$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: s/I03Q4AgA3unsuGvULsiKYai04trY9hEBFzC0kJoNs= Subject key identifier: 53:7D:CC:6A:A2:F8:B9:0F:8B:87:22:F2:DA:DC:81:A6:D4:76:76:09 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B0A Signing time: Fri 06 Jun 2025 19:22:27 +0000 Manifest this update: Fri 06 Jun 2025 19:22:26 +0000 Manifest next update: Fri 13 Jun 2025 19:22:26 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: dM4vkaf+3/OF/L7dtqdrjFyRxsJWjrf0RbtSk5bG6IY=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 19:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Jun 6 19:22:26 2025 GMT Not After : Jun 13 19:22:26 2025 GMT Subject: CN=68433ff2-c9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:0b:28:87:23:5b:e9:72:84:86:b0:d9:3c: 96:63:b1:78:60:ad:5f:e7:20:80:5d:76:9d:03:9d: e3:3c:e0:cf:06:9e:b8:67:f6:4a:c9:ec:14:06:07: 9a:fe:14:ef:1a:d8:d4:66:7b:c7:5d:51:f5:a6:28: 85:cb:ce:5a:5d:bd:ba:a6:4e:19:28:6c:21:90:4d: 0b:72:0e:1a:39:01:07:08:19:98:56:95:87:d7:49: e3:1f:1c:f9:92:75:bc:3d:48:f2:53:59:b7:ec:bd: 59:cd:34:f7:5f:22:ae:39:ea:14:f7:01:b2:1d:53: f7:f2:bd:ea:a4:0a:48:19:be:fe:ea:08:35:c5:a9: 9c:74:fe:3c:ba:36:4b:65:f0:01:f1:c6:ae:54:de: b4:a3:b3:26:a1:ea:24:98:3b:75:a9:72:d6:bf:6e: de:5d:d8:c6:11:59:7f:bf:7c:db:0f:f5:61:fb:52: 2b:a2:9f:90:c5:d4:5a:e9:36:fb:e3:39:75:43:d7: bf:62:84:1d:09:29:4f:4e:3b:66:b3:94:36:4f:24: d2:61:b6:f3:5e:13:d2:61:29:38:ce:70:d2:29:46: dd:18:27:d5:c3:7e:4d:72:a7:c5:0b:cb:ca:f7:84: fa:59:19:f9:2d:b8:9d:d5:7c:f8:24:e9:a4:f6:8e: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7D:CC:6A:A2:F8:B9:0F:8B:87:22:F2:DA:DC:81:A6:D4:76:76:09 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9e:f8:54:b5:7b:d9:72:4f:25:c5:ec:9b:95:6b:d5:70:18: f5:bc:2d:b3:7a:58:a0:ab:c2:57:fa:1d:0d:75:92:a3:86:3a: e0:74:ee:42:ec:40:ac:f8:6c:64:be:f3:da:94:a1:ee:3a:af: fc:5f:fc:49:7d:b8:d4:33:a2:c1:1d:68:55:af:1a:e3:00:03: 02:ce:d4:56:fa:13:57:52:09:25:12:2c:2d:08:a7:69:96:ad: c1:1c:a1:c9:de:fd:cc:44:5b:ff:12:6e:44:09:8b:43:94:7f: 19:9b:00:85:96:29:00:a2:07:0f:8e:a9:2e:29:b8:13:6f:a7: 4d:b0:c5:e7:89:3b:a8:8f:a2:8c:02:c1:2c:9d:02:4a:4b:c2: d7:7a:af:0a:3a:7d:5d:a3:24:2d:fa:aa:f5:af:23:d6:f6:54: 4e:e8:43:08:0a:09:9f:45:48:b8:af:40:17:8d:f7:00:1a:1a: 6b:af:e1:82:fb:75:2f:76:4f:a9:a7:fb:d3:a6:ef:cd:ed:f9: c1:a3:69:52:b5:bb:f9:0d:6e:d3:12:bb:c0:1d:4f:7b:80:60: f3:98:59:84:d3:f9:a9:aa:e5:2f:50:4d:54:b0:b7:8b:67:9c: fe:a0:b0:2b:e3:42:03:99:8e:ef:ed:90:f4:10:f1:49:f8:ce: 7f:ed:2a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwNjA2MTkyMjI2WhcNMjUwNjEzMTkyMjI2WjAYMRYwFAYD VQQDEw02ODQzM2ZmMi1jOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyn8LKIcjW+lyhIaw2TyWY7F4YK1f5yCAXXadA53jPODPBp64Z/ZKyewUBgea /hTvGtjUZnvHXVH1piiFy85aXb26pk4ZKGwhkE0Lcg4aOQEHCBmYVpWH10njHxz5 knW8PUjyU1m37L1ZzTT3XyKuOeoU9wGyHVP38r3qpApIGb7+6gg1xamcdP48ujZL ZfAB8cauVN60o7MmoeokmDt1qXLWv27eXdjGEVl/v3zbD/Vh+1Irop+QxdRa6Tb7 4zl1Q9e/YoQdCSlPTjtms5Q2TyTSYbbzXhPSYSk4znDSKUbdGCfVw35NcqfFC8vK 94T6WRn5Lbid1Xz4JOmk9o7v8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN9zGqi +LkPi4ci8trcgabUdnYJMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtnvhUtXvZck8lxeyblWvVcBj1vC2zeligq8JX+h0NdZKjhjrgdO5C 7ECs+GxkvvPalKHuOq/8X/xJfbjUM6LBHWhVrxrjAAMCztRW+hNXUgklEiwtCKdp lq3BHKHJ3v3MRFv/Em5ECYtDlH8ZmwCFlikAogcPjqkuKbgTb6dNsMXniTuoj6KM AsEsnQJKS8LXeq8KOn1doyQt+qr1ryPW9lRO6EMICgmfRUi4r0AXjfcAGhprr+GC +3Uvdk+pp/vTpu/N7fnBo2lStbv5DW7TErvAHU97gGDzmFmE0/mpquUvUE1UsLeL Z5z+oLAr40IDmY7v7ZD0EPFJ+M5/7SpI -----END CERTIFICATE-----Generated at Sat Jun 7 13:01:53 2025 by rpki-client