$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: UNHO4i6GuaykO6mqG4yCJwmouNE4ZEiiSAsgW9XpMLs= Subject key identifier: 8E:6C:89:07:D4:B8:40:52:58:CF:65:DB:ED:D0:B3:B7:CC:E5:2D:95 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 01A9 Signing time: Sat 09 Aug 2025 03:34:19 +0000 Manifest this update: Sat 09 Aug 2025 03:34:19 +0000 Manifest next update: Sat 16 Aug 2025 03:34:19 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: PfQSLT0xoO42QcRQyUraftTrLIfx39xQp6naMLnZ4Og=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Aug 9 03:34:19 2025 GMT Not After : Aug 16 03:34:19 2025 GMT Subject: CN=6896c1bb-585d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:f9:58:50:ec:91:1d:9c:33:33:79:e0:03: b7:6a:2a:d3:50:e6:5c:52:50:67:9e:3d:6f:07:7d: 73:9c:a3:ff:73:51:0b:ac:7b:9b:22:9e:a5:9c:3d: a9:05:d0:d0:d9:05:55:aa:ee:5a:e2:6c:1c:18:69: c7:39:82:04:13:f1:79:42:c6:89:f2:32:68:d3:03: 46:56:c5:30:eb:fc:d7:f4:c3:29:3a:03:57:27:21: c6:1a:54:c2:6c:8a:e1:94:bc:3c:49:bf:8c:55:7b: 5d:54:31:dc:ac:27:21:67:bf:6c:e9:4d:a5:f5:2d: cc:b1:c8:4f:06:3d:37:5c:e6:07:a5:78:53:e0:fb: ad:c5:89:0e:5e:ba:4d:b1:a8:55:33:ff:fe:c9:4a: 2d:29:f3:d6:55:37:89:58:3b:dd:61:4d:31:d9:e6: 12:ec:77:0a:00:2d:2c:ce:44:04:27:2b:ce:44:d8: f6:86:5f:b4:59:c3:ca:78:40:c9:0e:bd:04:87:db: 99:e1:cb:59:24:ca:cb:3b:22:95:14:98:c3:be:41: 3c:a3:8a:01:df:ec:99:7b:fd:42:21:d7:ac:39:ed: f3:a5:83:74:14:33:c5:a7:10:0c:b2:9b:9d:4b:a3: 5e:1d:62:1f:78:ce:79:6b:4a:0a:5c:64:bf:e4:c0: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:6C:89:07:D4:B8:40:52:58:CF:65:DB:ED:D0:B3:B7:CC:E5:2D:95 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:1c:54:11:76:b8:e4:dc:af:72:cf:f8:3b:28:f6:a1:ba:b7: 6e:de:17:17:b1:9e:e0:6b:22:f8:a1:7d:47:01:ba:a1:79:c3: 80:b2:5a:76:8a:8e:6f:8f:8e:26:4a:13:ac:45:52:1b:99:7e: 8a:fd:93:62:8b:47:f4:9c:38:90:e9:81:f8:f8:60:5e:09:76: 6f:3e:0d:26:98:6a:5f:7c:52:f5:b4:ac:6f:41:88:38:57:76: 49:c3:e0:ab:2e:fa:dc:48:55:84:00:42:0c:ad:7c:4c:df:e8: d7:2b:25:6d:a2:2b:46:21:eb:56:ba:c2:1e:6f:5a:6e:7e:9a: e6:7f:2e:0c:31:ee:38:f2:75:b6:dd:3d:c2:08:b1:75:f8:8b: 8a:cf:1a:eb:31:9d:0f:73:04:d2:e1:a8:79:86:fa:93:e3:9a: 46:29:8d:3d:54:6d:f3:0f:a4:cc:44:a9:2a:28:03:72:8e:7f: 22:ee:67:1a:cc:06:a4:fc:99:91:86:70:79:b6:f1:56:9a:1c: 3e:96:c9:7f:30:6d:be:ff:1a:60:25:62:f3:7d:8a:50:55:ba: 46:18:a7:86:5a:5f:56:d2:89:79:b7:84:c8:97:4f:ab:03:b3: b3:a5:a5:28:1c:66:0a:5f:14:9b:90:23:59:89:06:a6:b9:50: 67:b8:a9:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwODA5MDMzNDE5WhcNMjUwODE2MDMzNDE5WjAYMRYwFAYD VQQDEw02ODk2YzFiYi01ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tH5WFDskR2cMzN54AO3airTUOZcUlBnnj1vB31znKP/c1ELrHubIp6lnD2p BdDQ2QVVqu5a4mwcGGnHOYIEE/F5QsaJ8jJo0wNGVsUw6/zX9MMpOgNXJyHGGlTC bIrhlLw8Sb+MVXtdVDHcrCchZ79s6U2l9S3MschPBj03XOYHpXhT4PutxYkOXrpN sahVM//+yUotKfPWVTeJWDvdYU0x2eYS7HcKAC0szkQEJyvORNj2hl+0WcPKeEDJ Dr0Eh9uZ4ctZJMrLOyKVFJjDvkE8o4oB3+yZe/1CIdesOe3zpYN0FDPFpxAMspud S6NeHWIfeM55a0oKXGS/5MCpKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5siQfU uEBSWM9l2+3Qs7fM5S2VMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTHFQRdrjk3K9yz/g7KPahurdu3hcXsZ7gayL4oX1HAbqhecOAslp2 io5vj44mShOsRVIbmX6K/ZNii0f0nDiQ6YH4+GBeCXZvPg0mmGpffFL1tKxvQYg4 V3ZJw+CrLvrcSFWEAEIMrXxM3+jXKyVtoitGIetWusIeb1pufprmfy4MMe448nW2 3T3CCLF1+IuKzxrrMZ0PcwTS4ah5hvqT45pGKY09VG3zD6TMRKkqKANyjn8i7mca zAak/JmRhnB5tvFWmhw+lsl/MG2+/xpgJWLzfYpQVbpGGKeGWl9W0ol5t4TIl0+r A7OzpaUoHGYKXxSbkCNZiQamuVBnuKl7 -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:12 2025 by rpki-client