$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: VXkEByc84Rv9/JbsV6nYANpzMG5SM2zgRjCAomlQBW0= Subject key identifier: 11:48:64:70:0A:9D:EE:14:90:D9:8A:CC:CB:05:87:2C:49:93:5D:16 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 0188 Signing time: Thu 05 Jun 2025 02:55:35 +0000 Manifest this update: Thu 05 Jun 2025 02:55:34 +0000 Manifest next update: Thu 12 Jun 2025 02:55:34 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: KRGv2AxFi+0byimcTmXSx/Sn2wJ5+i6EU+RkR1PKvL0=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 02:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Jun 5 02:55:34 2025 GMT Not After : Jun 12 02:55:34 2025 GMT Subject: CN=68410727-2014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b3:03:11:66:c1:fc:99:37:c9:ac:c2:5f:59: 50:2d:9e:3c:5c:bb:b3:d3:a9:29:cc:b0:fc:09:23: 2f:7b:bf:05:15:c5:f9:60:41:c6:68:7c:48:b3:3c: da:45:8f:de:c5:4b:0b:8f:26:f1:0b:2a:87:a4:85: cb:aa:df:e4:6e:bd:43:50:d7:6d:e2:0f:e9:fa:76: 93:29:cd:bd:dc:3f:48:3a:80:0c:ca:4f:06:4b:c4: a4:92:86:2e:34:a8:e0:b6:ea:d2:f3:0c:ed:7b:6d: 1a:18:9d:ce:62:89:28:e2:11:84:f7:07:bf:7f:b1: 8e:d4:df:dc:a6:b7:7b:85:07:b7:33:b4:76:7c:f9: 08:1e:c4:7d:6b:18:43:1c:d9:fc:32:78:e4:b1:7f: 5a:0c:6b:00:e9:d5:56:b5:16:3e:a4:0c:f6:7d:26: 5b:a3:43:a0:2f:c6:b1:99:81:0c:36:f6:fe:8f:80: 3a:91:06:e5:d3:b4:0d:c9:77:52:2d:60:57:fb:3e: dd:ad:57:48:cb:8c:a6:b8:d8:69:d6:5f:d8:42:5f: 0c:0a:a3:0e:73:a7:08:eb:a5:d5:3b:2a:96:fa:02: 1e:f6:7b:7f:2a:69:21:16:5c:46:b9:5a:76:96:41: d9:88:92:c7:6a:e7:da:4b:36:da:62:b7:97:a4:2f: fb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:64:70:0A:9D:EE:14:90:D9:8A:CC:CB:05:87:2C:49:93:5D:16 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:63:3b:81:0d:d3:0c:8a:e6:23:d2:6e:60:bd:3d:1d:4e:41: c0:0e:b9:dd:0a:a2:71:0e:f8:37:a2:43:f1:09:13:af:3b:34: dc:70:67:59:30:1b:66:db:cd:51:a3:1c:c5:d9:4b:a8:c4:39: d5:1c:1d:6c:19:9e:44:4b:86:d2:c0:73:ce:70:8e:d7:46:1f: 42:14:d0:03:3e:ce:a0:14:d2:89:12:54:3f:21:ed:d0:79:c4: 0c:35:fe:fd:ef:8e:9f:6d:32:48:2a:33:d4:b1:24:c5:ed:a5: cf:0e:7a:ed:0b:27:53:d1:0b:4a:7a:4b:5d:64:43:a1:1e:55: e4:25:40:0b:1d:eb:35:ac:15:15:71:34:11:c1:14:6e:70:75: 7d:11:41:f2:bd:4a:c3:70:2f:8c:70:f4:eb:8a:cb:a5:3c:9e: df:2d:0b:45:b8:47:b0:57:7d:3d:ff:1c:a6:c6:e7:6a:e4:97: 8b:a1:ee:bf:8c:9c:74:e3:43:43:64:73:27:d8:c8:45:c2:9b: 03:1c:e7:2e:17:cc:29:39:48:b4:62:ea:c2:52:06:15:0a:e0: 6b:0d:76:f0:2d:0c:07:c3:d8:36:63:ae:39:64:10:22:fd:ac: a4:c1:b8:c8:c8:30:78:36:97:aa:05:3c:10:fc:b9:78:4f:fb: 09:10:95:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwNjA1MDI1NTM0WhcNMjUwNjEyMDI1NTM0WjAYMRYwFAYD VQQDEw02ODQxMDcyNy0yMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrMDEWbB/Jk3yazCX1lQLZ48XLuz06kpzLD8CSMve78FFcX5YEHGaHxIszza RY/exUsLjybxCyqHpIXLqt/kbr1DUNdt4g/p+naTKc293D9IOoAMyk8GS8SkkoYu NKjgturS8wzte20aGJ3OYoko4hGE9we/f7GO1N/cprd7hQe3M7R2fPkIHsR9axhD HNn8MnjksX9aDGsA6dVWtRY+pAz2fSZbo0OgL8axmYEMNvb+j4A6kQbl07QNyXdS LWBX+z7drVdIy4ymuNhp1l/YQl8MCqMOc6cI66XVOyqW+gIe9nt/KmkhFlxGuVp2 lkHZiJLHaufaSzbaYreXpC/7uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFIZHAK ne4UkNmKzMsFhyxJk10WMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCYzuBDdMMiuYj0m5gvT0dTkHADrndCqJxDvg3okPxCROvOzTccGdZ MBtm281RoxzF2UuoxDnVHB1sGZ5ES4bSwHPOcI7XRh9CFNADPs6gFNKJElQ/Ie3Q ecQMNf79746fbTJIKjPUsSTF7aXPDnrtCydT0QtKektdZEOhHlXkJUALHes1rBUV cTQRwRRucHV9EUHyvUrDcC+McPTrisulPJ7fLQtFuEewV309/xymxudq5JeLoe6/ jJx040NDZHMn2MhFwpsDHOcuF8wpOUi0YurCUgYVCuBrDXbwLQwHw9g2Y645ZBAi /aykwbjIyDB4NpeqBTwQ/Ll4T/sJEJVZ -----END CERTIFICATE-----Generated at Thu Jun 5 19:18:45 2025 by rpki-client