$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: IG2Sx2m6AZBLMKMp0QnWuDbyExrBg8nqlMrWQ054Fk8= Subject key identifier: DB:02:F3:5E:83:6D:7C:65:13:21:A8:CF:BF:56:E0:BB:99:0B:E2:D7 Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 01B0 Signing time: Sat 23 Aug 2025 03:15:02 +0000 Manifest this update: Sat 23 Aug 2025 03:15:02 +0000 Manifest next update: Sat 30 Aug 2025 03:15:02 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: 4NyTbrBv0w/j+6xzrjhTsrOtSPbVJxcnN8e2QSd2ihg=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: Aug 23 03:15:02 2025 GMT Not After : Aug 30 03:15:02 2025 GMT Subject: CN=68a93236-7014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0f:91:cc:f8:d1:a8:55:c7:74:89:52:f9:5a: 6c:cc:86:3a:a8:20:d1:d2:ab:c9:78:9e:27:76:6d: 74:3f:92:d2:02:3a:86:83:7e:be:f7:d5:d1:51:72: 4d:7e:9f:b0:f7:4c:78:23:34:91:16:5f:f6:12:a4: 10:c5:88:1b:de:e0:3d:9a:a4:b6:ff:87:f1:68:02: 67:43:29:f9:55:9c:60:29:1e:ff:7d:6f:8e:69:ae: a4:80:01:15:27:61:6a:ce:15:43:2c:4f:85:7a:52: e9:af:bd:22:d5:36:6d:47:0e:65:d7:79:4e:b5:97: 38:e4:38:f7:43:9d:e1:e0:9d:64:6e:6a:29:e0:35: 94:c1:e4:c5:45:28:42:54:6d:2c:0c:18:e7:c5:ee: f9:92:f3:1d:a4:84:b5:31:2f:9d:bd:35:7f:0f:8d: 86:79:a4:06:4d:81:5e:69:f6:65:f3:1c:32:5b:e4: 86:67:7f:ca:90:5f:de:a4:ad:91:63:86:fe:eb:5b: 73:0f:d9:f8:2a:d6:53:7c:f3:8f:66:54:16:e9:80: f6:81:78:65:0a:89:31:85:3c:85:8c:03:a9:c9:5b: 4e:ca:87:78:0d:ea:60:bf:19:91:b5:c7:a1:ff:4c: e1:41:bc:4d:35:d0:41:2b:60:50:15:54:70:2f:3a: d2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:02:F3:5E:83:6D:7C:65:13:21:A8:CF:BF:56:E0:BB:99:0B:E2:D7 X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:5f:04:51:1c:a1:f7:e9:77:2e:c5:c5:91:0f:cc:c8:6a: cc:2c:39:0d:1b:cd:34:3d:bf:10:b1:23:2b:95:0b:b1:4e:ca: dc:3f:8c:13:85:5a:76:df:23:51:f7:51:57:c3:03:b6:06:db: ab:35:21:95:df:a9:cf:a1:f6:db:b7:3a:8e:da:0d:65:92:03: 8b:89:5e:9d:07:fe:f1:6c:e8:3d:49:0f:a6:c4:03:45:51:d6: 91:aa:7b:4d:51:25:b7:b9:2c:89:c1:f1:c5:e9:c7:8d:0a:4f: f2:e5:97:d4:74:cf:38:89:22:17:11:a5:99:e9:ff:ff:79:fd: 65:c9:70:07:20:ba:84:ed:1c:67:8c:cb:50:8d:3f:3f:ca:6c: ca:10:ce:66:e9:1c:8a:5f:04:84:15:7a:0d:e7:8f:54:7a:60: 68:50:0b:ba:2c:88:7f:20:01:f3:e4:98:3d:88:5b:63:85:97: 6c:d7:e6:2d:aa:3f:73:cf:56:e8:13:ef:03:2b:34:e0:0f:2e: 15:88:97:69:98:97:d5:c3:ed:11:03:dd:d4:e8:26:f6:c2:e5: 7d:45:a5:4b:9a:78:b8:3e:cd:2c:bf:7f:ae:41:c6:af:9a:ae: 89:ff:37:cb:5f:dc:85:9c:95:eb:97:c6:5a:09:3e:b1:5e:b6: 15:b8:e5:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwODIzMDMxNTAyWhcNMjUwODMwMDMxNTAyWjAYMRYwFAYD VQQDEw02OGE5MzIzNi03MDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnA+RzPjRqFXHdIlS+VpszIY6qCDR0qvJeJ4ndm10P5LSAjqGg36+99XRUXJN fp+w90x4IzSRFl/2EqQQxYgb3uA9mqS2/4fxaAJnQyn5VZxgKR7/fW+Oaa6kgAEV J2FqzhVDLE+FelLpr70i1TZtRw5l13lOtZc45Dj3Q53h4J1kbmop4DWUweTFRShC VG0sDBjnxe75kvMdpIS1MS+dvTV/D42GeaQGTYFeafZl8xwyW+SGZ3/KkF/epK2R Y4b+61tzD9n4KtZTfPOPZlQW6YD2gXhlCokxhTyFjAOpyVtOyod4DepgvxmRtceh /0zhQbxNNdBBK2BQFVRwLzrSnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsC816D bXxlEyGoz79W4LuZC+LXMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6y18EURyh9+l3LsXFkQ/MyGrMLDkNG800Pb8QsSMrlQuxTsrcP4wT hVp23yNR91FXwwO2BturNSGV36nPofbbtzqO2g1lkgOLiV6dB/7xbOg9SQ+mxANF UdaRqntNUSW3uSyJwfHF6ceNCk/y5ZfUdM84iSIXEaWZ6f//ef1lyXAHILqE7Rxn jMtQjT8/ymzKEM5m6RyKXwSEFXoN549UemBoUAu6LIh/IAHz5Jg9iFtjhZds1+Yt qj9zz1boE+8DKzTgDy4ViJdpmJfVw+0RA93U6Cb2wuV9RaVLmni4Ps0sv3+uQcav mq6J/zfLX9yFnJXrl8ZaCT6xXrYVuOUV -----END CERTIFICATE-----Generated at Sun Aug 24 00:10:37 2025 by rpki-client