$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: /Kcwq9QdzkQQcmqiYEe1s+v4i7scXJYSU9Xxv3u1Yss= Subject key identifier: D3:FE:04:2D:1D:79:65:FC:1B:3F:37:16:4D:90:D6:0C:FD:2D:89:6A Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BBE Signing time: Thu 12 Jun 2025 18:45:28 +0000 Manifest this update: Thu 12 Jun 2025 18:45:27 +0000 Manifest next update: Thu 19 Jun 2025 18:45:27 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: yeDko36tFfUmqAVfK1NooyjxTlxnN6lIY2qsPhq/QTg=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Jun 12 18:45:27 2025 GMT Not After : Jun 19 18:45:27 2025 GMT Subject: CN=684b2048-caa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:0d:37:79:fa:ed:e6:3a:70:e5:9d:28:d8: ef:e7:dc:eb:9f:fd:aa:09:58:f5:eb:6f:dd:72:8f: 1b:a4:45:16:bc:56:e6:41:c8:a8:6f:9e:57:c6:14: c0:17:ca:cc:f9:ce:1f:8e:32:b4:1c:2a:de:c1:a1: 5f:12:18:fd:e8:59:ea:10:88:4d:e2:85:81:06:9f: 22:73:4b:95:08:ce:ae:cc:96:f9:ca:22:16:9e:39: 52:67:c0:ec:04:26:11:86:38:6f:48:99:0a:7c:26: 62:64:a4:99:23:07:91:9e:69:4c:7d:b1:ed:12:f6: d9:ae:e9:9f:1f:84:c0:43:4c:87:39:2b:9d:3d:86: 58:ea:af:64:48:46:5c:ee:ca:83:19:20:9d:e7:f2: 13:18:37:e4:19:6a:e4:2e:50:30:24:6e:3e:74:26: b8:d4:d3:0d:a0:8b:72:ed:c2:71:f5:a0:11:9e:a1: cc:11:11:06:b6:ef:00:da:6b:07:a2:68:20:9b:cb: 83:2d:60:7e:98:a4:9a:09:e2:8b:32:99:25:3a:ec: 7d:fa:41:50:8b:55:ed:10:71:27:f1:0d:d6:37:8a: ea:67:8e:53:d9:15:7a:d5:9f:ff:8f:cc:c7:31:d6: 62:9b:42:d2:d4:e0:e2:58:a2:90:fd:9f:2b:ab:50: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FE:04:2D:1D:79:65:FC:1B:3F:37:16:4D:90:D6:0C:FD:2D:89:6A X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:4f:bd:2e:4b:1a:96:e5:57:a9:70:67:71:87:f6:20:14:bc: 9d:73:dc:44:6b:0a:28:fb:71:ae:81:2a:44:41:6d:7b:05:bf: f3:6c:d3:13:69:1e:3d:24:af:00:4a:6e:7b:4e:1a:8b:93:32: 6c:a2:18:7d:f7:8f:83:2b:b1:0f:9a:65:16:22:a3:73:21:11: ab:38:aa:75:ac:bd:e9:83:2c:8a:0c:6c:3a:33:07:fc:fb:37: 34:41:d3:0f:8e:08:59:a2:5d:9b:92:f5:ea:af:ae:e6:48:61: b2:a3:e6:9a:73:58:1a:f8:7d:c8:2b:26:f9:97:06:89:b8:06: 72:80:fe:08:58:55:04:4b:72:4d:86:9e:f4:ad:0d:79:05:c3: ec:7f:45:72:20:16:b3:4a:2d:7c:ad:5e:0d:18:85:86:21:11: bc:52:1a:84:94:46:77:be:7e:6d:24:e0:91:bd:8c:86:2f:43: 8c:1a:93:32:68:27:e7:ab:bd:23:75:4d:70:82:c8:64:51:32: f3:4b:9a:72:28:ae:fb:87:84:4d:76:16:1b:46:04:0a:83:1a: 3d:c4:a4:37:9f:41:f5:78:1f:45:45:3e:32:01:34:51:45:b3: 78:fe:3e:84:f9:95:fa:33:aa:d7:ca:67:b2:b7:89:62:ec:ed: 35:65:37:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwNjEyMTg0NTI3WhcNMjUwNjE5MTg0NTI3WjAYMRYwFAYD VQQDEw02ODRiMjA0OC1jYWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqwNN3n67eY6cOWdKNjv59zrn/2qCVj162/dco8bpEUWvFbmQciob55XxhTA F8rM+c4fjjK0HCrewaFfEhj96FnqEIhN4oWBBp8ic0uVCM6uzJb5yiIWnjlSZ8Ds BCYRhjhvSJkKfCZiZKSZIweRnmlMfbHtEvbZrumfH4TAQ0yHOSudPYZY6q9kSEZc 7sqDGSCd5/ITGDfkGWrkLlAwJG4+dCa41NMNoIty7cJx9aARnqHMEREGtu8A2msH omggm8uDLWB+mKSaCeKLMpklOux9+kFQi1XtEHEn8Q3WN4rqZ45T2RV61Z//j8zH MdZim0LS1ODiWKKQ/Z8rq1B4DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNP+BC0d eWX8Gz83Fk2Q1gz9LYlqMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjT70uSxqW5VepcGdxh/YgFLydc9xEawoo+3GugSpEQW17Bb/zbNMT aR49JK8ASm57ThqLkzJsohh994+DK7EPmmUWIqNzIRGrOKp1rL3pgyyKDGw6Mwf8 +zc0QdMPjghZol2bkvXqr67mSGGyo+aac1ga+H3IKyb5lwaJuAZygP4IWFUES3JN hp70rQ15BcPsf0VyIBazSi18rV4NGIWGIRG8UhqElEZ3vn5tJOCRvYyGL0OMGpMy aCfnq70jdU1wgshkUTLzS5pyKK77h4RNdhYbRgQKgxo9xKQ3n0H1eB9FRT4yATRR RbN4/j6E+ZX6M6rXymeyt4li7O01ZTcg -----END CERTIFICATE-----Generated at Fri Jun 13 15:31:29 2025 by rpki-client