$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: /nOX0VM951GoU4VfO8Ubb5qFYGwSrs/TM01slYV0JYQ= Subject key identifier: EB:75:0C:2C:86:C0:A3:E4:E4:9B:EB:36:51:C2:4C:C4:73:B4:DE:D0 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B30 Signing time: Wed 20 Aug 2025 19:19:48 +0000 Manifest this update: Wed 20 Aug 2025 19:19:47 +0000 Manifest next update: Wed 27 Aug 2025 19:19:47 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: Qk3cBfyd4W0SSnmGkD+drWjYH4vD3/SQfmSYjkxcRHg=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2872 (0xb38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Aug 20 19:19:47 2025 GMT Not After : Aug 27 19:19:47 2025 GMT Subject: CN=68a61fd3-ba69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:cd:f7:ee:24:28:27:78:38:63:0c:1f:f0: 0b:1a:cd:52:70:14:5d:40:da:23:e9:f7:06:6d:3b: 44:98:c8:97:06:20:7e:65:55:17:d1:4c:d7:6f:74: ae:37:4c:ce:db:06:da:7c:ba:cd:8f:c3:9a:b0:cc: 6d:6c:8a:ea:7b:85:86:64:d5:19:b6:fd:be:6b:ac: b5:06:07:a9:97:28:0a:00:9a:82:69:f7:34:9c:92: 09:18:dd:09:33:ee:ef:c7:64:b7:c2:0a:50:b0:74: 29:e2:22:ec:ed:de:10:f0:bc:93:f3:b0:af:f9:d4: 73:bf:75:2a:ad:69:0c:8f:c8:b9:f8:27:a8:b8:70: 6b:b7:8d:e1:1c:60:b2:1a:49:4d:80:79:90:36:5f: 9d:58:6c:c9:6e:a0:de:69:6c:3d:5e:60:1a:b7:fb: 4c:64:a2:a6:45:f5:81:c8:4e:c6:fa:e2:db:07:bb: bd:03:7d:88:4c:39:14:a5:4d:2d:e7:4c:e4:3f:1b: 51:4c:40:6c:89:05:ea:64:f1:2a:c8:ed:30:44:57: 25:61:fe:65:b6:10:03:3c:6b:a2:19:29:a2:34:db: 43:70:d5:c0:b4:40:59:54:bd:66:a3:f1:03:aa:d4: 9b:17:81:83:80:f9:41:e1:64:20:f4:23:f9:b1:f8: 79:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:75:0C:2C:86:C0:A3:E4:E4:9B:EB:36:51:C2:4C:C4:73:B4:DE:D0 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:4b:c0:ca:a3:a3:c1:f0:f7:0e:c1:ac:9a:8c:ed:54:88:53: 48:44:75:c0:44:5e:bb:fd:a5:ab:8e:60:6c:f2:0e:77:c3:3b: bd:36:b0:10:94:79:10:21:3f:22:6c:5c:19:ae:c4:5c:60:7f: ab:ec:76:b0:fa:4a:ac:8b:cd:0e:d6:99:8e:ad:db:79:5e:ff: 30:6d:53:8c:93:1f:19:d5:36:14:5c:91:2d:12:43:ff:12:d7: cf:58:5b:74:0e:52:62:1c:04:e1:b9:67:c7:41:fd:14:0d:14: 59:23:05:0f:73:7a:27:05:71:3d:3c:42:33:7f:61:0d:eb:d0: e4:66:19:a8:50:db:38:ad:2e:81:a4:fe:c9:d1:18:47:8a:d2: 9d:61:23:1e:a4:95:04:6d:eb:0d:45:4d:df:5f:58:af:ae:a9: 58:66:c2:32:31:3f:a9:e0:e4:38:74:f2:3d:fa:0b:d6:76:ef: 5f:7c:23:28:08:97:49:10:06:36:a7:5d:d1:2c:91:b6:66:d6: 3c:20:86:d8:de:b2:29:bd:01:c1:e6:cd:3a:a4:53:ef:27:3b: 38:64:f7:ec:ff:a2:8a:88:74:89:64:28:82:6c:ba:51:75:92: bc:90:fb:83:24:fc:83:f8:bc:73:f7:ea:d5:9f:02:70:c7:cb: fb:69:4f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwODIwMTkxOTQ3WhcNMjUwODI3MTkxOTQ3WjAYMRYwFAYD VQQDEw02OGE2MWZkMy1iYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj3N9+4kKCd4OGMMH/ALGs1ScBRdQNoj6fcGbTtEmMiXBiB+ZVUX0UzXb3Su N0zO2wbafLrNj8OasMxtbIrqe4WGZNUZtv2+a6y1BgeplygKAJqCafc0nJIJGN0J M+7vx2S3wgpQsHQp4iLs7d4Q8LyT87Cv+dRzv3UqrWkMj8i5+CeouHBrt43hHGCy GklNgHmQNl+dWGzJbqDeaWw9XmAat/tMZKKmRfWByE7G+uLbB7u9A32ITDkUpU0t 50zkPxtRTEBsiQXqZPEqyO0wRFclYf5lthADPGuiGSmiNNtDcNXAtEBZVL1mo/ED qtSbF4GDgPlB4WQg9CP5sfh5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOt1DCyG wKPk5JvrNlHCTMRztN7QMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQS8DKo6PB8PcOwayajO1UiFNIRHXARF67/aWrjmBs8g53wzu9NrAQ lHkQIT8ibFwZrsRcYH+r7Haw+kqsi80O1pmOrdt5Xv8wbVOMkx8Z1TYUXJEtEkP/ EtfPWFt0DlJiHAThuWfHQf0UDRRZIwUPc3onBXE9PEIzf2EN69DkZhmoUNs4rS6B pP7J0RhHitKdYSMepJUEbesNRU3fX1ivrqlYZsIyMT+p4OQ4dPI9+gvWdu9ffCMo CJdJEAY2p13RLJG2ZtY8IIbY3rIpvQHB5s06pFPvJzs4ZPfs/6KKiHSJZCiCbLpR dZK8kPuDJPyD+Lxz9+rVnwJwx8v7aU8f -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:42 2025 by rpki-client