$ rpki-client -vvf rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft File: chHmi1fNzfTtqDzwtGI7dpP2NDo.mft (raw, json) Hash identifier: NAtJBx9TPQPbPCfSXV478k0esEs8Q+OQg1XiWH1Ln6c= Subject key identifier: 53:9D:85:CF:BF:E3:E8:F9:DE:FA:1D:40:6E:CD:3A:9E:2E:5B:C7:45 Authority key identifier: 72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A Certificate issuer: /CN=A91638DD/serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Certificate serial: 0186 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft Manifest number: 0183 Signing time: Fri 25 Apr 2025 02:47:15 +0000 Manifest this update: Fri 25 Apr 2025 02:47:15 +0000 Manifest next update: Fri 02 May 2025 02:47:15 +0000 Files and hashes: 1: chHmi1fNzfTtqDzwtGI7dpP2NDo.crl (hash: iI3iTo+fN+JbvA/7vdvh+Hb1Zs3+SsBJUEYzFTEjanE=) 2: 3FA4288CD29B11ED88E16742C4F9AE02.roa (hash: IKV0Cgq2EuODSbPKQtSmxiMFKVMR6YDH69S9tC4UdAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 390 (0x186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91638DD, serialNumber=7211E68B57CDCDF4EDA83CF0B4623B7693F6343A Validity Not Before: Apr 25 02:47:15 2025 GMT Not After : May 2 02:47:15 2025 GMT Subject: CN=680af7b3-dba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:6c:df:f4:0d:13:dc:6e:9c:97:92:67:c4:6c: 3b:24:cd:cd:82:b0:aa:ed:4b:c4:13:11:cf:e4:88: d1:e5:ef:3a:87:6c:47:f4:23:34:2c:8e:5c:c6:9f: 08:e5:c3:02:5d:60:ef:f7:e7:60:e1:9a:c4:c5:5a: 4d:65:21:89:b7:42:91:f5:8d:c3:74:2a:b7:5c:d1: ac:37:c6:2f:b2:87:74:39:8c:9f:43:44:68:1f:89: 67:f7:7b:f6:8f:a6:df:df:d7:6d:c0:57:f8:64:2f: 93:36:30:25:52:e5:de:f1:99:1b:3d:f4:9f:af:8a: 0a:d3:07:1a:a7:01:72:78:60:16:1d:aa:cf:aa:49: 92:ae:32:1c:5c:cf:d1:d1:44:1d:f2:b3:0b:70:a7: 2e:f4:dc:72:ee:ee:9c:0a:85:7a:0d:31:2c:65:1d: 8f:03:32:80:c7:18:91:97:b2:8e:f7:da:07:d8:09: 7f:d4:22:08:e7:b5:5b:b9:4a:a8:ba:d3:aa:49:5a: 3f:a5:77:14:64:dd:98:ec:5f:90:0b:51:c0:68:b1: 77:1f:61:61:cf:8a:83:1c:43:82:70:da:0e:21:4a: a6:fa:82:fd:34:0d:06:c6:9a:16:ad:68:0e:27:53: e7:34:09:6c:dd:60:25:70:08:d9:ab:ce:ee:98:0e: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:85:CF:BF:E3:E8:F9:DE:FA:1D:40:6E:CD:3A:9E:2E:5B:C7:45 X509v3 Authority Key Identifier: keyid:72:11:E6:8B:57:CD:CD:F4:ED:A8:3C:F0:B4:62:3B:76:93:F6:34:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chHmi1fNzfTtqDzwtGI7dpP2NDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91638DD/C8870CAED29711EDB0858B3DC4F9AE02/chHmi1fNzfTtqDzwtGI7dpP2NDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:5e:ea:36:d6:c0:53:3b:0e:5c:b9:e2:be:af:ff:73:58:31: