$ rpki-client -vvf rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft File: CHQTSbZiijmB94o3MLiYg-PXa8o.mft (raw, json) Hash identifier: 7CCks9rT93V7vfmvsBaoa6kFmHINFacbriayXCfjrPw= Subject key identifier: 62:80:70:BF:69:11:9B:C9:CE:CE:E4:E2:60:92:BD:BD:17:ED:D8:40 Authority key identifier: 08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA Certificate issuer: /CN=A91712A8/serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Certificate serial: 06BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft Manifest number: 06B7 Signing time: Sat 18 Oct 2025 23:37:10 +0000 Manifest this update: Sat 18 Oct 2025 23:37:09 +0000 Manifest next update: Sat 25 Oct 2025 23:37:09 +0000 Files and hashes: 1: CHQTSbZiijmB94o3MLiYg-PXa8o.crl (hash: Xbd7rvIrAFX1mxbK5EI0DKVXMyAH70pGWw9yPTLE+hE=) 2: B69DB4D27D6911EBA420FC6AC4F9AE02.roa (hash: FCcszwJptQkcVppu2l7EfA+c1nSvvhedE2ZFRuB0CdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1726 (0x6be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91712A8, serialNumber=08741349B6628A3981F78A3730B89883E3D76BCA Validity Not Before: Oct 18 23:37:09 2025 GMT Not After : Oct 25 23:37:09 2025 GMT Subject: CN=68f424a6-bc8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:7f:4b:26:8e:56:50:2b:7e:8a:79:87:a7: a3:f7:b2:ef:bc:c2:a9:8d:7d:2f:d1:c2:f8:91:3b: 8b:1c:2e:af:b3:67:94:f1:26:28:f9:fe:63:31:bb: 71:a6:b8:74:7d:0a:b9:f3:02:35:58:6d:a5:e9:59: 8c:f2:d8:8b:ce:2e:f0:4d:9c:30:7d:51:0a:fd:7a: 4c:ef:93:37:da:0d:42:9c:62:ba:c7:52:d4:ce:77: 02:e9:5c:02:09:a6:bd:b3:a7:e6:2c:ec:4d:9e:8f: 25:2d:61:fc:5b:53:5e:71:d9:ec:9b:3a:07:36:cb: 4f:1c:48:31:29:83:e8:67:7f:5f:dc:5e:27:24:c2: ed:a1:71:4f:8d:38:c0:ce:97:c8:16:40:14:9d:e2: 80:b6:9f:39:21:27:2e:19:dd:cc:aa:9b:e5:f2:cb: a8:17:d8:e6:3f:13:c6:d4:bf:5d:20:ee:5e:15:08: 84:67:a5:c4:4a:b4:da:89:1e:eb:cf:c1:88:ef:22: 9d:b7:a9:e9:40:a4:a0:08:cf:21:be:01:ba:8c:bf: 74:7a:fc:99:99:9e:d5:55:c8:38:68:85:bb:0c:24: 94:cc:17:54:82:eb:2a:ec:1c:06:3a:35:14:5c:4f: 33:0c:78:6d:61:dc:99:c0:b8:12:03:7b:5e:ab:ce: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:80:70:BF:69:11:9B:C9:CE:CE:E4:E2:60:92:BD:BD:17:ED:D8:40 X509v3 Authority Key Identifier: keyid:08:74:13:49:B6:62:8A:39:81:F7:8A:37:30:B8:98:83:E3:D7:6B:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHQTSbZiijmB94o3MLiYg-PXa8o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91712A8/46500F8C7D6811EBA432176AC4F9AE02/CHQTSbZiijmB94o3MLiYg-PXa8o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5a:a8:70:9e:fc:45:0b:e2:9b:72:e9:1f:2d:4d:38:25:5a: