$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: bfGbNjymVAAIF7FEnhJXhKQp8W0m9R76rL/cQOtbRNY= Subject key identifier: 8A:E9:4F:17:46:6E:AD:4B:67:1B:00:DD:11:F6:A9:B9:38:95:8E:B3 Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 0191 Signing time: Fri 25 Apr 2025 02:39:09 +0000 Manifest this update: Fri 25 Apr 2025 02:39:09 +0000 Manifest next update: Fri 02 May 2025 02:39:09 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: 3c8xp/kY0TPBlFn7LV6VrLoVqQvhrdumzOOIwUfIPKM=) 2: 1E925A56BEE111ED83037109C4F9AE02.roa (hash: TBhcbssExgqFxRfQy6kh4THFtAGhrBLT/uB9I75u5Cc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: Apr 25 02:39:09 2025 GMT Not After : May 2 02:39:09 2025 GMT Subject: CN=680af5cd-2dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:85:4d:78:28:3a:7b:dc:6a:d6:36:f5:dd: 09:fb:c2:9c:3e:8e:27:96:f0:f9:da:55:de:f0:59: a2:1d:61:87:aa:5c:1a:5e:72:b0:52:fa:8a:27:42: 9f:43:1f:0c:36:37:62:07:a4:3f:3a:db:e2:55:22: 06:d1:47:94:38:86:55:15:13:9f:6c:d0:fc:11:3f: 76:58:46:d6:03:97:42:43:0d:ff:8a:58:b6:a8:29: 6c:fa:43:88:be:af:d6:34:b5:c7:21:4a:45:44:64: d3:4e:5e:f6:91:3c:18:e4:15:5b:93:c2:b9:74:0b: b2:47:b1:2d:6e:64:30:89:66:e6:b0:9b:f2:12:ac: e3:ff:65:02:24:bc:87:8e:35:8e:50:f4:cf:76:ab: 6a:25:e9:35:98:c1:80:f7:55:1e:32:8e:45:6a:07: 46:72:fc:d1:b5:10:d2:a6:b7:f5:fd:48:c4:f3:be: cd:17:07:d2:7e:27:e8:9e:f9:3e:e5:7b:69:7c:84: f3:72:55:ac:55:57:23:fe:25:e1:cc:ed:f4:9f:f9: a5:2d:b9:c1:fd:2e:61:15:a6:9b:14:c9:ff:37:c4: f8:fd:f6:5d:18:c6:42:68:33:c3:50:8a:29:8a:91: 50:c6:15:35:d1:05:1a:c1:00:5c:98:11:6b:d6:58: a8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E9:4F:17:46:6E:AD:4B:67:1B:00:DD:11:F6:A9:B9:38:95:8E:B3 X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:12:37:d6:9e:35:ba:70:76:dc:ff:26:38:21:07:36:80:42: 8d:fa:8a:0e:47:ab:f0:78:44:3b:00:4f:d8:b8:4d:2a:5f:a6: de:68:50:84:f6:18:28:7d:2a:a3:aa:1c:d4:cd:24:e0:ad:e6: bc:c5:d6:d3:8a:c3:9a:05:d4:cc:54:70:8f:c5:63:e5:27:cf: 5a:32:26:79:72:c7:24:20:41:4c:9b:20:13:79:42:2f:2a:cf: e7:a1:70:74:6b:14:f8:e3:7f:8b:ee:48:2d:53:a3:84:34:47: c3:b7:0a:ba:87:8c:0a:4b:1f:ca:36:52:98:15:d7:4a:a6:ab: 00:c3:d7:a8:fb:3c:bf:95:f5:e1:f2:ba:d2:6b:85:ef:e2:91: 40:bd:c0:19:3f:5e:c5:a9:b6:c5:14:2a:45:a9:c7:a8:06:26: 3e:33:22:69:02:c7:d9:e3:b7:d4:c7:39:67:75:5d:d6:4b:48: 1b:4b:dd:8e:64:97:eb:e6:8e:fe:fa:67:ec:5d:30:1e:f8:6b: af:e8:94:5a:55:90:aa:df:31:2b:80:f1:99:0f:4b:7f:6d:e3: d0:47:26:7a:10:63:a0:b9:a6:6d:f5:e7:ce:6a:38:59:c7:fe: f9:b9:a2:c9:80:9b:f4:ae:77:81:49:2e:5d:a1:a1:5a:93:07: 2c:11:ee:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjUwNDI1MDIzOTA5WhcNMjUwNTAyMDIzOTA5WjAYMRYwFAYD VQQDEw02ODBhZjVjZC0yZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ayFTXgoOnvcatY29d0J+8KcPo4nlvD52lXe8FmiHWGHqlwaXnKwUvqKJ0Kf Qx8MNjdiB6Q/OtviVSIG0UeUOIZVFROfbND8ET92WEbWA5dCQw3/ili2qCls+kOI vq/WNLXHIUpFRGTTTl72kTwY5BVbk8K5dAuyR7EtbmQwiWbmsJvyEqzj/2UCJLyH jjWOUPTPdqtqJek1mMGA91UeMo5FagdGcvzRtRDSprf1/UjE877NFwfSfifonvk+ 5XtpfITzclWsVVcj/iXhzO30n/mlLbnB/S5hFaabFMn/N8T4/fZdGMZCaDPDUIop ipFQxhU10QUawQBcmBFr1lioWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrpTxdG bq1LZxsA3RH2qbk4lY6zMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArEjfWnjW6cHbc/yY4IQc2gEKN+ooOR6vweEQ7AE/YuE0qX6beaFCE 9hgofSqjqhzUzSTgrea8xdbTisOaBdTMVHCPxWPlJ89aMiZ5csckIEFMmyATeUIv Ks/noXB0axT443+L7kgtU6OENEfDtwq6h4wKSx/KNlKYFddKpqsAw9eo+zy/lfXh 8rrSa4Xv4pFAvcAZP17FqbbFFCpFqceoBiY+MyJpAsfZ47fUxzlndV3WS0gbS92O ZJfr5o7++mfsXTAe+Guv6JRaVZCq3zErgPGZD0t/bePQRyZ6EGOguaZt9efOajhZ x/75uaLJgJv0rneBSS5doaFakwcsEe4O -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:04 2025 by rpki-client