$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: SnEKdgdA54iuhbuFFGBp7+3w6FfXVFeN51pFvcv6BDo= Subject key identifier: 73:68:49:04:AD:EC:10:68:BF:4F:1D:82:33:74:AC:81:4B:B9:0C:E2 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 01D4 Signing time: Mon 03 Nov 2025 02:45:29 +0000 Manifest this update: Mon 03 Nov 2025 02:45:28 +0000 Manifest next update: Mon 10 Nov 2025 02:45:28 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: t2SEtBFTD8u8q1WGWSt8ibLAdDbvVX66w7wOPVBaNxw=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Nov 3 02:45:28 2025 GMT Not After : Nov 10 02:45:28 2025 GMT Subject: CN=69081749-ecb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:7d:0e:82:ee:d8:c6:08:77:47:c3:98:7a: d6:07:0d:ea:45:41:3f:79:fb:4f:02:c2:53:4c:f6: 51:86:90:4f:44:c4:2e:55:e4:88:77:ed:03:14:70: 5e:44:d1:5e:91:d2:be:2e:e6:39:24:5f:66:3b:30: 13:de:87:16:e2:ba:2d:04:d5:f6:3e:ce:bb:7d:b2: 0c:34:64:03:49:80:7b:55:87:85:2a:a7:c3:9c:db: a1:27:5d:3c:4f:ca:17:0b:51:20:64:e5:2d:68:8f: 36:24:f9:c3:28:10:fa:4c:7a:50:04:9f:3c:20:21: d6:d2:cc:8b:dc:91:fd:87:98:32:64:a9:76:c4:62: 15:a5:cb:ce:07:20:eb:f9:ec:4c:7d:08:f5:aa:4f: 05:96:65:8b:5b:0c:63:1c:f8:d5:3c:25:f8:cd:6b: 28:9a:22:33:53:b4:5d:ee:ba:07:8d:48:39:1c:94: 89:76:f6:b1:5f:ca:8b:4c:de:d2:82:a7:36:25:da: b0:33:09:5b:9a:77:82:4c:e6:8f:77:b8:98:e5:19: 7a:52:4c:26:02:8e:ec:8f:01:0a:6f:b5:fb:3b:44: 75:8f:e1:c6:ea:f5:ae:67:57:10:3d:5c:bc:7e:ca: 53:f6:e1:66:85:77:13:31:23:64:8e:ce:b4:e3:11: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:68:49:04:AD:EC:10:68:BF:4F:1D:82:33:74:AC:81:4B:B9:0C:E2 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:05:64:7a:eb:db:b4:ac:d6:94:76:76:f5:b6:da:54:26:07: 6c:c4:23:15:82:01:3a:37:be:fd:04:10:48:4f:1d:b7:10:83: e2:fb:66:af:51:3c:f9:e1:6b:66:04:9d:c3:18:99:7f:b9:ed: 83:ed:9f:99:65:fb:f7:72:8d:7f:bf:17:78:b0:d4:17:78:02: aa:a8:54:77:02:69:a2:e0:9a:a8:75:a3:fe:dc:c8:74:a3:5c: 32:50:70:81:a6:a9:99:58:11:aa:07:2d:5b:d7:c3:e9:3c:a0: a5:45:00:28:3c:92:19:7e:1f:84:a9:cc:68:22:82:e8:c7:bd: e9:13:bd:d6:0a:ea:15:e6:0f:1f:62:40:62:02:31:7b:ce:02: 92:89:de:87:96:a3:d4:27:49:1b:58:4b:f9:64:93:7d:87:25: 88:d3:77:be:54:50:68:76:51:50:35:f3:dd:f8:37:57:0e:c1: f7:b8:5c:bf:a0:6e:1e:7a:0d:fc:f4:f5:e0:ac:da:cc:b0:1a: 63:2f:77:28:84:96:22:fc:42:63:f5:ed:9b:4a:82:2c:22:d6: c3:be:b9:a7:4c:27:e3:f0:1d:a1:8b:39:9d:5f:5a:2b:0a:75: f2:a2:7a:09:e3:6e:2c:50:00:e9:7f:22:9a:79:7f:cd:c2:1b: 2b:a9:bc:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUxMTAzMDI0NTI4WhcNMjUxMTEwMDI0NTI4WjAYMRYwFAYD VQQDEw02OTA4MTc0OS1lY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z99DoLu2MYId0fDmHrWBw3qRUE/eftPAsJTTPZRhpBPRMQuVeSId+0DFHBe RNFekdK+LuY5JF9mOzAT3ocW4rotBNX2Ps67fbIMNGQDSYB7VYeFKqfDnNuhJ108 T8oXC1EgZOUtaI82JPnDKBD6THpQBJ88ICHW0syL3JH9h5gyZKl2xGIVpcvOByDr +exMfQj1qk8FlmWLWwxjHPjVPCX4zWsomiIzU7Rd7roHjUg5HJSJdvaxX8qLTN7S gqc2JdqwMwlbmneCTOaPd7iY5Rl6UkwmAo7sjwEKb7X7O0R1j+HG6vWuZ1cQPVy8 fspT9uFmhXcTMSNkjs604xFYoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNoSQSt 7BBov08dgjN0rIFLuQziMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRBWR669u0rNaUdnb1ttpUJgdsxCMVggE6N779BBBITx23EIPi+2av UTz54WtmBJ3DGJl/ue2D7Z+ZZfv3co1/vxd4sNQXeAKqqFR3Ammi4JqodaP+3Mh0 o1wyUHCBpqmZWBGqBy1b18PpPKClRQAoPJIZfh+EqcxoIoLox73pE73WCuoV5g8f YkBiAjF7zgKSid6HlqPUJ0kbWEv5ZJN9hyWI03e+VFBodlFQNfPd+DdXDsH3uFy/ oG4eeg389PXgrNrMsBpjL3cohJYi/EJj9e2bSoIsItbDvrmnTCfj8B2hizmdX1or CnXyonoJ424sUADpfyKaeX/NwhsrqbwC -----END CERTIFICATE-----Generated at Tue Nov 4 01:10:22 2025 by rpki-client