$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: FniSYWs6jZ1ndj7Ps4su7IDgaUiAC2ci7qHmLRScXvc= Subject key identifier: 89:BC:F6:E1:9B:59:70:EC:51:2A:F7:E0:42:98:A5:D3:3E:93:A4:C9 Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 019C Signing time: Tue 13 May 2025 02:39:54 +0000 Manifest this update: Tue 13 May 2025 02:39:53 +0000 Manifest next update: Tue 20 May 2025 02:39:53 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: OU1ECB6NtQ+vnbd7Uy9NWBbHaKpUquhvq+QcodTDuIs=) 2: 1E925A56BEE111ED83037109C4F9AE02.roa (hash: OZOdqMdYJODRwduAM2vrnbTMaX+VLIhkdE52EH6O7iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: May 13 02:39:53 2025 GMT Not After : May 20 02:39:53 2025 GMT Subject: CN=6822b0f9-67fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:de:4a:c7:3f:35:9b:d5:07:d3:55:a5:ae: 29:5e:fc:d1:e8:1e:28:05:0b:a6:9b:7f:d5:06:a7: 69:b7:91:b4:59:07:70:cf:de:90:63:87:d2:ea:44: 44:c1:c7:58:c1:64:bd:02:16:09:60:0c:21:7d:3d: c6:07:b3:1c:92:40:a2:88:17:19:cb:32:cd:ce:49: e6:ab:ea:05:22:51:20:16:80:a9:3a:6e:33:1a:1b: 18:46:88:69:1c:f4:d7:a8:94:dd:f6:c2:b8:ed:33: d7:7b:ac:f1:7e:8a:f8:ae:73:5c:e6:ab:0b:06:ec: 5d:da:c8:4d:70:cc:83:21:9c:16:2d:d7:5f:49:94: 5d:f4:a5:e5:35:00:d9:1b:62:1b:13:03:cc:34:5a: 0d:cc:ab:8a:bb:f8:19:95:31:71:81:43:61:74:20: 5c:34:d4:39:6f:c0:3d:42:18:7d:40:e6:76:79:26: 84:33:65:51:17:b8:44:44:cc:23:db:57:17:e3:17: b3:94:0e:82:12:5d:ea:ec:3a:20:83:ff:e3:82:02: da:2b:87:72:56:b4:5e:08:ac:09:20:53:b4:f0:44: db:cb:3d:b4:1f:cd:b1:5d:f4:e8:2e:3d:f7:08:b2: 7c:07:cb:d3:89:f4:a6:10:ad:24:3c:3b:2e:ca:9c: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BC:F6:E1:9B:59:70:EC:51:2A:F7:E0:42:98:A5:D3:3E:93:A4:C9 X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:6e:67:01:c2:9b:3c:cd:b7:e0:6f:8c:32:7b:91:ef:0d:ae: 82:4c:d3:be:ec:50:db:87:3a:af:b2:d6:93:c3:71:ee:00:48: 4f:f9:88:58:8a:56:f5:0b:88:c5:b6:27:91:bf:fc:9d:9c:64: 6e:1f:03:58:20:6a:3a:ee:32:ab:a7:98:c6:c7:16:86:4f:6d: f0:51:fa:c7:b4:73:a6:95:61:98:3b:f5:80:a8:9a:f5:d4:7e: c2:cd:bc:2e:0d:2f:68:eb:80:c0:c6:0c:c7:28:06:40:b2:bf: 0f:ef:61:ca:91:65:1f:97:99:80:48:a5:94:da:2a:b9:27:0f: da:c3:c0:a7:98:06:09:9d:0a:01:e5:93:d2:37:1c:ac:2e:09: 3f:5c:bc:d1:d4:3a:f7:40:e1:ac:f2:04:f5:e1:68:4c:38:1c: f7:9e:46:4d:a6:08:94:ce:f4:9d:65:dd:1f:4a:6b:e4:b5:9e: 59:60:2a:39:2e:a2:a9:eb:eb:a1:b4:27:3f:ed:aa:82:cd:d2: 10:d7:0f:db:ef:c0:39:2e:61:2e:71:4d:f3:c7:df:27:03:ef: f2:bd:02:91:c0:d8:3f:31:2e:32:3c:cd:c2:71:61:6d:67:0a: 09:23:f5:bf:1a:47:07:b9:9d:e5:b4:09:f9:d2:9e:8d:23:b9: ab:e2:a7:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjUwNTEzMDIzOTUzWhcNMjUwNTIwMDIzOTUzWjAYMRYwFAYD VQQDEw02ODIyYjBmOS02N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4LeSsc/NZvVB9NVpa4pXvzR6B4oBQumm3/VBqdpt5G0WQdwz96QY4fS6kRE wcdYwWS9AhYJYAwhfT3GB7MckkCiiBcZyzLNzknmq+oFIlEgFoCpOm4zGhsYRohp HPTXqJTd9sK47TPXe6zxfor4rnNc5qsLBuxd2shNcMyDIZwWLddfSZRd9KXlNQDZ G2IbEwPMNFoNzKuKu/gZlTFxgUNhdCBcNNQ5b8A9Qhh9QOZ2eSaEM2VRF7hERMwj 21cX4xezlA6CEl3q7Dogg//jggLaK4dyVrReCKwJIFO08ETbyz20H82xXfToLj33 CLJ8B8vTifSmEK0kPDsuypxYWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm89uGb WXDsUSr34EKYpdM+k6TJMB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzbmcBwps8zbfgb4wye5HvDa6CTNO+7FDbhzqvstaTw3HuAEhP+YhY ilb1C4jFtieRv/ydnGRuHwNYIGo67jKrp5jGxxaGT23wUfrHtHOmlWGYO/WAqJr1 1H7CzbwuDS9o64DAxgzHKAZAsr8P72HKkWUfl5mASKWU2iq5Jw/aw8CnmAYJnQoB 5ZPSNxysLgk/XLzR1Dr3QOGs8gT14WhMOBz3nkZNpgiUzvSdZd0fSmvktZ5ZYCo5 LqKp6+uhtCc/7aqCzdIQ1w/b78A5LmEucU3zx98nA+/yvQKRwNg/MS4yPM3CcWFt ZwoJI/W/GkcHuZ3ltAn50p6NI7mr4qcO -----END CERTIFICATE-----Generated at Tue May 13 11:33:40 2025 by rpki-client