$ rpki-client -vvf rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft File: ChPG4rpUSZlzhSD56zNYNsRgyMg.mft (raw, json) Hash identifier: ou5JySEw1BkUbPn8I+adKGMA6Mp7wVE/ZEzjkmaaf/Y= Subject key identifier: BB:00:58:5D:1C:EE:7C:9C:CE:38:6B:5C:10:D4:DD:52:5C:BB:AE:5B Authority key identifier: 0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 Certificate issuer: /CN=A911503D/serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft Manifest number: 017D Signing time: Tue 13 May 2025 02:55:45 +0000 Manifest this update: Tue 13 May 2025 02:55:44 +0000 Manifest next update: Tue 20 May 2025 02:55:44 +0000 Files and hashes: 1: ChPG4rpUSZlzhSD56zNYNsRgyMg.crl (hash: tN7rygDOgznzUh0BXHsQNquMgkJU0ivNE1E0noAaSrI=) 2: F1999E04EB4211EDB83DE270C4F9AE02.roa (hash: 01idouuhUH2pCBuIeOja288YcD/2ZR2ls6JyIWsAt6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911503D, serialNumber=0A13C6E2BA544999738520F9EB335836C460C8C8 Validity Not Before: May 13 02:55:44 2025 GMT Not After : May 20 02:55:44 2025 GMT Subject: CN=6822b4b0-5786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:30:c9:fe:d9:c7:98:77:82:c5:da:e9:a0: 3f:f4:ce:63:dc:ae:e3:ae:15:5c:3a:2f:5c:4f:87: 27:1f:f8:26:0e:da:57:f1:4b:fc:ab:f5:51:cc:eb: b9:e3:27:9a:33:e3:5f:26:d8:59:ec:f9:bb:65:0c: 98:91:00:98:26:fb:60:32:28:9c:3e:43:22:f5:f2: b0:2e:f0:7c:07:bc:ba:16:19:97:63:b1:51:68:f9: ca:f7:9b:00:8d:57:e4:7f:63:e8:55:37:78:2c:05: 2a:08:28:41:af:57:d6:24:d4:a4:d3:82:82:8d:7f: c0:c5:5d:b8:58:f7:1d:e4:5d:56:54:d4:ea:fd:06: ed:b3:a2:40:4c:bc:3a:77:49:6d:a9:07:d5:04:2a: 6d:4f:3c:ef:5a:3c:a0:38:b0:4d:8b:46:39:db:2d: d5:9b:1f:c2:53:0f:8f:60:04:46:69:63:b5:6e:80: 52:2e:d0:4b:f3:ea:b4:8c:c0:0c:9e:0f:c3:be:c1: 04:6a:92:55:8a:4e:41:ea:a0:0d:f0:c3:9c:5c:74: ec:58:4f:bb:69:8a:b5:30:cb:94:09:dc:78:43:2d: 71:17:2f:e4:50:60:fa:13:17:f7:f0:ae:3b:1b:df: 68:69:2c:a6:ed:99:e6:84:7d:c0:d7:5e:da:60:46: 5c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:00:58:5D:1C:EE:7C:9C:CE:38:6B:5C:10:D4:DD:52:5C:BB:AE:5B X509v3 Authority Key Identifier: keyid:0A:13:C6:E2:BA:54:49:99:73:85:20:F9:EB:33:58:36:C4:60:C8:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChPG4rpUSZlzhSD56zNYNsRgyMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911503D/CF01B2CCEB3E11ED8A96DB5EC4F9AE02/ChPG4rpUSZlzhSD56zNYNsRgyMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:f9:04:5b:6e:58:00:84:d2:b6:8d:d3:41:2a:ea:2c:69:19: 