$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: kNK4X8sP2XPcL9afKFwSPJY3DD3j3XkEo7JgNfuqU2U= Subject key identifier: FC:FA:C1:2B:74:03:2F:75:CB:A5:FB:B9:27:0C:72:AD:D1:80:34:B6 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BE1 Signing time: Wed 20 Aug 2025 18:57:23 +0000 Manifest this update: Wed 20 Aug 2025 18:57:22 +0000 Manifest next update: Wed 27 Aug 2025 18:57:22 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: +mDL0QE+uJKNmAAjGn3hxSuM3sGT4rh5EzJb4Ipcxew=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3052 (0xbec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Aug 20 18:57:22 2025 GMT Not After : Aug 27 18:57:22 2025 GMT Subject: CN=68a61a92-17cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ba:5a:ab:d9:ca:36:11:77:ad:27:3f:7f:a5: 82:00:21:8b:fe:31:1c:92:b6:6a:51:3e:e1:33:fd: dd:a3:2c:d1:bc:8d:e8:b9:ad:3f:ac:b0:47:8f:16: 2a:fd:9c:ca:4c:36:aa:89:cb:7b:0e:a0:08:79:d5: 6a:63:9e:c7:f4:6d:dd:00:d6:e9:ac:04:8d:f2:82: 5f:73:66:d9:32:ab:ef:48:53:d8:3c:7b:89:ae:fa: c8:e4:7e:8f:51:22:e4:f6:a0:db:67:83:67:ca:ec: d4:c3:4c:f4:b4:aa:b9:dc:58:b3:96:d6:b4:df:10: df:44:3f:ae:c3:2b:95:ec:1c:02:08:cc:cc:ad:07: ba:0d:dd:bb:00:2f:cc:ba:a6:6e:87:84:d3:21:35: b9:f0:ac:c6:a1:c4:15:65:05:92:ec:8c:bd:0f:cb: 4d:e9:97:eb:1b:3f:6b:46:bf:d9:5c:34:2e:80:3a: 0a:36:13:6d:41:7d:aa:ec:44:0e:a4:fc:d5:ff:e3: 6b:f4:21:51:23:6a:b2:b1:77:97:d7:8f:32:33:47: cd:13:36:19:f2:ee:5a:c6:d5:c1:7d:d0:25:14:aa: 34:00:29:51:a5:e6:91:34:c4:fc:0f:b4:b9:4a:29: 59:f5:d5:59:54:e6:13:c2:4f:63:b3:ff:b1:44:34: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FA:C1:2B:74:03:2F:75:CB:A5:FB:B9:27:0C:72:AD:D1:80:34:B6 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f9:b8:0f:b0:fb:a3:76:9a:54:77:b5:a4:f4:1b:2c:90:8d: 53:e3:d8:d8:c2:b6:62:b8:63:8b:0e:5a:03:87:97:c1:28:3a: 92:fb:29:dc:fd:2b:51:9b:82:3d:8c:cd:b0:fa:08:6c:83:1d: a2:50:fd:85:6d:f2:71:93:61:c2:19:87:cf:e5:11:b0:94:8a: d0:b2:04:6e:86:13:d0:d8:c2:43:04:0a:4e:27:64:79:4d:2b: 56:8a:07:ff:ae:26:18:fd:81:b8:ab:7a:30:e1:66:90:a0:cb: 49:8c:2a:81:ff:dd:6d:4d:8f:15:76:66:74:e4:e7:9d:39:5e: 29:68:38:00:f6:bc:3c:10:a6:fa:28:65:f0:6f:ea:c9:b8:3d: 7b:2b:39:d7:49:4f:c0:a0:4c:0c:52:c8:54:5f:6a:f8:43:1b: f8:98:e1:cd:d3:1d:6c:3b:a4:37:93:34:e6:fe:02:7c:3a:55: 2b:82:79:ec:87:58:fb:61:f5:d5:be:3c:c3:38:1c:bd:a2:f3: 67:02:48:53:ec:fb:b1:c5:52:89:62:f6:2f:95:c9:5c:35:66: a7:b9:ea:62:e7:37:91:1e:c7:80:b0:22:50:6e:b9:4d:81:70: ed:dc:53:db:55:42:c9:f1:30:93:ef:91:e9:24:b0:c3:50:ca: 08:e1:cf:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwODIwMTg1NzIyWhcNMjUwODI3MTg1NzIyWjAYMRYwFAYD VQQDEw02OGE2MWE5Mi0xN2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbpaq9nKNhF3rSc/f6WCACGL/jEckrZqUT7hM/3doyzRvI3oua0/rLBHjxYq /ZzKTDaqict7DqAIedVqY57H9G3dANbprASN8oJfc2bZMqvvSFPYPHuJrvrI5H6P USLk9qDbZ4NnyuzUw0z0tKq53Fizlta03xDfRD+uwyuV7BwCCMzMrQe6Dd27AC/M uqZuh4TTITW58KzGocQVZQWS7Iy9D8tN6ZfrGz9rRr/ZXDQugDoKNhNtQX2q7EQO pPzV/+Nr9CFRI2qysXeX148yM0fNEzYZ8u5axtXBfdAlFKo0AClRpeaRNMT8D7S5 SilZ9dVZVOYTwk9js/+xRDRoaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPz6wSt0 Ay91y6X7uScMcq3RgDS2MB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL+bgPsPujdppUd7Wk9BsskI1T49jYwrZiuGOLDloDh5fBKDqS+ync /StRm4I9jM2w+ghsgx2iUP2FbfJxk2HCGYfP5RGwlIrQsgRuhhPQ2MJDBApOJ2R5 TStWigf/riYY/YG4q3ow4WaQoMtJjCqB/91tTY8VdmZ05OedOV4paDgA9rw8EKb6 KGXwb+rJuD17KznXSU/AoEwMUshUX2r4Qxv4mOHN0x1sO6Q3kzTm/gJ8OlUrgnns h1j7YfXVvjzDOBy9ovNnAkhT7PuxxVKJYvYvlclcNWanuepi5zeRHseAsCJQbrlN gXDt3FPbVULJ8TCT75HpJLDDUMoI4c8G -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:03 2025 by rpki-client