$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: nVqX54Ve5vcf/7FgjHyApxspHKoSyeCX+Ad2Aby617o= Subject key identifier: A6:81:9F:B1:E2:31:B5:61:D9:5C:E2:B4:8C:E8:80:A4:6E:C7:BC:55 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 0481 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 047C Signing time: Thu 12 Jun 2025 23:39:01 +0000 Manifest this update: Thu 12 Jun 2025 23:39:01 +0000 Manifest next update: Thu 19 Jun 2025 23:39:01 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: L4jyY0wQmEnL16BJXNJ4l3/cKf9eb7/EM69pTPLey60=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1153 (0x481) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Jun 12 23:39:01 2025 GMT Not After : Jun 19 23:39:01 2025 GMT Subject: CN=684b6515-8b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:a9:36:de:7d:a6:a5:cb:6a:68:a0:61:fe: ff:f9:d6:82:de:d8:72:d0:0b:b5:32:92:4b:93:e0: 0e:ef:e2:6d:a2:4d:a1:b7:54:db:54:a1:0e:5e:14: 41:58:0b:d9:c5:f0:24:25:8d:02:e0:eb:fd:ba:30: 30:ea:d9:50:8f:79:0c:01:67:ac:4b:55:7e:04:fc: 62:0c:0e:31:b4:59:0d:c4:11:00:e8:99:26:23:09: db:a9:52:44:39:bb:fd:70:5f:5f:3e:a3:08:39:87: 8a:a8:d1:1c:13:cd:18:37:f9:63:57:03:ce:85:6c: dc:9f:fe:81:3c:63:42:a9:ef:13:10:ed:cd:01:97: 3f:b9:67:01:18:f7:5c:14:62:ca:2a:b4:e1:b3:d5: c7:96:cb:b2:c0:39:6c:9a:c3:9c:67:60:61:66:b1: 1f:79:9d:da:d7:28:e4:f6:3b:01:02:00:df:60:5d: 97:f5:5c:35:b8:d3:e4:dc:77:fa:0d:9c:89:30:22: 9e:a2:0b:82:e3:b6:a9:2c:b1:ca:3a:14:4e:f4:94: c4:a1:2e:da:57:8a:26:01:a2:72:b7:c0:40:2e:44: eb:1f:c0:73:1b:3b:0a:ed:da:35:f6:7d:94:44:cb: 3d:a0:30:cd:84:bb:d0:1f:f9:0f:a8:fc:65:3e:51: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:81:9F:B1:E2:31:B5:61:D9:5C:E2:B4:8C:E8:80:A4:6E:C7:BC:55 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f4:f7:42:f7:3d:7f:9c:a5:ed:d3:5d:99:a3:fd:4b:6a:19: 14:56:46:3c:28:28:2f:34:c6:64:8d:9f:90:83:3b:72:cd:ec: 9e:eb:4d:76:16:21:e4:3d:7e:90:71:0b:66:e3:97:e0:b5:d6: dd:32:55:fa:4a:f9:e5:ce:c9:03:8c:1c:c7:79:f5:a9:d3:33: b4:89:ad:6c:90:6f:47:36:47:b7:2d:7d:68:39:9c:e3:2b:3c: f5:a4:15:6f:5f:3c:ff:1c:26:30:8a:8b:e9:dc:8e:80:8b:57: 3f:15:8d:d7:77:44:b1:2b:28:ce:91:93:b2:b7:5b:54:47:0f: 36:68:b8:43:6c:c8:df:d5:a5:ef:89:78:8a:84:83:a2:0a:59: 9b:3d:13:08:cd:cd:c2:43:e0:67:4e:6d:a5:a5:d7:27:2c:5d: 97:60:58:0c:92:99:65:4e:90:40:17:fb:d5:ac:b2:92:d0:b4: 0f:a1:dc:50:1b:5e:ec:34:a8:81:25:a6:fb:e0:55:d6:6b:c2: 34:7a:21:f7:4c:06:6a:3b:a3:25:fd:02:dc:33:3a:6e:1d:11: ec:52:ae:62:a5:91:7a:78:4c:f8:2a:cd:13:f5:fa:1b:3a:2f: b0:aa:5d:67:a3:b9:ff:ed:fb:7e:a3:cc:b5:8b:0f:9d:f7:56: 56:e7:c9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUwNjEyMjMzOTAxWhcNMjUwNjE5MjMzOTAxWjAYMRYwFAYD VQQDEw02ODRiNjUxNS04YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj+pNt59pqXLamigYf7/+daC3thy0Au1MpJLk+AO7+Jtok2ht1TbVKEOXhRB WAvZxfAkJY0C4Ov9ujAw6tlQj3kMAWesS1V+BPxiDA4xtFkNxBEA6JkmIwnbqVJE Obv9cF9fPqMIOYeKqNEcE80YN/ljVwPOhWzcn/6BPGNCqe8TEO3NAZc/uWcBGPdc FGLKKrThs9XHlsuywDlsmsOcZ2BhZrEfeZ3a1yjk9jsBAgDfYF2X9Vw1uNPk3Hf6 DZyJMCKeoguC47apLLHKOhRO9JTEoS7aV4omAaJyt8BALkTrH8BzGzsK7do19n2U RMs9oDDNhLvQH/kPqPxlPlH+pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaBn7Hi MbVh2VzitIzogKRux7xVMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV9PdC9z1/nKXt012Zo/1LahkUVkY8KCgvNMZkjZ+Qgztyzeye6012 FiHkPX6QcQtm45fgtdbdMlX6SvnlzskDjBzHefWp0zO0ia1skG9HNke3LX1oOZzj Kzz1pBVvXzz/HCYwiovp3I6Ai1c/FY3Xd0SxKyjOkZOyt1tURw82aLhDbMjf1aXv iXiKhIOiClmbPRMIzc3CQ+BnTm2lpdcnLF2XYFgMkpllTpBAF/vVrLKS0LQPodxQ G17sNKiBJab74FXWa8I0eiH3TAZqO6Ml/QLcMzpuHRHsUq5ipZF6eEz4Ks0T9fob Oi+wql1no7n/7ft+o8y1iw+d91ZW58mu -----END CERTIFICATE-----Generated at Sat Jun 14 19:22:37 2025 by rpki-client