$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: Qrcom0aBaE1U8REgKqcHRsIcH/JGdgLbxN7/V7xq7LE= Subject key identifier: BC:E8:A3:CF:EB:86:74:AB:68:00:5A:70:8A:3B:54:AD:C8:41:2A:F0 Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 0236 Signing time: Mon 03 Nov 2025 02:30:05 +0000 Manifest this update: Mon 03 Nov 2025 02:30:05 +0000 Manifest next update: Mon 10 Nov 2025 02:30:05 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: Su5/k+/Cg7s1ivOmVCCuojjuDgAa3FI3+25jVOG4M8g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: Nov 3 02:30:05 2025 GMT Not After : Nov 10 02:30:05 2025 GMT Subject: CN=690813ad-fdb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:76:e6:88:f5:56:a7:68:30:9e:1e:78:da:50: 30:ee:5b:3d:97:67:5a:b7:94:28:00:d3:c7:49:f2: 26:f4:af:32:e2:31:6e:af:de:fc:14:63:f1:ac:c5: 32:2d:be:78:34:31:c5:f6:6e:e1:8f:e1:dd:a8:18: f9:d8:59:15:ba:e0:19:0c:33:64:36:26:7d:36:41: 89:66:b8:d2:28:e6:58:95:fe:68:89:09:ed:e3:21: 0c:cc:4f:99:1d:71:e6:cd:c6:35:15:e7:8a:59:63: 28:e7:49:e1:1a:ad:77:f3:8b:f4:26:a0:04:27:9e: 53:af:1e:56:d0:bb:85:03:7f:a3:52:6a:9c:01:66: c4:55:82:7b:18:c8:ec:74:90:81:e7:b6:f2:aa:3c: a5:3c:1e:c2:9c:15:57:9a:06:fb:14:bc:8a:57:ce: cc:d6:29:47:15:43:16:0b:d8:11:a4:25:92:78:80: 5d:32:33:df:3c:b5:3b:45:2b:5a:f8:7f:90:79:9c: 00:f1:0a:3f:65:c0:e5:2f:8b:7b:fe:7e:c3:3d:2a: a7:69:1a:64:5d:40:e4:00:f1:d2:7f:c8:01:c1:eb: cc:68:cb:f0:a6:41:c0:ba:f0:5c:5b:03:d5:bf:52: a3:a6:4f:e4:68:1e:81:e8:c3:92:51:36:91:7a:6a: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:A3:CF:EB:86:74:AB:68:00:5A:70:8A:3B:54:AD:C8:41:2A:F0 X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:fc:c4:bd:76:2a:37:cd:8f:dd:dd:b8:21:05:d2:4e:4b:f4: 2c:f1:1d:9b:89:91:6a:98:e6:a5:37:49:98:db:21:e0:80:0c: 86:de:67:77:34:ff:d3:8d:8a:ec:d2:8e:45:1f:38:96:36:ba: 27:38:b9:8f:45:03:d0:2a:e1:e1:64:94:a5:bf:93:f4:be:9d: 49:2f:f6:ab:f3:ce:cb:5a:6e:dd:a3:4a:29:1e:9a:7b:f0:63: f4:a2:a2:5d:41:74:33:08:17:4e:cd:e2:07:09:dd:aa:68:98: b0:dd:2f:e6:29:5d:e1:df:7b:ba:28:f9:28:ba:c8:d3:be:38: a7:7c:53:3b:f4:59:08:b0:e6:f9:d4:ef:d9:2b:95:bc:1d:de: 58:a3:24:30:a4:5d:36:d4:e7:3e:d4:07:ca:e9:59:10:14:9e: 7e:0d:1e:d3:2c:be:8c:8b:58:30:3b:4e:b4:ee:d7:95:3e:9a: ff:ea:94:6c:c7:fa:af:88:47:d5:f6:45:19:42:e0:f8:a4:ed: dc:28:31:78:94:50:a3:c6:6c:f7:bd:b6:de:7c:f4:2c:82:6d: 60:1b:ff:f8:60:5a:9d:2a:e0:3e:14:e5:d8:41:0e:02:b2:ae: 7f:0c:25:d3:73:59:4a:8c:ad:f4:92:58:92:43:29:2c:80:a9: 00:7d:c8:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjUxMTAzMDIzMDA1WhcNMjUxMTEwMDIzMDA1WjAYMRYwFAYD VQQDEw02OTA4MTNhZC1mZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3HbmiPVWp2gwnh542lAw7ls9l2dat5QoANPHSfIm9K8y4jFur978FGPxrMUy Lb54NDHF9m7hj+HdqBj52FkVuuAZDDNkNiZ9NkGJZrjSKOZYlf5oiQnt4yEMzE+Z HXHmzcY1FeeKWWMo50nhGq1384v0JqAEJ55Trx5W0LuFA3+jUmqcAWbEVYJ7GMjs dJCB57byqjylPB7CnBVXmgb7FLyKV87M1ilHFUMWC9gRpCWSeIBdMjPfPLU7RSta +H+QeZwA8Qo/ZcDlL4t7/n7DPSqnaRpkXUDkAPHSf8gBwevMaMvwpkHAuvBcWwPV v1Kjpk/kaB6B6MOSUTaRemooEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzoo8/r hnSraABacIo7VK3IQSrwMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ/MS9dio3zY/d3bghBdJOS/Qs8R2biZFqmOalN0mY2yHggAyG3md3 NP/TjYrs0o5FHziWNronOLmPRQPQKuHhZJSlv5P0vp1JL/ar887LWm7do0opHpp7 8GP0oqJdQXQzCBdOzeIHCd2qaJiw3S/mKV3h33u6KPkousjTvjinfFM79FkIsOb5 1O/ZK5W8Hd5YoyQwpF021Oc+1AfK6VkQFJ5+DR7TLL6Mi1gwO0607teVPpr/6pRs x/qviEfV9kUZQuD4pO3cKDF4lFCjxmz3vbbefPQsgm1gG//4YFqdKuA+FOXYQQ4C sq5/DCXTc1lKjK30kliSQyksgKkAfcj5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:10 2025 by rpki-client