$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: EkQojTnLGffudCvKoj7R4doE0ZzkEHnuOQDoL/Tra74= Subject key identifier: 3F:88:96:F4:D3:93:C3:07:5B:31:94:10:B8:23:E4:7A:46:37:79:29 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BDD Signing time: Tue 12 Aug 2025 19:05:46 +0000 Manifest this update: Tue 12 Aug 2025 19:05:45 +0000 Manifest next update: Tue 19 Aug 2025 19:05:45 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: zeYWitor58Bb/p5rMzfzoQOOtP+4otV26FHSJ2PAD0Q=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3048 (0xbe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Aug 12 19:05:45 2025 GMT Not After : Aug 19 19:05:45 2025 GMT Subject: CN=689b908a-c00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:4a:40:fb:4a:7e:15:78:b9:25:2e:63:58: 56:23:7a:3f:56:01:d6:f2:72:be:ab:33:3a:c2:dd: 82:9a:1c:f1:80:7c:de:01:e0:b6:03:70:7c:06:82: 1a:8c:82:9a:0a:97:37:9c:33:65:c7:e2:cd:20:7d: 1d:a2:ea:79:b4:46:c4:7c:bb:fb:f8:3f:10:e1:4b: 56:df:77:60:28:dc:a4:e3:da:12:1d:84:a7:6a:c5: 59:f4:b5:e2:12:97:a8:f0:8f:39:aa:06:a0:eb:17: 8e:c5:6d:aa:7b:86:43:80:0d:6e:33:7e:d0:dc:31: 65:7f:dc:3b:4d:8e:40:18:af:29:95:ce:e5:83:8f: 3d:e0:8d:1f:56:86:f7:09:bb:19:5f:c4:46:18:29: d0:64:a0:58:01:f6:53:86:f8:9d:d0:fb:3f:8a:37: b2:c6:2a:90:d7:8c:9c:f0:07:af:8e:c0:2e:fe:2a: 0c:28:64:d4:b2:c4:b6:48:13:8c:70:e0:96:18:c2: e5:cc:5c:87:7e:75:c1:bf:58:54:81:b5:1b:5a:ba: e5:17:75:0d:2f:d2:df:69:36:6e:4f:dc:ff:7e:a7: f1:11:4e:62:59:58:e2:98:ff:90:ed:d1:e5:7e:23: 54:c0:c1:8d:93:8f:f6:8c:6a:f7:f8:e4:56:5e:df: b6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:96:F4:D3:93:C3:07:5B:31:94:10:B8:23:E4:7A:46:37:79:29 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:80:2f:b2:8c:16:b4:27:9c:cb:06:44:4c:00:d1:ff:02:38: f8:90:90:5e:b6:9f:0e:2a:5b:d2:e3:02:73:d6:87:1d:73:bf: 5a:27:c9:8c:36:f8:6e:29:da:ca:d4:8c:8c:30:01:20:5c:b7: 2e:a4:60:71:73:c4:ba:4d:23:0a:be:47:5f:45:a8:d4:1c:c4: ce:58:c6:e2:41:99:9b:b5:fb:d7:c8:ce:2a:d1:75:c0:a9:24: d0:fc:41:52:e4:62:89:76:5b:ad:ef:22:a6:5f:2b:5c:16:b2: 1f:00:48:86:a8:e3:0b:79:44:04:3d:a3:8c:fe:59:a1:e2:e5: 0c:f8:0b:e4:43:33:1b:23:a3:86:b3:d4:56:6c:05:06:a3:d3: ec:35:64:ed:76:84:24:d1:a8:fa:7c:c6:cc:59:a1:65:d0:0f: 13:de:03:72:cb:ac:c4:b6:87:7a:ca:c4:ca:13:9e:79:2e:04: c9:a9:3d:e1:d9:b1:02:48:c9:88:f1:96:90:f6:e7:d2:74:29: bb:e1:9a:e7:11:c3:50:58:c3:38:40:8a:46:88:a3:05:69:29: 1f:ea:82:12:6b:47:18:4d:62:bb:87:d7:76:77:e6:b1:43:6f: b4:51:ef:05:df:bd:d7:1f:b9:20:98:80:d2:ac:74:2d:c2:40: dd:b0:d5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwODEyMTkwNTQ1WhcNMjUwODE5MTkwNTQ1WjAYMRYwFAYD VQQDEw02ODliOTA4YS1jMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCZKQPtKfhV4uSUuY1hWI3o/VgHW8nK+qzM6wt2CmhzxgHzeAeC2A3B8BoIa jIKaCpc3nDNlx+LNIH0doup5tEbEfLv7+D8Q4UtW33dgKNyk49oSHYSnasVZ9LXi Epeo8I85qgag6xeOxW2qe4ZDgA1uM37Q3DFlf9w7TY5AGK8plc7lg4894I0fVob3 CbsZX8RGGCnQZKBYAfZThvid0Ps/ijeyxiqQ14yc8AevjsAu/ioMKGTUssS2SBOM cOCWGMLlzFyHfnXBv1hUgbUbWrrlF3UNL9LfaTZuT9z/fqfxEU5iWVjimP+Q7dHl fiNUwMGNk4/2jGr3+ORWXt+2bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+IlvTT k8MHWzGUELgj5HpGN3kpMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAygC+yjBa0J5zLBkRMANH/Ajj4kJBetp8OKlvS4wJz1ocdc79aJ8mM NvhuKdrK1IyMMAEgXLcupGBxc8S6TSMKvkdfRajUHMTOWMbiQZmbtfvXyM4q0XXA qSTQ/EFS5GKJdlut7yKmXytcFrIfAEiGqOMLeUQEPaOM/lmh4uUM+AvkQzMbI6OG s9RWbAUGo9PsNWTtdoQk0aj6fMbMWaFl0A8T3gNyy6zEtod6ysTKE555LgTJqT3h 2bECSMmI8ZaQ9ufSdCm74ZrnEcNQWMM4QIpGiKMFaSkf6oISa0cYTWK7h9d2d+ax Q2+0Ue8F373XH7kgmIDSrHQtwkDdsNXa -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:16 2025 by rpki-client