$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: 7yrzFiX8jBog9epakcgTMRh3gKoj1rtGz9MiGnf3Pb8= Subject key identifier: 54:54:90:B2:D4:8A:CE:9F:9B:26:CD:72:2F:F9:D3:46:42:D1:C9:44 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 049A Signing time: Mon 11 Aug 2025 00:07:18 +0000 Manifest this update: Mon 11 Aug 2025 00:07:18 +0000 Manifest next update: Mon 18 Aug 2025 00:07:18 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: XerL6gyzFeyMP54wfTxy2Cg1eFoMzZNdb4lljgvOWdc=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Aug 11 00:07:18 2025 GMT Not After : Aug 18 00:07:18 2025 GMT Subject: CN=68993436-b46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:4f:49:db:3b:c3:b7:14:0a:fc:ab:50:04: 57:82:39:e3:9c:b3:f5:96:57:85:9d:21:eb:b7:16: 3b:60:1c:6f:06:20:bd:5c:ce:52:b1:ec:e4:b0:81: 35:4b:85:a8:17:e5:5b:cb:4a:65:3a:e5:a1:ad:81: 59:73:90:50:53:c1:2c:16:0a:75:7d:a7:63:69:3e: b4:29:8c:45:d3:b4:a8:0f:da:4b:c1:58:36:14:f2: 0c:28:72:47:12:57:62:ce:99:e9:9e:a7:9c:02:c6: f1:bb:a8:85:7d:03:7f:7d:01:76:3f:83:57:78:6b: 47:3b:ef:7a:ef:2a:42:ba:85:82:98:53:cf:8e:85: 99:fc:d1:0b:bf:2f:2f:05:ee:84:60:97:80:de:7d: e0:11:e0:a9:c4:76:4d:de:35:b0:43:eb:a9:c1:83: 9f:4c:7c:f1:a1:27:90:76:e7:86:6c:2b:ce:58:d1: 55:ff:db:43:93:3b:29:06:92:99:bd:ca:f3:43:28: b5:08:ab:c1:00:76:a6:eb:d2:13:93:b8:61:99:9f: 76:ec:0c:00:ad:d5:46:91:ee:db:e9:9d:0a:c5:c5: fb:19:c4:fc:95:72:fa:29:b0:3b:64:bb:16:9a:c0: 43:87:1f:80:43:c1:33:be:52:97:d8:04:36:b8:aa: 37:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:54:90:B2:D4:8A:CE:9F:9B:26:CD:72:2F:F9:D3:46:42:D1:C9:44 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e3:39:cc:35:6e:37:b2:aa:6b:43:24:8a:f2:38:0e:e6:14: 5a:43:f6:49:a6:5d:81:7e:c2:e6:9d:ef:c9:85:75:cd:8d:d2: 7a:05:11:3b:83:28:c1:f3:5f:72:3d:fa:5c:c5:76:69:15:5a: f5:5b:d3:b3:72:85:66:2e:08:fb:06:21:d7:bb:9e:ca:fb:b6: 7e:3a:38:a0:26:c1:06:3f:3b:e9:b0:6b:57:ec:a9:44:a9:9a: 0e:0b:8a:36:01:12:0d:2f:58:ba:0b:0d:db:bb:4c:61:a8:fe: a2:3b:19:93:42:6f:a6:1f:a6:93:1a:5b:ae:ff:ec:45:3b:b2: 23:33:fd:38:ce:47:c9:69:38:6e:7b:95:0f:3c:e0:dd:4c:cc: bf:f8:bb:aa:5d:a2:ce:b3:01:9c:d3:3a:4c:10:4d:3c:95:0d: d4:f5:56:32:3a:af:f2:13:4e:89:96:94:66:a0:13:fa:57:62: 4b:5b:48:73:fc:5a:57:cf:cd:66:f0:ed:6b:61:ab:9c:b2:d4: 80:ac:9c:5c:cf:a9:a3:c9:a4:97:35:18:a9:66:c5:19:36:93: 77:ee:81:be:7a:e6:97:b6:46:a2:4b:5a:c9:64:b2:42:d8:b1: d7:81:b7:ff:82:b6:83:bd:75:63:72:1b:c4:2a:24:ee:27:ef: ff:cc:cc:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUwODExMDAwNzE4WhcNMjUwODE4MDAwNzE4WjAYMRYwFAYD VQQDEw02ODk5MzQzNi1iNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lhPSds7w7cUCvyrUARXgjnjnLP1lleFnSHrtxY7YBxvBiC9XM5SsezksIE1 S4WoF+Vby0plOuWhrYFZc5BQU8EsFgp1fadjaT60KYxF07SoD9pLwVg2FPIMKHJH EldizpnpnqecAsbxu6iFfQN/fQF2P4NXeGtHO+967ypCuoWCmFPPjoWZ/NELvy8v Be6EYJeA3n3gEeCpxHZN3jWwQ+upwYOfTHzxoSeQdueGbCvOWNFV/9tDkzspBpKZ vcrzQyi1CKvBAHam69ITk7hhmZ927AwArdVGke7b6Z0KxcX7GcT8lXL6KbA7ZLsW msBDhx+AQ8EzvlKX2AQ2uKo3TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRUkLLU is6fmybNci/500ZC0clEMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd4znMNW43sqprQySK8jgO5hRaQ/ZJpl2BfsLmne/JhXXNjdJ6BRE7 gyjB819yPfpcxXZpFVr1W9OzcoVmLgj7BiHXu57K+7Z+OjigJsEGPzvpsGtX7KlE qZoOC4o2ARINL1i6Cw3bu0xhqP6iOxmTQm+mH6aTGluu/+xFO7IjM/04zkfJaThu e5UPPODdTMy/+LuqXaLOswGc0zpMEE08lQ3U9VYyOq/yE06JlpRmoBP6V2JLW0hz /FpXz81m8O1rYaucstSArJxcz6mjyaSXNRipZsUZNpN37oG+euaXtkaiS1rJZLJC 2LHXgbf/graDvXVjchvEKiTuJ+//zMwk -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:55 2025 by rpki-client