$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: 6WIJ48xKM7aapV429mLst3RyKFmnnkxjp7stztc/U+E= Subject key identifier: E1:55:FC:5C:87:18:C1:10:4A:11:DA:B9:CF:AD:A4:0B:91:8F:A1:25 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 01B8 Signing time: Tue 05 Aug 2025 03:33:06 +0000 Manifest this update: Tue 05 Aug 2025 03:33:05 +0000 Manifest next update: Tue 12 Aug 2025 03:33:05 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: BZtWj/ubAjdGo4NxalVKS0HdjbKahbdOVR33PbxMiVg=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Aug 5 03:33:05 2025 GMT Not After : Aug 12 03:33:05 2025 GMT Subject: CN=68917b71-e2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:2e:87:eb:b6:01:66:68:60:5f:05:97:6f: c5:be:d1:c7:fb:e2:63:3b:30:15:97:d9:26:8d:c7: f6:b8:cb:4b:f7:9e:39:07:2b:f4:32:d5:10:1d:8d: da:5d:af:c9:32:18:b8:d8:bf:2a:08:02:ed:00:41: d2:24:94:aa:76:67:26:42:86:e0:3f:e4:cb:38:8c: a5:97:eb:19:79:54:d2:f2:13:d2:26:b0:5a:48:b2: 74:56:ba:ad:c8:30:d5:b9:13:e7:f1:c1:31:ea:32: 10:c8:7b:88:dd:53:79:44:64:95:f2:7a:a6:e1:12: 03:1f:b6:ee:ca:17:ef:ca:ea:0a:69:a1:ec:af:16: 62:a6:8e:fd:ab:d9:cd:55:4b:00:44:44:d8:5d:d5: 03:f2:f8:9f:53:6a:d7:75:31:43:b6:b2:03:d4:b3: 3a:e3:6f:49:66:af:6f:36:82:de:7d:dd:45:d3:3e: 84:62:1d:81:b3:d2:ce:28:3a:92:83:19:60:22:78: e2:dd:d2:5c:56:07:f2:bf:df:ff:86:20:e7:59:60: c0:1b:77:ec:51:95:a8:53:a2:e2:ad:75:51:4b:f8: b6:54:b1:f1:1f:1f:91:15:28:a7:a9:ae:bb:a9:4f: 22:d5:1a:a8:20:1e:03:65:bf:36:a0:59:f6:92:7d: d7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:55:FC:5C:87:18:C1:10:4A:11:DA:B9:CF:AD:A4:0B:91:8F:A1:25 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7b:b0:d8:e1:c1:d2:ca:db:af:c7:d1:3f:21:4d:3f:e2:b6: 55:0e:1f:27:44:72:1a:bc:b0:3f:bd:6a:2f:c3:f3:ed:24:10: ae:e8:8f:29:00:c7:64:a4:c2:c1:e3:ce:57:4d:32:e7:88:5c: 20:fc:51:f0:1f:c6:c3:1f:03:b0:7e:65:c2:c7:8e:42:62:06: 56:d6:46:0c:7a:d1:c7:d8:a5:74:b0:74:0c:d1:ba:1c:57:70: 6b:3c:92:54:a1:fb:e0:7c:ab:53:a1:fa:25:87:05:58:8d:fb: b4:3e:80:5f:84:e3:03:f9:60:87:d5:bd:87:c0:b2:7c:41:56: 18:36:a9:a9:05:92:d5:c3:87:4a:1f:1b:22:44:3d:c2:5c:45: b3:73:0c:90:ca:c1:a6:26:b8:8e:44:41:81:7c:ad:01:a1:47: 1a:40:6b:3c:4d:e7:63:68:b3:ef:9c:c3:42:eb:e5:22:20:23: 55:4f:30:e1:77:ea:4d:e7:4f:f3:83:d9:54:1a:e3:cc:3a:01: 8c:e2:b0:02:60:a5:12:9a:d8:12:10:af:ac:a6:b7:a2:60:48: fc:0c:8c:ce:d1:5e:f5:5c:32:4b:fc:89:06:08:fa:ca:6f:a1: a0:50:72:fe:42:09:3e:6d:6e:94:bb:ce:3c:e7:b2:f6:b9:0d: 68:15:57:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjUwODA1MDMzMzA1WhcNMjUwODEyMDMzMzA1WjAYMRYwFAYD VQQDEw02ODkxN2I3MS1lMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaouh+u2AWZoYF8Fl2/FvtHH++JjOzAVl9kmjcf2uMtL9545Byv0MtUQHY3a Xa/JMhi42L8qCALtAEHSJJSqdmcmQobgP+TLOIyll+sZeVTS8hPSJrBaSLJ0Vrqt yDDVuRPn8cEx6jIQyHuI3VN5RGSV8nqm4RIDH7buyhfvyuoKaaHsrxZipo79q9nN VUsARETYXdUD8vifU2rXdTFDtrID1LM6429JZq9vNoLefd1F0z6EYh2Bs9LOKDqS gxlgInji3dJcVgfyv9//hiDnWWDAG3fsUZWoU6LirXVRS/i2VLHxHx+RFSinqa67 qU8i1RqoIB4DZb82oFn2kn3XeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFV/FyH GMEQShHauc+tpAuRj6ElMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANe7DY4cHSytuvx9E/IU0/4rZVDh8nRHIavLA/vWovw/PtJBCu6I8p AMdkpMLB485XTTLniFwg/FHwH8bDHwOwfmXCx45CYgZW1kYMetHH2KV0sHQM0boc V3BrPJJUofvgfKtTofolhwVYjfu0PoBfhOMD+WCH1b2HwLJ8QVYYNqmpBZLVw4dK HxsiRD3CXEWzcwyQysGmJriOREGBfK0BoUcaQGs8TedjaLPvnMNC6+UiICNVTzDh d+pN50/zg9lUGuPMOgGM4rACYKUSmtgSEK+spreiYEj8DIzO0V71XDJL/IkGCPrK b6GgUHL+Qgk+bW6Uu84857L2uQ1oFVel -----END CERTIFICATE-----Generated at Wed Aug 6 04:03:55 2025 by rpki-client