$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json) Hash identifier: yWmfXcqbyXhC+NdwfdW4PP/yIiFmAsscRlrmDTh35tI= Subject key identifier: 0A:DC:2C:37:98:BD:29:94:7A:16:96:CD:75:99:2A:46:4D:96:B3:7C Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft Manifest number: 0666 Signing time: Sat 10 May 2025 22:00:43 +0000 Manifest this update: Sat 10 May 2025 22:00:43 +0000 Manifest next update: Sat 17 May 2025 22:00:43 +0000 Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: 2GqiHAowO4cv4oYtGotZbZlEwdRlcKgVnKu5b64qK0s=) 2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: FCcszwJptQkcVppu2l7EfA+c1nSvvhedE2ZFRuB0CdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Validity Not Before: May 10 22:00:43 2025 GMT Not After : May 17 22:00:43 2025 GMT Subject: CN=681fcc8b-6692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9a:1d:e1:99:15:68:99:3a:84:e4:92:85:28: 58:da:2f:9a:e2:db:78:4c:c8:c2:eb:d5:b4:17:b0: ae:38:71:9c:17:94:e5:72:30:3e:51:2c:fb:c6:d4: 01:00:87:c9:ec:3c:a7:05:28:c0:a9:99:c2:7c:c3: b1:1e:0d:03:82:e7:ce:4c:15:1b:0c:50:57:1d:1b: 48:07:ef:a5:82:e4:b7:03:7e:8e:80:b2:e3:28:79: 25:f0:b1:69:ca:ed:b6:35:4f:21:4a:f7:f3:ce:62: 5d:0d:05:16:7e:dc:73:bf:35:ba:56:a2:6b:7b:bc: 8b:d3:af:e1:29:ee:b7:1f:91:46:41:05:4a:a4:c3: 64:ed:d1:81:6d:cc:9e:97:d5:60:c3:8a:3e:0d:04: ee:dd:26:25:a8:d6:f9:cd:5b:3c:80:95:ae:76:a9: 60:10:67:6d:4b:94:ae:bc:b3:62:6e:25:00:1f:e6: 82:38:32:b8:82:ed:e3:51:1a:e0:5e:51:30:1c:ec: 2b:48:27:33:31:9e:ed:1c:98:c5:93:6c:56:ef:db: ad:68:73:dd:dd:ec:f2:77:ea:80:f9:f8:db:59:a9: ce:1d:c8:c9:b5:99:14:78:ec:fe:9f:ea:bb:61:3e: e7:2f:26:72:a0:d3:13:2d:83:9f:02:f4:9e:ab:dd: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:2C:37:98:BD:29:94:7A:16:96:CD:75:99:2A:46:4D:96:B3:7C X509v3 Authority Key Identifier: keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:c5:09:c8:52:e0:2f:ab:16:d9:2f:29:58:3d:ae:fa:44:af: d2:02:2c:dd:51:fa:ca:9f:73:13:3d:a0:94:70:b5:2d:ff:81: 9a:ae:14:5c:a6:44:f6:b4:65:03:0c:91:c2:6e:b7:4c:dc:1e: 1e:6e:c5:91:8e:ec:69:b7:ac:e9:39:aa:54:cd:2d:1c:6e:72: ed:83:a7:63:69:91:45:e4:a5:38:37:6d:9f:63:61:e6:37:33: 30:db:21:d9:4d:a0:94:e1:75:63:1a:7a:68:70:8d:17:22:12: 51:f8:c2:16:77:f3:eb:1e:c1:97:0b:19:44:c5:cb:26:e5:9c: af:bd:35:64:13:68:2d:dd:97:62:57:a1:08:f5:75:39:49:ce: 8d:98:17:a6:0b:fd:49:56:d0:3b:35:3f:90:ae:da:23:22:fa: 5f:d4:b6:bb:8f:52:23:fc:dc:2d:fb:47:1a:95:76:8f:8e:ed: a2:a9:dd:c1:c1:d4:87:ba:3b:fa:fb:6b:5c:a8:b4:50:40:90: c5:ff:7a:2f:d2:e9:4e:f7:7a:9f:1f:3c:3a:d7:ed:93:5a:88: d5:ec:96:2d:e6:2e:2b:16:a5:00:96:5a:9a:9f:5f:93:fc:ca: 06:c0:17:f3:14:40:2a:b4:ae:7a:c7:6a:52:5b:3d:c6:af:e5: 92:90:d6:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyQTgxMTAvBgNVBAUTKDA4NzQxMzQ5QjY2MjhBMzk4MUY3OEEzNzMwQjg5ODgz RTNENzZCQ0EwHhcNMjUwNTEwMjIwMDQzWhcNMjUwNTE3MjIwMDQzWjAYMRYwFAYD VQQDEw02ODFmY2M4Yi02NjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Jod4ZkVaJk6hOSShShY2i+a4tt4TMjC69W0F7CuOHGcF5TlcjA+USz7xtQB AIfJ7DynBSjAqZnCfMOxHg0DgufOTBUbDFBXHRtIB++lguS3A36OgLLjKHkl8LFp yu22NU8hSvfzzmJdDQUWftxzvzW6VqJre7yL06/hKe63H5FGQQVKpMNk7dGBbcye l9Vgw4o+DQTu3SYlqNb5zVs8gJWudqlgEGdtS5SuvLNibiUAH+aCODK4gu3jURrg XlEwHOwrSCczMZ7tHJjFk2xW79utaHPd3ezyd+qA+fjbWanOHcjJtZkUeOz+n+q7 YT7nLyZyoNMTLYOfAvSeq93cPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArcLDeY vSmUehaWzXWZKkZNlrN8MB8GA1UdIwQYMBaAFAh0E0m2Yoo5gfeKNzC4mIPj12vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTJBOC80NjUwMEY4QzdE NjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlqbUI5NG8zTUxpWWctUFhh OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIUVRTYlppaWptQjk0bzNNTGlZZy1QWGE4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTJBOC80NjUwMEY4QzdENjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlq bUI5NG8zTUxpWWctUFhhOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDVxQnIUuAvqxbZLylYPa76RK/SAizdUfrKn3MTPaCUcLUt/4GarhRc pkT2tGUDDJHCbrdM3B4ebsWRjuxpt6zpOapUzS0cbnLtg6djaZFF5KU4N22fY2Hm NzMw2yHZTaCU4XVjGnpocI0XIhJR+MIWd/PrHsGXCxlExcsm5ZyvvTVkE2gt3Zdi V6EI9XU5Sc6NmBemC/1JVtA7NT+QrtojIvpf1La7j1Ij/Nwt+0calXaPju2iqd3B wdSHujv6+2tcqLRQQJDF/3ov0ulO93qfHzw61+2TWojV7JYt5i4rFqUAllqan1+T /MoGwBfzFEAqtK56x2pSWz3Gr+WSkNZG -----END CERTIFICATE-----Generated at Mon May 12 19:42:28 2025 by rpki-client