$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: VyuJlAgpDUYPuYnn5gSGotPHqPrZLTYUrr2b6xQnKn4= Subject key identifier: 4B:F2:06:65:94:8D:D6:C3:E2:B6:5F:46:30:9A:5E:FF:F3:3B:63:04 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 01E6 Signing time: Wed 05 Nov 2025 02:46:28 +0000 Manifest this update: Wed 05 Nov 2025 02:46:28 +0000 Manifest next update: Wed 12 Nov 2025 02:46:28 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: z5tQQRugPImGkTiSc3oFNbO7z9vmoMSDMvs1ucV3iPo=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: L3qkCPmXp0iJV192Ab/fphVf55ttABMSsjRwG8i7X3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Nov 5 02:46:28 2025 GMT Not After : Nov 12 02:46:28 2025 GMT Subject: CN=690aba84-2701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:0a:2f:f8:af:28:38:03:e5:90:3b:e1:05: 9d:38:ec:65:89:85:2f:cd:8e:de:8e:45:a3:16:34: af:46:04:3a:1f:da:9b:ea:46:9c:e3:82:74:2c:9d: 4c:95:f9:62:67:e2:b9:d7:83:28:83:27:e1:34:d4: 8e:6d:bb:2c:67:fc:5d:d0:b8:67:4f:43:d7:ed:b4: fe:95:87:e3:ea:d0:52:15:b8:d5:48:fa:67:cb:9b: 68:43:0e:a6:56:a0:07:d2:ab:99:57:2a:c3:91:8a: 23:9b:aa:54:73:bf:75:b3:2b:c2:5d:bd:14:c3:6e: 97:f4:41:0a:3b:8f:d9:df:94:21:3b:03:e9:d3:70: 71:41:8b:aa:7c:c0:d6:d4:f6:56:15:fa:9c:34:fb: 68:96:4f:0f:df:f1:26:58:13:a6:9d:40:1a:b2:37: 2b:8b:a8:fe:e7:8c:37:31:dd:71:64:9e:17:ec:9b: 94:8e:e9:74:53:b6:c5:e6:85:8e:c7:c5:22:ce:b5: f5:f2:16:0e:43:cf:54:f4:a6:50:c0:fb:dd:6c:24: 7b:0d:af:1a:90:c9:6e:76:6c:46:cf:92:1e:31:8b: 61:b8:1c:47:19:54:6a:63:e8:b1:81:e2:72:09:b1: 34:0d:ee:89:f9:62:0b:2c:9e:61:94:7a:83:62:08: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F2:06:65:94:8D:D6:C3:E2:B6:5F:46:30:9A:5E:FF:F3:3B:63:04 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:2b:88:97:24:04:0e:24:2b:17:f5:4d:c2:1f:63:0f:e9:af: 80:5b:b1:f2:3e:78:10:7c:4a:36:2c:9c:f4:89:9a:cc:e4:6b: 07:7c:09:6a:e5:fe:4b:7f:da:e9:b9:09:c3:8d:3e:e7:4c:0c: f4:23:ed:84:b2:7a:49:43:06:1d:3f:78:1f:73:44:e1:66:31: 44:17:a2:34:20:d0:82:52:33:3b:44:ce:11:0c:0d:0e:58:e3: f0:0c:e7:de:e1:12:ea:35:ba:9c:e6:71:d9:c5:8a:9a:32:af: 1e:5e:6b:bd:6b:65:ff:3d:de:aa:15:1f:bd:5d:5d:99:ad:b5: 4f:51:97:4f:22:a6:ed:a6:6e:10:31:a2:6b:4f:7a:23:39:bb: 9e:7d:c5:67:c8:83:49:d4:80:db:a8:69:3c:04:be:55:d4:fe: 3c:9d:26:49:69:55:b0:d1:d6:2f:81:cb:b2:24:78:6e:eb:f3: 4e:cc:36:70:0c:db:b1:8f:a1:89:ac:c7:63:fe:90:bf:6a:36: 2b:2a:b2:a4:6f:40:c7:42:06:3e:d8:57:e7:99:42:84:15:eb: 3d:b8:d2:aa:ed:d4:41:94:7a:f5:e1:93:e6:16:0d:46:ee:94: 14:ec:0f:3a:15:d9:30:df:2a:d4:0e:fe:85:c8:e9:22:56:92: a4:5d:8f:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjUxMTA1MDI0NjI4WhcNMjUxMTEyMDI0NjI4WjAYMRYwFAYD VQQDEw02OTBhYmE4NC0yNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAud0KL/ivKDgD5ZA74QWdOOxliYUvzY7ejkWjFjSvRgQ6H9qb6kac44J0LJ1M lfliZ+K514MogyfhNNSObbssZ/xd0LhnT0PX7bT+lYfj6tBSFbjVSPpny5toQw6m VqAH0quZVyrDkYojm6pUc791syvCXb0Uw26X9EEKO4/Z35QhOwPp03BxQYuqfMDW 1PZWFfqcNPtolk8P3/EmWBOmnUAasjcri6j+54w3Md1xZJ4X7JuUjul0U7bF5oWO x8UizrX18hYOQ89U9KZQwPvdbCR7Da8akMludmxGz5IeMYthuBxHGVRqY+ixgeJy CbE0De6J+WILLJ5hlHqDYgjBwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEvyBmWU jdbD4rZfRjCaXv/zO2MEMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3K4iXJAQOJCsX9U3CH2MP6a+AW7HyPngQfEo2LJz0iZrM5GsHfAlq 5f5Lf9rpuQnDjT7nTAz0I+2EsnpJQwYdP3gfc0ThZjFEF6I0INCCUjM7RM4RDA0O WOPwDOfe4RLqNbqc5nHZxYqaMq8eXmu9a2X/Pd6qFR+9XV2ZrbVPUZdPIqbtpm4Q MaJrT3ojObuefcVnyINJ1IDbqGk8BL5V1P48nSZJaVWw0dYvgcuyJHhu6/NOzDZw DNuxj6GJrMdj/pC/ajYrKrKkb0DHQgY+2FfnmUKEFes9uNKq7dRBlHr14ZPmFg1G 7pQU7A86Fdkw3yrUDv6FyOkiVpKkXY8B -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:54 2025 by rpki-client