$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: 743X/oHV277IHqWcLBkgrlNVspJJwjZu0cOzlJIK6YA= Subject key identifier: 1D:2C:B7:DF:7B:E6:B2:B5:E0:DA:CB:59:05:44:0D:64:17:AF:6E:26 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 01AF Signing time: Mon 03 Nov 2025 03:57:59 +0000 Manifest this update: Mon 03 Nov 2025 03:57:59 +0000 Manifest next update: Mon 10 Nov 2025 03:57:59 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: Ju8P8qMVaXwPdg6WLN0vYdq9lg7sxz4nOHQL+9TKv90=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: AYUrmB0VmSIUZcI9YP+6cvDLUzAB6YwYDgaBWNY/PRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Nov 3 03:57:59 2025 GMT Not After : Nov 10 03:57:59 2025 GMT Subject: CN=69082847-b90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e6:ff:c3:c6:30:4a:c4:b6:04:c5:b8:b0:80: ec:2f:67:59:69:f4:58:95:4a:43:71:ed:17:d7:58: 31:c3:be:46:31:72:75:75:5d:fa:8c:96:90:7d:69: 17:4f:42:c7:f3:aa:9b:5b:f8:9f:97:86:59:17:72: 36:c2:51:08:ff:9f:90:e2:47:44:e0:61:fb:cb:86: e2:b0:35:9e:e8:da:8f:17:f0:ff:e3:a5:e2:a0:a0: 83:d0:ee:1f:8c:8e:9e:de:59:ec:56:f3:fd:2b:38: c1:e4:be:85:92:2f:28:88:59:62:80:9d:fc:ce:2e: 2d:ef:da:ca:ac:cb:82:9a:89:7e:fe:c9:0a:d3:ad: 41:84:f5:21:c7:8d:78:c6:49:85:8e:ff:5b:74:46: 10:f6:ad:21:38:2a:78:a1:a7:df:42:eb:cf:a4:26: 8d:7b:76:8f:ae:d9:80:de:f6:f8:60:f0:2e:d0:26: fe:be:3d:92:78:3b:3a:31:3d:6f:41:a3:f7:8e:6a: 40:c9:3e:ff:f8:6a:38:2c:9d:f6:45:7b:9c:81:81: e6:c4:c9:f4:97:15:0e:49:7c:07:41:79:c0:fa:15: 22:9c:9a:08:e4:7a:be:6b:38:96:05:8a:2e:77:15: 01:68:4b:dc:e2:2d:ea:6e:71:39:53:0f:c8:3d:16: c8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2C:B7:DF:7B:E6:B2:B5:E0:DA:CB:59:05:44:0D:64:17:AF:6E:26 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:27:39:fb:b1:50:d6:5d:00:7c:87:1a:67:9a:7b:cd:cf:d7: c6:c8:77:1b:06:a8:6b:a3:ba:35:cd:3c:8b:2b:c3:a6:7d:b7: c4:d7:9f:fd:65:bf:ea:17:da:a0:4a:f5:ac:64:2e:12:62:aa: 2b:eb:16:70:f3:c6:d1:c5:11:2e:72:48:29:f9:a5:9c:64:69: 87:13:a7:f2:d0:64:14:2a:42:b1:a5:f4:44:7e:89:78:ed:58: 10:9d:d9:7b:89:af:8b:e8:18:22:13:2c:2c:0e:ac:0e:e7:44: 1d:bb:63:00:01:8d:3c:d1:0e:9b:aa:f1:42:3d:f2:0d:ad:75: d3:d9:4b:60:75:b9:e5:6e:4b:aa:43:35:26:f8:21:da:0d:5a: 66:8d:26:f8:f8:45:6e:36:73:35:53:9a:8f:af:0e:a7:12:66: c1:7c:22:61:b8:f0:2b:0e:9f:d4:8c:f6:8a:49:4c:83:95:3e: 86:0c:39:06:78:96:ca:1f:2d:34:b0:b2:24:ad:4a:0b:6e:ac: b7:b7:cc:cd:94:71:6a:a2:c7:e7:e8:23:c6:61:27:bc:62:d1: 0f:2d:2e:7b:b2:40:84:7a:45:2f:a1:f0:a7:05:57:2d:1a:d6: 53:b0:58:9b:01:ac:e4:9b:e1:6c:48:37:f8:5b:6e:19:bc:68: cf:67:da:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkM1RDExMC8GA1UEBRMoMDg3NzdGQTM4MUJGMjU4RTBDQUMzN0Q1MDlFRjBCQUM3 MDY2NDg0NDAeFw0yNTExMDMwMzU3NTlaFw0yNTExMTAwMzU3NTlaMBgxFjAUBgNV BAMTDTY5MDgyODQ3LWI5MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCj5v/DxjBKxLYExbiwgOwvZ1lp9FiVSkNx7RfXWDHDvkYxcnV1XfqMlpB9aRdP Qsfzqptb+J+XhlkXcjbCUQj/n5DiR0TgYfvLhuKwNZ7o2o8X8P/jpeKgoIPQ7h+M jp7eWexW8/0rOMHkvoWSLyiIWWKAnfzOLi3v2sqsy4KaiX7+yQrTrUGE9SHHjXjG SYWO/1t0RhD2rSE4Knihp99C68+kJo17do+u2YDe9vhg8C7QJv6+PZJ4OzoxPW9B o/eOakDJPv/4ajgsnfZFe5yBgebEyfSXFQ5JfAdBecD6FSKcmgjker5rOJYFii53 FQFoS9ziLepucTlTD8g9Fsg1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHSy333vm srXg2stZBUQNZBevbiYwHwYDVR0jBBgwFoAUCHd/o4G/JY4MrDfVCe8LrHBmSEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0hkX280R19KWTRNckRmVkNlOExySEJtU0VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0 TXJEZlZDZThMckhCbVNFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgnOfuxUNZdAHyHGmeae83P18bIdxsGqGujujXNPIsrw6Z9t8TXn/1l v+oX2qBK9axkLhJiqivrFnDzxtHFES5ySCn5pZxkaYcTp/LQZBQqQrGl9ER+iXjt WBCd2XuJr4voGCITLCwOrA7nRB27YwABjTzRDpuq8UI98g2tddPZS2B1ueVuS6pD NSb4IdoNWmaNJvj4RW42czVTmo+vDqcSZsF8ImG48CsOn9SM9opJTIOVPoYMOQZ4 lsofLTSwsiStSgturLe3zM2UcWqix+foI8ZhJ7xi0Q8tLnuyQIR6RS+h8KcFVy0a 1lOwWJsBrOSb4WxIN/hbbhm8aM9n2rA= -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:42 2025 by rpki-client