$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: EN486pQSLfc3tV2KMXqlglFSkaSn+pyQ7fEzphfnr0E= Subject key identifier: 05:AA:CF:69:55:99:E3:FD:28:F0:2B:CD:B3:EE:C9:30:0E:4B:2D:53 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 019D Signing time: Fri 13 Jun 2025 02:25:07 +0000 Manifest this update: Fri 13 Jun 2025 02:25:07 +0000 Manifest next update: Fri 20 Jun 2025 02:25:07 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: 6GPbedJEyGgo6yLyCIwLlQ5bvbHRyH1cOl8gLN1wSW0=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Jun 13 02:25:07 2025 GMT Not After : Jun 20 02:25:07 2025 GMT Subject: CN=684b8c03-8e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:d8:40:91:77:64:34:33:70:f8:f4:45:c3: 97:82:0e:67:32:91:b3:14:2b:31:5a:8f:ce:52:38: f7:fc:93:e8:c5:fe:09:34:ae:01:c5:30:7e:44:22: 6e:6a:d3:1a:8d:ad:74:f1:21:40:9c:25:c3:41:9c: f0:17:58:5d:6f:50:5e:da:69:28:53:41:ed:54:81: 50:76:64:5e:d0:a7:8e:88:ab:40:5d:55:77:80:0b: a8:25:02:66:66:69:a1:7a:1f:12:0d:2c:0a:9c:7c: 6b:a3:76:a7:96:1f:05:b5:b5:90:e3:ec:a4:b4:e9: 7d:49:16:a0:aa:84:96:a9:ad:f6:d8:24:69:40:7b: 39:09:8c:0e:3d:78:8b:d5:67:05:fb:d7:fb:01:55: 81:6c:02:d4:b7:30:6f:e6:c7:f7:0a:49:a0:ba:73: 95:fd:c6:53:67:92:dc:fe:01:57:4e:68:6e:d4:82: b0:c6:00:c0:56:04:24:1d:f4:10:3d:de:1f:39:6b: bb:b5:f3:13:c5:83:de:ce:15:f0:f5:70:47:50:ec: 07:50:27:45:4e:ed:f1:b3:d1:ee:24:13:3e:e9:58: d7:20:a3:9e:87:a5:eb:78:0f:35:97:e2:2e:71:fa: ff:2a:b9:9c:a7:c3:48:83:81:b3:bf:96:8a:2d:25: b9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AA:CF:69:55:99:E3:FD:28:F0:2B:CD:B3:EE:C9:30:0E:4B:2D:53 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9b:57:9d:a7:05:7e:d6:ab:de:a4:2c:0c:a1:c2:cd:db:f3: 0d:8e:c8:2f:f7:9b:3d:ea:4f:92:7d:fc:a7:82:88:f8:6a:fe: 76:a2:3d:88:37:a6:16:93:61:57:f5:c7:29:0f:04:51:6f:14: 4a:d7:8a:e0:02:3e:b7:06:59:ea:dc:50:2f:e0:47:50:00:ed: bb:43:4b:d8:70:8f:57:14:66:81:ca:a8:0b:56:c7:84:aa:40: fc:05:c7:86:7b:4b:6d:ed:6d:f3:fa:ac:f1:8e:95:65:1f:d4: 78:1f:73:35:0d:bd:6f:91:e2:08:51:5f:ba:cf:4d:7c:63:7f: e6:48:36:5a:32:1f:4d:cb:b7:88:c6:35:8f:7b:15:d5:ca:e8: a9:bb:21:01:b0:b1:3b:1f:b5:9e:54:61:f2:f8:bc:97:05:82: 41:e1:89:1e:81:c3:4a:bf:94:a4:58:c3:d3:cb:cc:ca:6d:1a: 26:63:fd:af:85:a4:d7:c3:57:3a:cb:a3:2d:fa:89:9e:b0:f8: 4a:df:0b:16:8f:15:37:b7:6f:47:5b:b5:80:70:a9:de:f3:ce: 43:cc:a5:69:ce:27:c1:70:b5:f2:23:68:23:ff:8a:1d:47:9e: cf:b5:5a:c5:95:1b:17:95:bf:b9:ef:ff:b2:ec:da:40:e7:10: 18:e5:78:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjUwNjEzMDIyNTA3WhcNMjUwNjIwMDIyNTA3WjAYMRYwFAYD VQQDEw02ODRiOGMwMy04ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OvYQJF3ZDQzcPj0RcOXgg5nMpGzFCsxWo/OUjj3/JPoxf4JNK4BxTB+RCJu atMaja108SFAnCXDQZzwF1hdb1Be2mkoU0HtVIFQdmRe0KeOiKtAXVV3gAuoJQJm Zmmheh8SDSwKnHxro3anlh8FtbWQ4+yktOl9SRagqoSWqa322CRpQHs5CYwOPXiL 1WcF+9f7AVWBbALUtzBv5sf3CkmgunOV/cZTZ5Lc/gFXTmhu1IKwxgDAVgQkHfQQ Pd4fOWu7tfMTxYPezhXw9XBHUOwHUCdFTu3xs9HuJBM+6VjXIKOeh6XreA81l+Iu cfr/Krmcp8NIg4Gzv5aKLSW5wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWqz2lV meP9KPArzbPuyTAOSy1TMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUm1edpwV+1qvepCwMocLN2/MNjsgv95s96k+Sffyngoj4av52oj2I N6YWk2FX9ccpDwRRbxRK14rgAj63Blnq3FAv4EdQAO27Q0vYcI9XFGaByqgLVseE qkD8BceGe0tt7W3z+qzxjpVlH9R4H3M1Db1vkeIIUV+6z018Y3/mSDZaMh9Ny7eI xjWPexXVyuipuyEBsLE7H7WeVGHy+LyXBYJB4YkegcNKv5SkWMPTy8zKbRomY/2v haTXw1c6y6Mt+omesPhK3wsWjxU3t29HW7WAcKne885DzKVpzifBcLXyI2gj/4od R57PtVrFlRsXlb+57/+y7NpA5xAY5Xj/ -----END CERTIFICATE-----Generated at Sat Jun 14 17:23:26 2025 by rpki-client