21:3e:e6:7b:82:49:e9:15:53: cf:31:a4:3c:e5:76:c4:ef:51:40:e2:7a:d1:f7:82:37:16:a7: 47:63:df:79:1f:9b:b6:d7:62:fb:47:e3:fe:a8:ee:56:66:e5: 2a:07:a1:20:f5:86:43:97:34:44:6a:ca:ae:61:1a:73:52:9b: 56:35:25:93:a5:24:9e:9b:6b:e6:4b:27:0d:3d:25:5d:1c:fc: 56:68:2d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwNDI1MDI1NTU4WhcNMjUwNTAyMDI1NTU4WjAYMRYwFAYD VQQDEw02ODBhZjliZi0zZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6xIlg2xXTbu2ytaBWuq/OyWUNyhErFB9xJVxCShsq5noMe6EfLe75icJ8H+ M8UC7TpIA0rEAiPJvT366VPC2bs225uT0CwzYJIGgZ31RurMy+6vk2jFIo4HJNbc Hn1R3SNrlKraqAuwdwDmPijbVf1zXMbRXyPULMCTiotCTwntUqg9RO9gtg0XLC+k E/8WLf3GvuIKy1S74mWytgf6G865nOfGLUCUVCku72hrQQu/t36fovV4YtiHvo/l ib3xlnjFqAkRf7TuVsjvW2oDHUodLCJvThAPBp12u2mpaqBfssU2lk6azW1mG4rF 9dZl0mHL7xS/flaCrpTacKTcoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBeL1pX Y8O6E0kIShkgHG98j+8LMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzNevBNdedoy7vmmBf7P4L9vMpQEMPuJ2I0GGdG7YcmOXEXNAKGfoA xS64ZyNnooWcU6spag0G2WZgIVtDdHqtbbrJpI07rQ6twrGl869NK4Xti2PQ9GWH Aw7UJoI/oI2vmb8KEgvcseGRgFrhD0v/9ygX9ZMZpjvI7mpaBHapItY/0r3SezO4 DXoRjQ/xUYiQ7D0M6PTS8R9yKAimkN4CStqQhv1m1461zlohPuZ7gknpFVPPMaQ8 5XbE71FA4nrR94I3FqdHY995H5u212L7R+P+qO5WZuUqB6Eg9YZDlzREasquYRpz UptWNSWTpSSem2vmSycNPSVdHPxWaC2n -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:35 2025 by rpki-client