$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: Kn4bhgjC2okCDQn8ifoWP2P4SDbZFNuAfIoIyvd/ZQk= Subject key identifier: D9:9D:C0:30:E3:2A:76:BE:F4:07:22:24:6B:12:0D:0D:7F:04:26:AD Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 0238 Signing time: Wed 05 Nov 2025 02:38:28 +0000 Manifest this update: Wed 05 Nov 2025 02:38:27 +0000 Manifest next update: Wed 12 Nov 2025 02:38:27 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: 6xWIzVMjyWpZcFQy6dIazJcZBrDdh7+BI4A3+zQ47wo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: Nov 5 02:38:27 2025 GMT Not After : Nov 12 02:38:27 2025 GMT Subject: CN=690ab8a3-8edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:e7:2f:69:ee:7f:ae:b8:8c:b4:db:db:69: 91:0b:46:54:99:3c:77:d0:75:5d:d4:3d:49:9a:05: fc:7f:e4:08:53:25:52:37:9f:ed:9c:11:d7:1d:78: cb:d5:b3:66:68:b4:5e:b4:66:ca:aa:a8:63:f9:ae: 4b:9b:a5:8d:b1:34:c7:ca:46:48:2f:2c:12:66:25: 4e:ee:71:d6:6b:a6:46:f3:f4:03:cd:97:3d:be:cc: a2:ed:bc:d7:4d:ed:da:cb:ea:6b:50:82:00:33:ca: 80:41:76:e4:54:dc:1e:45:06:15:1e:42:2e:20:85: e5:b1:5d:4a:0b:0a:ae:3e:63:3a:1e:7f:ea:8a:56: 59:22:98:03:67:8c:8e:2c:24:46:00:5e:96:04:ac: 5d:e6:00:bf:1a:1a:07:8a:de:00:c2:00:59:99:fd: 3b:47:27:a0:67:83:30:b3:c3:49:f0:d8:6d:66:4f: 33:c5:ea:13:ba:b4:fa:d2:c5:ae:8c:34:2b:76:bb: 01:c9:1a:47:c2:20:03:75:51:50:0f:68:0f:a2:ed: d3:67:f5:11:7c:4e:27:20:9d:78:77:e2:fe:d4:92: 5d:05:c0:b9:e4:80:4c:a2:70:2f:63:d4:40:e2:a2: c3:f4:a7:a3:b2:fc:62:c4:9d:20:6b:83:5c:db:0c: 2d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9D:C0:30:E3:2A:76:BE:F4:07:22:24:6B:12:0D:0D:7F:04:26:AD X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f8:90:65:5b:64:93:a4:f8:fb:ee:ca:10:10:8f:48:b3:c0: 09:32:86:8b:91:b7:95:ca:64:51:bc:87:df:df:a9:c5:a7:90: 64:cd:de:5f:4e:51:2a:82:a9:a0:62:d2:a5:c9:22:e4:e2:ba: 36:4d:42:27:97:d4:5f:76:ff:d3:58:56:f0:ed:72:40:eb:5f: 6d:5e:3f:6d:fe:5c:53:2b:0d:69:13:e5:d6:16:63:ec:c5:b3: 6b:cb:fe:c4:f8:77:bd:0f:ad:05:40:b8:af:c8:3c:0e:42:32: e3:c5:b6:05:15:8e:ad:cd:53:9b:2a:74:15:b0:c8:65:ac:28: 2b:56:ed:6f:d9:f9:b6:e0:ae:e2:47:dd:a7:fb:57:d6:51:2d: 6b:ba:13:0f:11:b9:10:6b:b8:25:ee:63:b5:db:2d:2c:22:d2: da:5c:f0:3f:60:00:bb:71:85:31:c8:85:fe:a4:f9:72:ec:55: 42:3a:6c:19:93:35:3b:22:29:6c:7b:1e:77:b0:22:dd:a7:b7: e2:54:03:e0:08:fc:ef:5a:ea:15:f9:d2:b1:13:18:08:7c:dd: 3f:2b:c8:75:35:3f:e3:6f:31:97:9a:00:31:f1:6c:56:ff:a6: e4:6e:34:b0:1c:4f:a7:43:ae:24:f1:d3:69:e6:22:85:1d:f9: bc:32:6d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjUxMTA1MDIzODI3WhcNMjUxMTEyMDIzODI3WjAYMRYwFAYD VQQDEw02OTBhYjhhMy04ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU7nL2nuf664jLTb22mRC0ZUmTx30HVd1D1JmgX8f+QIUyVSN5/tnBHXHXjL 1bNmaLRetGbKqqhj+a5Lm6WNsTTHykZILywSZiVO7nHWa6ZG8/QDzZc9vsyi7bzX Te3ay+prUIIAM8qAQXbkVNweRQYVHkIuIIXlsV1KCwquPmM6Hn/qilZZIpgDZ4yO LCRGAF6WBKxd5gC/GhoHit4AwgBZmf07RyegZ4Mws8NJ8NhtZk8zxeoTurT60sWu jDQrdrsByRpHwiADdVFQD2gPou3TZ/URfE4nIJ14d+L+1JJdBcC55IBMonAvY9RA 4qLD9KejsvxixJ0ga4Nc2wwtRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmdwDDj Kna+9AciJGsSDQ1/BCatMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd+JBlW2STpPj77soQEI9Is8AJMoaLkbeVymRRvIff36nFp5Bkzd5f TlEqgqmgYtKlySLk4ro2TUInl9Rfdv/TWFbw7XJA619tXj9t/lxTKw1pE+XWFmPs xbNry/7E+He9D60FQLivyDwOQjLjxbYFFY6tzVObKnQVsMhlrCgrVu1v2fm24K7i R92n+1fWUS1ruhMPEbkQa7gl7mO12y0sItLaXPA/YAC7cYUxyIX+pPly7FVCOmwZ kzU7Iilsex53sCLdp7fiVAPgCPzvWuoV+dKxExgIfN0/K8h1NT/jbzGXmgAx8WxW /6bkbjSwHE+nQ64k8dNp5iKFHfm8Mm2M -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:37 2025 by rpki-client