$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: pwyZVjR+0HfLl6KdqnyvnEpvnH88YvWDMW4JrTwiqnQ= Subject key identifier: 02:14:73:23:4F:50:E2:62:DF:0A:FE:B5:98:51:36:CD:9D:91:36:E8 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 016C Signing time: Wed 09 Apr 2025 02:50:48 +0000 Manifest this update: Wed 09 Apr 2025 02:50:47 +0000 Manifest next update: Wed 16 Apr 2025 02:50:47 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: w9/WtWe2ne3KZSePYEmFe6VlCVr7CK+CmKKvRrJZWc0=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 02:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D Validity Not Before: Apr 9 02:50:47 2025 GMT Not After : Apr 16 02:50:47 2025 GMT Subject: CN=67f5e087-6a62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7e:7f:d6:86:28:7d:f8:8b:0e:0a:50:53:01: 8a:5b:d8:a9:7c:eb:23:3c:26:ac:0e:1b:44:25:b4: ef:83:49:42:c6:bc:ea:bd:c7:f7:18:fd:b3:be:f3: 26:64:d2:0d:8b:45:6f:68:2f:eb:c8:27:7b:7b:99: 38:f3:43:57:a7:5a:75:bf:74:8f:52:59:65:07:24: 53:7b:f3:a3:bd:12:ae:93:15:85:4d:3d:ff:5b:ee: 49:5c:ad:fe:18:fb:d2:1b:58:be:81:dc:8b:19:94: 1c:31:e2:81:09:8a:19:15:db:d0:ee:84:63:5c:08: 28:e4:db:dd:be:9c:41:5e:fd:47:8e:a7:9f:34:2d: d8:66:89:a4:e6:08:14:1d:8c:3a:66:7a:a4:70:fa: 67:df:df:71:eb:db:f8:4a:99:f3:b8:12:7f:b2:4b: 1a:f0:0a:c6:ec:23:a0:78:0e:4c:44:87:d1:9f:c1: 07:0c:04:44:af:55:d5:fd:6d:9e:0f:c5:77:0b:3e: 27:fe:75:f5:bf:94:90:2a:61:1e:d9:d8:22:a8:b9: d6:46:eb:80:84:8a:2f:17:4e:85:ef:75:42:9c:fc: b8:12:96:19:0f:c8:8b:d0:68:ed:df:0f:19:99:d6: 07:32:3c:0b:80:0f:3a:e4:c5:8e:9a:4a:1f:75:96: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:73:23:4F:50:E2:62:DF:0A:FE:B5:98:51:36:CD:9D:91:36:E8 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:98:50:0d:36:74:bc:9a:61:a2:af:03:a4:31:1f:b4:c6:0a: aa:67:87:ca:12:7b:f9:24:20:e5:f1:74:40:cf:c4:a7:9c:e3: 63:f7:ff:5a:9c:dd:f1:78:fe:62:f1:b6:f7:70:24:1c:cf:7e: 02:a7:b6:c1:d3:93:b1:d9:89:94:0c:23:a2:a5:2b:0f:8a:64: b6:76:dc:c7:ca:f2:a7:b8:dc:b6:92:03:45:9d:54:d1:15:2e: 29:dd:84:1a:ac:1e:96:f8:f5:78:ed:f2:93:85:bc:8d:c3:c8: 02:a5:c3:8c:bf:c6:26:a3:2a:61:3f:59:c0:6c:1f:eb:e2:5b: 17:bb:e6:70:f1:76:e3:5f:b4:cc:66:c1:7c:8a:ba:a7:16:e3: e5:a2:a4:de:1a:63:b1:02:31:6c:89:ae:ef:e0:c9:59:27:bc: cd:18:2b:7e:09:8d:47:96:b5:c3:97:24:fd:a7:ba:53:6b:48: b8:67:ad:dd:9a:a0:b7:03:d4:0a:69:59:39:e5:c7:31:fd:10: 66:d1:cc:b1:f2:56:37:4f:18:23:71:aa:3c:78:bf:4e:b1:ce: 31:ab:50:bc:3d:24:ec:9b:c2:cf:39:5e:f0:af:c8:e8:4e:74: 47:50:83:3d:84:a6:9c:00:45:37:61:d4:c7:54:38:44:a0:33: f6:f6:0d:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwNDA5MDI1MDQ3WhcNMjUwNDE2MDI1MDQ3WjAYMRYwFAYD VQQDEw02N2Y1ZTA4Ny02YTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H5/1oYoffiLDgpQUwGKW9ipfOsjPCasDhtEJbTvg0lCxrzqvcf3GP2zvvMm ZNINi0VvaC/ryCd7e5k480NXp1p1v3SPUlllByRTe/OjvRKukxWFTT3/W+5JXK3+ GPvSG1i+gdyLGZQcMeKBCYoZFdvQ7oRjXAgo5NvdvpxBXv1HjqefNC3YZomk5ggU HYw6ZnqkcPpn399x69v4SpnzuBJ/sksa8ArG7COgeA5MRIfRn8EHDAREr1XV/W2e D8V3Cz4n/nX1v5SQKmEe2dgiqLnWRuuAhIovF06F73VCnPy4EpYZD8iL0Gjt3w8Z mdYHMjwLgA865MWOmkofdZaeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIUcyNP UOJi3wr+tZhRNs2dkTboMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBumFANNnS8mmGirwOkMR+0xgqqZ4fKEnv5JCDl8XRAz8SnnONj9/9a nN3xeP5i8bb3cCQcz34Cp7bB05Ox2YmUDCOipSsPimS2dtzHyvKnuNy2kgNFnVTR FS4p3YQarB6W+PV47fKThbyNw8gCpcOMv8YmoyphP1nAbB/r4lsXu+Zw8XbjX7TM ZsF8irqnFuPloqTeGmOxAjFsia7v4MlZJ7zNGCt+CY1HlrXDlyT9p7pTa0i4Z63d mqC3A9QKaVk55ccx/RBm0cyx8lY3Txgjcao8eL9Osc4xq1C8PSTsm8LPOV7wr8jo TnRHUIM9hKacAEU3YdTHVDhEoDP29g1W -----END CERTIFICATE-----Generated at Fri Apr 11 14:17:56 2025 by rpki-client