$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft File: ChpgX3N8mCCzMTPlo1ecFw0idOw.mft (raw, json) Hash identifier: NMHD0W1ypeG/54VF4potgQZ7B6ImBVnm01oxk+BILlc= Subject key identifier: 0D:18:AB:E3:8D:7D:35:54:1E:15:D0:D9:86:F0:ED:AB:F8:F1:66:3E Authority key identifier: 0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC Certificate issuer: /CN=A91BD614/serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft Manifest number: 01EE Signing time: Sat 23 Aug 2025 02:58:49 +0000 Manifest this update: Sat 23 Aug 2025 02:58:48 +0000 Manifest next update: Sat 30 Aug 2025 02:58:48 +0000 Files and hashes: 1: ChpgX3N8mCCzMTPlo1ecFw0idOw.crl (hash: 2iZZn6SA3R4G91n0zn7nsCPawu7IzuYI5Xw1sSlWJqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD614, serialNumber=0A1A605F737C9820B33133E5A3579C170D2274EC Validity Not Before: Aug 23 02:58:48 2025 GMT Not After : Aug 30 02:58:48 2025 GMT Subject: CN=68a92e68-e944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:33:28:ed:1b:20:22:c2:6f:80:5f:10:b7:f6: 4a:37:e0:03:d9:91:3e:31:4d:e1:86:d6:84:0e:9c: 57:08:ac:78:5b:e9:e8:9d:6e:f4:6d:ec:17:8a:fd: 1d:61:5a:8c:8c:57:71:c1:f7:dc:46:71:15:a4:5c: 3c:7c:af:e8:05:fa:09:34:61:8a:00:39:0b:bd:06: 34:c8:8b:ec:50:9b:d9:0d:11:7b:40:ad:a8:3a:e4: 3e:84:07:49:a1:11:92:f8:77:35:3c:90:f4:f3:33: 50:ba:28:01:65:99:a9:1f:f4:2c:c6:91:88:13:21: 72:f0:24:68:0a:f6:36:49:8e:b5:b7:c4:ac:4d:75: 5c:81:83:2b:3b:38:c7:33:0e:e6:cf:a0:74:80:60: 55:5a:a8:d0:17:32:8a:ff:18:83:ce:48:20:73:f6: 08:bb:13:45:de:ac:3a:56:e9:01:6e:2a:cc:21:29: 89:7a:8a:08:04:11:25:ed:1e:b1:b3:41:76:e2:60: 3a:ec:7e:54:30:4f:ee:8b:c3:9f:05:14:b0:c5:65: c0:81:c3:c0:37:85:34:85:a8:71:3d:ad:f4:ff:b7: 2c:f1:c1:dd:a5:eb:da:46:07:0b:64:53:2d:78:f2: 25:1d:12:7a:a3:5f:d0:92:d6:60:dd:aa:54:8d:22: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:18:AB:E3:8D:7D:35:54:1E:15:D0:D9:86:F0:ED:AB:F8:F1:66:3E X509v3 Authority Key Identifier: keyid:0A:1A:60:5F:73:7C:98:20:B3:31:33:E5:A3:57:9C:17:0D:22:74:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ChpgX3N8mCCzMTPlo1ecFw0idOw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD614/1DF075E2BEDC11ED8E0ADD80C4F9AE02/ChpgX3N8mCCzMTPlo1ecFw0idOw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:87:35:1a:dd:63:5c:db:b6:be:8a:03:c5:1d:b5:dc:3d:89: d4:6c:62:b5:96:bf:b6:9b:4a:0c:26:cb:57:53:fc:44:8a:94: 0f:b5:a8:0f:55:a5:a6:d1:51:85:7c:e1:0c:83:c0:a6:65:58: be:28:96:44:4b:ef:c8:95:d6:20:09:55:20:2e:f9:95:2e:8e: 24:6a:9d:34:13:38:93:74:d0:d7:8f:04:d5:47:69:e4:91:d0: 62:4a:76:14:17:00:89:3e:75:75:7a:32:72:73:e4:ef:41:26: 8c:8c:2b:6c:2f:87:48:b7:94:f5:fc:31:4a:a4:bf:c9:27:8f: bb:a6:3f:b6:55:ce:0d:09:39:29:b1:64:07:87:4c:9c:b1:94: df:91:23:f2:6f:fd:97:1e:6a:2e:ed:a6:26:fd:71:be:9c:c1: 87:e1:53:39:96:48:c9:45:14:d4:72:71:de:7a:3e:97:61:d1: bf:07:6b:de:c8:c7:c7:33:dd:11:d4:65:97:a5:72:a7:52:d8: 01:54:eb:86:66:db:25:da:c2:23:7b:bf:e9:7c:60:15:b0:d7: a7:71:48:ef:3a:d8:0a:8e:42:5f:a9:db:cc:0c:79:b9:e4:29: 0a:f2:1a:b7:df:06:61:2f:ec:95:49:16:72:bf:9a:67:f3:86: 98:d9:7d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2MTQxMTAvBgNVBAUTKDBBMUE2MDVGNzM3Qzk4MjBCMzMxMzNFNUEzNTc5QzE3 MEQyMjc0RUMwHhcNMjUwODIzMDI1ODQ4WhcNMjUwODMwMDI1ODQ4WjAYMRYwFAYD VQQDEw02OGE5MmU2OC1lOTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjMo7RsgIsJvgF8Qt/ZKN+AD2ZE+MU3hhtaEDpxXCKx4W+nonW70bewXiv0d YVqMjFdxwffcRnEVpFw8fK/oBfoJNGGKADkLvQY0yIvsUJvZDRF7QK2oOuQ+hAdJ oRGS+Hc1PJD08zNQuigBZZmpH/QsxpGIEyFy8CRoCvY2SY61t8SsTXVcgYMrOzjH Mw7mz6B0gGBVWqjQFzKK/xiDzkggc/YIuxNF3qw6VukBbirMISmJeooIBBEl7R6x s0F24mA67H5UME/ui8OfBRSwxWXAgcPAN4U0hahxPa30/7cs8cHdpevaRgcLZFMt ePIlHRJ6o1/QktZg3apUjSJ00QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0Yq+ON fTVUHhXQ2Ybw7av48WY+MB8GA1UdIwQYMBaAFAoaYF9zfJggszEz5aNXnBcNInTs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDYxNC8xREYwNzVFMkJF REMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1DQ3pNVFBsbzFlY0Z3MGlk T3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NocGdYM044bUNDek1UUGxvMWVjRncwaWRPdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDYxNC8xREYwNzVFMkJFREMxMUVEOEUwQUREODBDNEY5QUUwMi9DaHBnWDNOOG1D Q3pNVFBsbzFlY0Z3MGlkT3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnhzUa3WNc27a+igPFHbXcPYnUbGK1lr+2m0oMJstXU/xEipQPtagP VaWm0VGFfOEMg8CmZVi+KJZES+/IldYgCVUgLvmVLo4kap00EziTdNDXjwTVR2nk kdBiSnYUFwCJPnV1ejJyc+TvQSaMjCtsL4dIt5T1/DFKpL/JJ4+7pj+2Vc4NCTkp sWQHh0ycsZTfkSPyb/2XHmou7aYm/XG+nMGH4VM5lkjJRRTUcnHeej6XYdG/B2ve yMfHM90R1GWXpXKnUtgBVOuGZtsl2sIje7/pfGAVsNencUjvOtgKjkJfqdvMDHm5 5CkK8hq33wZhL+yVSRZyv5pn84aY2X1b -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:56 2025 by rpki-client