$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: Wk8FuRZpISIUlAnUngkFF78p3MAIjBx1Lihod2bAMko= Subject key identifier: A6:25:51:C0:71:FD:0F:11:A3:DC:7D:6D:66:7B:77:5E:87:56:EB:B5 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 0167 Signing time: Sat 23 Aug 2025 04:29:59 +0000 Manifest this update: Sat 23 Aug 2025 04:29:58 +0000 Manifest next update: Sat 30 Aug 2025 04:29:58 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: h3RXHA7SWPJN57XLjYVjzXXk6bSyBJnuSrDVNgZXy4g=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: AYUrmB0VmSIUZcI9YP+6cvDLUzAB6YwYDgaBWNY/PRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Aug 23 04:29:58 2025 GMT Not After : Aug 30 04:29:58 2025 GMT Subject: CN=68a943c6-991f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:12:39:e6:87:06:c1:4b:02:0c:18:e6:e0:44: 65:f6:8b:9c:11:ce:25:39:e7:16:da:70:58:15:f1: ec:7f:41:47:fd:27:b7:c0:57:f1:a5:cf:2e:5c:8c: 9d:38:b5:36:3f:cb:71:eb:7d:9f:43:81:e3:1c:92: fa:63:cf:32:2f:3b:38:61:38:f4:75:e1:45:69:cf: 0f:98:08:40:f4:f9:43:46:7d:4f:b5:15:fa:52:38: 53:80:0f:1b:f9:f1:34:1b:2f:cb:cc:e1:06:0c:95: 68:ac:92:5e:b8:6d:2a:e5:50:91:e1:16:f7:82:00: 30:cb:c2:03:e9:a5:3b:7a:1b:a9:b3:48:d9:d0:9f: b3:e2:92:d9:1d:d3:eb:fd:df:36:3d:46:da:89:09: 2a:e6:10:d2:44:7f:b7:06:32:3f:e5:70:4c:e1:e6: 93:1d:cd:63:89:c8:02:54:42:5d:fb:e0:a9:31:64: 14:ef:21:4e:4a:55:98:26:2b:7e:ce:2f:07:3c:6b: 17:cb:10:a4:31:01:54:a7:05:2b:a9:dc:44:e7:ea: 50:13:c1:40:fc:6d:88:0a:0c:f8:19:02:86:6b:bc: 73:e0:41:ab:88:21:e3:75:50:05:31:50:71:8f:33: 95:c7:60:fb:07:8d:ac:d4:9e:f2:4e:2b:20:cc:c5: a6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:25:51:C0:71:FD:0F:11:A3:DC:7D:6D:66:7B:77:5E:87:56:EB:B5 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:c6:9d:27:f3:e0:d3:dc:5a:83:a1:3e:61:1c:4f:32:ce:d7: 5b:42:8f:ad:d2:31:77:7d:d6:0d:db:ee:00:92:93:eb:d9:b4: a1:ba:79:0a:b1:a0:6a:78:85:fd:4e:d0:39:1c:a2:9b:75:f3: 7b:bc:b8:1a:be:09:b9:81:dc:2e:51:ef:eb:e6:8d:54:96:89: c1:1c:6d:f7:ef:9d:0b:f0:d1:9a:51:74:7f:1e:79:43:ce:9c: 3a:cd:30:4a:92:d6:8b:37:62:b9:cc:a2:21:4b:14:81:15:35: 53:07:4f:e9:21:9a:30:45:8a:58:26:1d:e6:65:86:31:62:e8: fd:ba:0b:4c:24:5e:2e:29:55:e0:8a:c1:c2:78:1f:71:71:fb: 3b:2c:ba:6f:52:b5:d6:2b:11:5a:c0:0d:28:07:7b:1e:50:b7: 16:a2:d0:fe:27:53:f1:7d:c0:8c:9d:7b:87:e9:ab:4c:b6:99: da:35:70:a5:55:2e:d1:a2:c8:79:50:25:15:0d:e0:7a:d8:09: 3f:57:e8:7b:4f:0d:7a:45:bc:ca:95:13:c5:d1:02:a3:9c:b0: 45:2b:95:27:f4:51:4f:ed:4c:fc:61:82:c5:7d:32:e5:8e:67: 2f:3d:16:14:89:b5:ff:ef:14:eb:52:b9:11:b3:c2:47:3d:ff: fa:33:60:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkM1RDExMC8GA1UEBRMoMDg3NzdGQTM4MUJGMjU4RTBDQUMzN0Q1MDlFRjBCQUM3 MDY2NDg0NDAeFw0yNTA4MjMwNDI5NThaFw0yNTA4MzAwNDI5NThaMBgxFjAUBgNV BAMTDTY4YTk0M2M2LTk5MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3EjnmhwbBSwIMGObgRGX2i5wRziU55xbacFgV8ex/QUf9J7fAV/Glzy5cjJ04 tTY/y3HrfZ9DgeMckvpjzzIvOzhhOPR14UVpzw+YCED0+UNGfU+1FfpSOFOADxv5 8TQbL8vM4QYMlWiskl64bSrlUJHhFveCADDLwgPppTt6G6mzSNnQn7Piktkd0+v9 3zY9RtqJCSrmENJEf7cGMj/lcEzh5pMdzWOJyAJUQl374KkxZBTvIU5KVZgmK37O Lwc8axfLEKQxAVSnBSup3ETn6lATwUD8bYgKDPgZAoZrvHPgQauIIeN1UAUxUHGP M5XHYPsHjazUnvJOKyDMxab7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpiVRwHH9 DxGj3H1tZnt3XodW67UwHwYDVR0jBBgwFoAUCHd/o4G/JY4MrDfVCe8LrHBmSEQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyQzVELzNCOURENDEwOTJD NDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNF US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0hkX280R19KWTRNckRmVkNlOExySEJtU0VRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy QzVELzNCOURENDEwOTJDNDExRUVCNTIxQkI0OUM0RjlBRTAyL0NIZF9vNEdfSlk0 TXJEZlZDZThMckhCbVNFUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzGnSfz4NPcWoOhPmEcTzLO11tCj63SMXd91g3b7gCSk+vZtKG6eQqx oGp4hf1O0Dkcopt183u8uBq+CbmB3C5R7+vmjVSWicEcbffvnQvw0ZpRdH8eeUPO nDrNMEqS1os3YrnMoiFLFIEVNVMHT+khmjBFilgmHeZlhjFi6P26C0wkXi4pVeCK wcJ4H3Fx+zssum9StdYrEVrADSgHex5Qtxai0P4nU/F9wIyde4fpq0y2mdo1cKVV LtGiyHlQJRUN4HrYCT9X6HtPDXpFvMqVE8XRAqOcsEUrlSf0UU/tTPxhgsV9MuWO Zy89FhSJtf/vFOtSuRGzwkc9//ozYLo= -----END CERTIFICATE-----Generated at Sat Aug 23 18:09:07 2025 by rpki-client