75:ac:0d:d8:e5:51:f0:a8:f1:b3:72:ca:62:38:e0:00:06:c9: 46:ad:c4:b3:72:e7:f7:ce:f1:d8:4d:de:9b:c1:a8:45:ca:48: 31:e8:e1:6c:aa:1c:45:ff:e6:d9:b1:61:0b:43:1b:82:ff:dc: f8:a4:c1:fa:b6:e0:89:f9:a5:cb:cf:cf:49:35:68:0a:e5:2e: 60:bf:6a:6b:88:67:29:75:3e:6f:0d:fd:48:99:04:9a:b8:85: 49:45:18:dc:59:1e:12:6c:9b:d2:e5:ad:7a:b6:e3:13:f7:05: aa:74:66:89:f5:f9:93:a4:c6:1f:5d:9a:32:4f:6d:6b:68:7f: 95:15:53:ce:c0:dd:c6:94:15:62:76:9a:e5:aa:62:d5:3d:2f: e1:cd:10:31:1e:80:a3:c0:ee:a7:60:bf:86:98:43:45:44:97: 75:e2:0d:f9:04:2b:73:a0:42:b0:70:7d:f7:9e:a5:8f:a1:36: 91:5c:5d:e6:af:20:c4:df:26:49:02:3e:bf:eb:37:01:e8:32: 77:ca:c1:96:aa:1e:dd:5b:83:d5:2d:2b:45:cc:67:86:d9:10: 7e:ff:92:08:57:b2:56:55:f8:f6:b9:3f:6b:06:76:85:70:c5: 8d:35:da:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTUwM0QxMTAvBgNVBAUTKDBBMTNDNkUyQkE1NDQ5OTk3Mzg1MjBGOUVCMzM1ODM2 QzQ2MEM4QzgwHhcNMjUwNTEzMDI1NTQ0WhcNMjUwNTIwMDI1NTQ0WjAYMRYwFAYD VQQDEw02ODIyYjRiMC01Nzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/kwyf7Zx5h3gsXa6aA/9M5j3K7jrhVcOi9cT4cnH/gmDtpX8Uv8q/VRzOu5 4yeaM+NfJthZ7Pm7ZQyYkQCYJvtgMiicPkMi9fKwLvB8B7y6FhmXY7FRaPnK95sA jVfkf2PoVTd4LAUqCChBr1fWJNSk04KCjX/AxV24WPcd5F1WVNTq/Qbts6JATLw6 d0ltqQfVBCptTzzvWjygOLBNi0Y52y3Vmx/CUw+PYARGaWO1boBSLtBL8+q0jMAM ng/DvsEEapJVik5B6qAN8MOcXHTsWE+7aYq1MMuUCdx4Qy1xFy/kUGD6Exf38K47 G99oaSym7ZnmhH3A117aYEZcmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLsAWF0c 7nyczjhrXBDU3VJcu65bMB8GA1UdIwQYMBaAFAoTxuK6VEmZc4Ug+eszWDbEYMjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTAzRC9DRjAxQjJDQ0VC M0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNabHpoU0Q1NnpOWU5zUmd5 TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoUEc0cnBVU1psemhTRDU2ek5ZTnNSZ3lNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTAzRC9DRjAxQjJDQ0VCM0UxMUVEOEE5NkRCNUVDNEY5QUUwMi9DaFBHNHJwVVNa bHpoU0Q1NnpOWU5zUmd5TWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv+QRbblgAhNK2jdNBKuosaRl1rA3Y5VHwqPGzcspiOOAABslGrcSz cuf3zvHYTd6bwahFykgx6OFsqhxF/+bZsWELQxuC/9z4pMH6tuCJ+aXLz89JNWgK 5S5gv2priGcpdT5vDf1ImQSauIVJRRjcWR4SbJvS5a16tuMT9wWqdGaJ9fmTpMYf XZoyT21raH+VFVPOwN3GlBVidprlqmLVPS/hzRAxHoCjwO6nYL+GmENFRJd14g35 BCtzoEKwcH33nqWPoTaRXF3mryDE3yZJAj6/6zcB6DJ3ysGWqh7dW4PVLStFzGeG 2RB+/5IIV7JWVfj2uT9rBnaFcMWNNdq7 -----END CERTIFICATE-----Generated at Wed May 14 01:28:20 2025 by rpki-client