db:4d:e1:d9:a3:cd:25:b5:d9:9f:ed:94:90:f5:6c:77:b6:0a: 07:21:da:9a:aa:e0:a9:8f:c7:4e:73:e5:de:fd:3f:7e:20:2e: be:a5:66:22:fc:9d:de:0c:d0:7c:18:c3:14:a1:d5:44:f4:71: 61:db:ae:86:47:7e:80:76:29:85:f7:de:d3:17:4b:1a:92:76: 9c:ab:30:b3:16:14:bf:90:fb:85:e4:85:f4:d9:54:4e:42:47: c2:b7:2e:11:52:f0:f4:26:d2:06:26:e3:14:c2:c2:e8:b1:23: 19:c3:ca:bc:1a:fd:1c:57:d8:ac:e3:ac:e5:59:c9:bc:38:ca: cc:ae:78:73:a5:a1:87:3a:de:e4:7c:dc:67:e4:f7:44:44:02: 69:3f:25:cb:57:57:80:23:c7:32:09:f6:79:c3:f1:f3:db:0c: 02:0a:c3:a5:d6:a6:13:eb:3a:38:2b:be:4d:ba:30:65:8b:7a: 44:4e:4a:c5:8f:c6:f3:1a:74:1f:3b:ef:d9:f8:58:f3:88:1b: f2:6c:58:bf:e6:ef:23:c6:f3:65:fd:6c:4b:5a:39:fa:c3:50: 52:8d:7d:23:6b:18:bc:35:a7:be:a8:05:e9:0b:c8:fb:80:3c: cd:41:c2:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM4REQxMTAvBgNVBAUTKDcyMTFFNjhCNTdDRENERjRFREE4M0NGMEI0NjIzQjc2 OTNGNjM0M0EwHhcNMjUwNDI1MDI0NzE1WhcNMjUwNTAyMDI0NzE1WjAYMRYwFAYD VQQDEw02ODBhZjdiMy1kYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Gzf9A0T3G6cl5JnxGw7JM3NgrCq7UvEExHP5IjR5e86h2xH9CM0LI5cxp8I 5cMCXWDv9+dg4ZrExVpNZSGJt0KR9Y3DdCq3XNGsN8Yvsod0OYyfQ0RoH4ln93v2 j6bf39dtwFf4ZC+TNjAlUuXe8ZkbPfSfr4oK0wcapwFyeGAWHarPqkmSrjIcXM/R 0UQd8rMLcKcu9Nxy7u6cCoV6DTEsZR2PAzKAxxiRl7KO99oH2Al/1CII57VbuUqo utOqSVo/pXcUZN2Y7F+QC1HAaLF3H2Fhz4qDHEOCcNoOIUqm+oL9NA0GxpoWrWgO J1PnNAls3WAlcAjZq87umA7nPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOdhc+/ 4+j53vodQG7NOp4uW8dFMB8GA1UdIwQYMBaAFHIR5otXzc307ag88LRiO3aT9jQ6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzhERC9DODg3MENBRUQy OTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpmVHRxRHp3dEdJN2RwUDJO RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoSG1pMWZOemZUdHFEend0R0k3ZHBQMk5Eby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzhERC9DODg3MENBRUQyOTcxMUVEQjA4NThCM0RDNEY5QUUwMi9jaEhtaTFmTnpm VHRxRHp3dEdJN2RwUDJORG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGXuo21sBTOw5cueK+r/9zWDHbTeHZo80ltdmf7ZSQ9Wx3tgoHIdqa quCpj8dOc+Xe/T9+IC6+pWYi/J3eDNB8GMMUodVE9HFh266GR36AdimF997TF0sa knacqzCzFhS/kPuF5IX02VROQkfCty4RUvD0JtIGJuMUwsLosSMZw8q8Gv0cV9is 46zlWcm8OMrMrnhzpaGHOt7kfNxn5PdERAJpPyXLV1eAI8cyCfZ5w/Hz2wwCCsOl 1qYT6zo4K75NujBli3pETkrFj8bzGnQfO+/Z+FjziBvybFi/5u8jxvNl/WxLWjn6 w1BSjX0jaxi8Nae+qAXpC8j7gDzNQcIc -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:53 2025 by rpki-client