$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: j6sDgWxGohdYSTZoFT+xVs1KsHzZ4VXR3oy+FbkDFvM= Subject key identifier: 52:C4:59:57:66:94:5B:F0:F5:27:17:8B:7C:13:2D:09:05:47:46:A7 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 01AB Signing time: Wed 13 Aug 2025 03:39:29 +0000 Manifest this update: Wed 13 Aug 2025 03:39:29 +0000 Manifest next update: Wed 20 Aug 2025 03:39:29 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: sB9jcBrkR9gCmtQ1KAQEvYhq9exJ/ktvUZcUvZxXl4c=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Aug 13 03:39:29 2025 GMT Not After : Aug 20 03:39:29 2025 GMT Subject: CN=689c08f1-530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:f3:0c:55:a2:de:13:a1:7e:13:b4:9f:ed: aa:5b:f1:ac:b8:20:f7:9a:57:53:30:e7:24:c0:ab: 35:95:1f:73:1a:af:71:f6:e9:74:ba:70:80:59:81: d4:f7:39:7c:3d:54:e4:24:43:7e:ff:18:de:5f:01: 15:42:b4:a8:68:19:a7:fc:6e:1d:c0:57:91:29:1d: 49:c6:ae:3f:df:f6:6f:91:4f:44:07:21:bc:be:c7: 72:2c:f4:f9:e1:c7:cf:e8:a2:d8:fa:4a:23:ff:1a: 1f:e0:af:38:c6:82:ef:31:89:1c:dd:89:e0:84:54: 7e:94:60:3d:9a:0e:d3:93:1c:61:23:71:f1:f8:80: cb:ec:02:6a:58:48:23:85:da:a1:da:54:cd:1d:84: 56:7b:a5:6e:e0:b8:70:1e:b9:33:56:0a:32:85:08: fe:73:fb:c9:f8:12:9f:a9:8f:4a:1c:d0:d5:e2:1b: 37:18:16:78:5e:63:ff:61:64:bb:c8:cc:42:d7:f8: 5d:e6:ac:bf:cd:d9:7b:df:43:92:e0:f5:9b:45:dd: e2:9c:e0:ea:22:15:c6:31:f9:5c:4e:cf:3f:47:51: 4b:06:a2:19:b0:14:44:ef:93:b1:d0:52:14:07:34: 64:98:76:00:a8:cc:39:e0:01:57:0c:bd:7a:ab:01: 52:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C4:59:57:66:94:5B:F0:F5:27:17:8B:7C:13:2D:09:05:47:46:A7 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:2c:01:b5:d9:69:e6:b7:a0:ec:79:99:e1:3a:03:f8:32:00: 99:6a:ce:54:53:cc:67:e8:23:cf:66:7e:a6:1f:d5:5a:e9:bd: 04:46:62:34:4c:91:79:90:b3:04:a8:a5:0b:e6:27:30:f7:aa: d9:9a:94:22:a2:fe:9e:fd:ac:21:9a:a6:8b:60:72:f5:62:27: a3:67:8e:63:40:49:03:08:38:11:86:2c:3f:83:4b:e6:c1:e9: 7e:1f:c6:c1:46:9d:eb:d9:6f:ff:46:3e:03:35:8c:02:94:b2: 20:e6:58:3f:a7:53:db:01:41:97:a6:a6:8e:1e:f6:e7:2b:87: ec:9d:ff:74:a3:26:a8:54:ad:2e:8f:8a:33:94:27:cf:7e:a2: 18:ae:d5:53:d5:9a:aa:ca:9f:e2:a4:5d:db:60:bb:3a:68:a6: e6:4d:f3:16:fc:f2:b0:ee:f3:c3:65:a5:65:3b:e0:8d:ba:af: 17:24:f1:df:38:b2:98:03:46:41:b1:cd:16:4e:0e:10:a9:07: ac:98:41:b1:af:3b:e2:fe:93:6e:0b:5c:58:ea:81:cd:2d:17: 2f:eb:30:42:6b:ac:17:fa:f9:c0:fb:f2:44:10:fd:72:3d:f2: 82:09:a1:c0:b6:ac:23:2c:2a:1a:d2:52:b4:60:21:69:11:2b: e2:de:3a:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwODEzMDMzOTI5WhcNMjUwODIwMDMzOTI5WjAYMRYwFAYD VQQDEw02ODljMDhmMS01MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv27zDFWi3hOhfhO0n+2qW/GsuCD3mldTMOckwKs1lR9zGq9x9ul0unCAWYHU 9zl8PVTkJEN+/xjeXwEVQrSoaBmn/G4dwFeRKR1Jxq4/3/ZvkU9EByG8vsdyLPT5 4cfP6KLY+koj/xof4K84xoLvMYkc3YnghFR+lGA9mg7TkxxhI3Hx+IDL7AJqWEgj hdqh2lTNHYRWe6Vu4LhwHrkzVgoyhQj+c/vJ+BKfqY9KHNDV4hs3GBZ4XmP/YWS7 yMxC1/hd5qy/zdl730OS4PWbRd3inODqIhXGMflcTs8/R1FLBqIZsBRE75Ox0FIU BzRkmHYAqMw54AFXDL16qwFS0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLEWVdm lFvw9ScXi3wTLQkFR0anMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQLAG12Wnmt6DseZnhOgP4MgCZas5UU8xn6CPPZn6mH9Va6b0ERmI0 TJF5kLMEqKUL5icw96rZmpQiov6e/awhmqaLYHL1YiejZ45jQEkDCDgRhiw/g0vm wel+H8bBRp3r2W//Rj4DNYwClLIg5lg/p1PbAUGXpqaOHvbnK4fsnf90oyaoVK0u j4ozlCfPfqIYrtVT1Zqqyp/ipF3bYLs6aKbmTfMW/PKw7vPDZaVlO+CNuq8XJPHf OLKYA0ZBsc0WTg4QqQesmEGxrzvi/pNuC1xY6oHNLRcv6zBCa6wX+vnA+/JEEP1y PfKCCaHAtqwjLCoa0lK0YCFpESvi3jpf -----END CERTIFICATE-----Generated at Wed Aug 13 05:30:17 2025 by rpki-client