ff:67:e0:38:fe:31:5f:ec:d7:d7:67:14:27:8e:fa:91:8a:b6: 28:61:ee:43:10:b6:87:23:4f:c6:56:63:00:d9:8b:1d:a7:8b: a5:2f:61:98:59:c2:36:83:9f:a1:c3:7f:e6:61:19:7e:61:0c: e2:13:d5:74:57:90:45:6c:0d:c7:b7:f9:50:24:11:8a:27:ca: b8:a8:17:2b:4f:00:a1:59:f7:aa:24:47:53:9e:f3:ab:90:76: c9:19:41:1d:6f:fd:5c:87:86:e0:0d:f2:1d:89:30:14:de:47: 4a:fa:b2:65:63:7b:4b:7e:a8:ad:7b:be:ae:86:69:db:a2:72: ab:fb:9c:43:be:0d:b7:7e:50:83:75:94:08:30:70:36:af:33: 18:a4:7f:7a:07:03:e9:c4:11:21:ba:c0:ed:e8:89:62:c7:0a: 26:ed:f7:e6:eb:1c:42:76:65:63:ea:45:47:bd:03:8c:7e:7f: 28:3d:1c:0c:ef:7a:16:fd:ae:2c:6e:3a:b4:87:b2:12:72:c1: 58:17:6c:5e:fd:90:df:93:e9:b2:25:24:7f:46:14:54:90:51: 53:1c:6e:42:60:0c:2e:33:16:0c:56:49:4f:71:2f:cc:30:0a: c9:6b:b9:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEyQTgxMTAvBgNVBAUTKDA4NzQxMzQ5QjY2MjhBMzk4MUY3OEEzNzMwQjg5ODgz RTNENzZCQ0EwHhcNMjUxMDE4MjMzNzA5WhcNMjUxMDI1MjMzNzA5WjAYMRYwFAYD VQQDEw02OGY0MjRhNi1iYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBN/SyaOVlArfop5h6ej97LvvMKpjX0v0cL4kTuLHC6vs2eU8SYo+f5jMbtx prh0fQq58wI1WG2l6VmM8tiLzi7wTZwwfVEK/XpM75M32g1CnGK6x1LUzncC6VwC Caa9s6fmLOxNno8lLWH8W1NecdnsmzoHNstPHEgxKYPoZ39f3F4nJMLtoXFPjTjA zpfIFkAUneKAtp85IScuGd3Mqpvl8suoF9jmPxPG1L9dIO5eFQiEZ6XESrTaiR7r z8GI7yKdt6npQKSgCM8hvgG6jL90evyZmZ7VVcg4aIW7DCSUzBdUgusq7BwGOjUU XE8zDHhtYdyZwLgSA3teq846QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKAcL9p EZvJzs7k4mCSvb0X7dhAMB8GA1UdIwQYMBaAFAh0E0m2Yoo5gfeKNzC4mIPj12vK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTJBOC80NjUwMEY4QzdE NjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlqbUI5NG8zTUxpWWctUFhh OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIUVRTYlppaWptQjk0bzNNTGlZZy1QWGE4by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTJBOC80NjUwMEY4QzdENjgxMUVCQTQzMjE3NkFDNEY5QUUwMi9DSFFUU2JaaWlq bUI5NG8zTUxpWWctUFhhOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOWqhwnvxFC+KbcukfLU04JVr/Z+A4/jFf7NfXZxQnjvqRirYoYe5D ELaHI0/GVmMA2Ysdp4ulL2GYWcI2g5+hw3/mYRl+YQziE9V0V5BFbA3Ht/lQJBGK J8q4qBcrTwChWfeqJEdTnvOrkHbJGUEdb/1ch4bgDfIdiTAU3kdK+rJlY3tLfqit e76uhmnbonKr+5xDvg23flCDdZQIMHA2rzMYpH96BwPpxBEhusDt6Ilixwom7ffm 6xxCdmVj6kVHvQOMfn8oPRwM73oW/a4sbjq0h7IScsFYF2xe/ZDfk+myJSR/RhRU kFFTHG5CYAwuMxYMVklPcS/MMArJa7lr -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:03 2025 by rpki-client