$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: cM1WCasASMTJ7pcM7HqdjLjs/Wbs2Ra7rE+XPo/8M2U= Subject key identifier: 2B:48:70:E0:70:9F:55:82:43:1B:21:41:2B:50:62:17:6D:E2:91:8C Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0C13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0C08 Signing time: Tue 04 Nov 2025 18:55:22 +0000 Manifest this update: Tue 04 Nov 2025 18:55:21 +0000 Manifest next update: Tue 11 Nov 2025 18:55:21 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: oVqLb59woq2tJTGU/qwYYDZg53Hf1Wv/AZzYN30HE3Y=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3091 (0xc13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Nov 4 18:55:21 2025 GMT Not After : Nov 11 18:55:21 2025 GMT Subject: CN=690a4c1a-cce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:41:06:97:28:cb:3f:32:9e:24:5f:4a:82:79: d4:b6:f3:23:6a:3a:0f:7a:ea:b1:4e:99:e3:30:6e: 7b:84:f5:fc:1b:f2:77:fa:19:81:64:d0:69:57:db: 2a:6b:f0:d6:e4:d6:f5:75:42:fc:26:55:6e:15:c9: 0b:1e:f2:83:71:36:93:95:d7:a5:ac:d0:e7:53:c2: 0c:eb:cd:c9:c6:0f:5a:f5:5a:6a:21:4a:ee:07:4d: 38:90:8b:6e:4f:44:12:3e:72:fe:5f:6e:85:e9:ea: a7:3d:53:31:79:e0:5b:43:09:c6:9a:62:82:a1:a0: 22:d2:6c:01:70:e7:3f:6c:d2:01:52:15:0b:72:cb: f8:f9:bc:ec:27:0a:86:95:78:87:96:e4:f5:4d:62: 71:6d:35:f7:2b:2c:a6:95:cd:8c:ae:35:a8:02:a5: 66:5f:1c:5d:da:7d:21:c0:38:37:5d:80:02:72:52: 18:9a:a8:60:2a:9a:9b:b6:6e:c4:b4:e2:0c:28:0b: ea:c2:0f:83:57:bf:25:fb:39:c4:36:9d:70:33:19: b8:5b:51:a5:70:7c:ae:1e:54:50:9f:0b:7c:33:34: 82:aa:b4:32:2f:6b:6b:12:ae:d6:db:c5:ca:ee:84: bf:90:ce:fb:cd:4f:39:70:4f:39:eb:c2:c0:01:05: 29:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:48:70:E0:70:9F:55:82:43:1B:21:41:2B:50:62:17:6D:E2:91:8C X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0d:45:9b:33:d1:3a:0e:dd:1d:0c:62:d2:d9:5e:39:6b:f8: e1:b5:ed:a7:2c:91:a6:f2:77:95:94:40:46:11:32:2d:5d:03: 07:41:1d:7d:00:94:13:2f:5a:04:3c:4e:fa:6e:33:ec:41:46: d7:c3:66:ec:ce:2d:83:97:88:35:5d:a8:46:51:59:d0:34:c4: 60:37:bb:19:b8:7d:97:cd:2a:c3:21:f0:1e:e4:77:90:7b:c4: 3c:92:c0:62:d8:69:ac:75:77:14:24:76:1d:b5:1e:04:c4:81: 12:97:eb:49:f8:21:35:89:34:08:67:86:40:5a:1f:1f:50:73: 10:30:46:98:77:ca:24:30:1d:61:e5:f3:f9:d6:74:7c:3f:74: 52:94:89:9c:d6:da:89:5d:fd:12:20:8a:27:11:2f:1c:bb:77: a7:44:4f:98:dc:1f:17:4b:77:cc:c4:13:1f:54:42:4c:f8:f2: 14:f7:c2:42:a2:11:bd:75:a0:7b:08:ac:43:30:aa:ed:e7:5b: 1a:84:b9:5b:37:d7:38:37:8c:62:10:8b:56:15:5e:fa:be:70: 61:70:a2:bd:a7:c9:88:46:3c:b2:f3:7a:37:67:a5:ff:57:13: 34:33:45:3f:e0:0d:0b:61:16:5b:29:c8:41:51:38:d3:f0:67: 93:59:bf:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUxMTA0MTg1NTIxWhcNMjUxMTExMTg1NTIxWjAYMRYwFAYD VQQDEw02OTBhNGMxYS1jY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUEGlyjLPzKeJF9KgnnUtvMjajoPeuqxTpnjMG57hPX8G/J3+hmBZNBpV9sq a/DW5Nb1dUL8JlVuFckLHvKDcTaTldelrNDnU8IM683Jxg9a9VpqIUruB004kItu T0QSPnL+X26F6eqnPVMxeeBbQwnGmmKCoaAi0mwBcOc/bNIBUhULcsv4+bzsJwqG lXiHluT1TWJxbTX3Kyymlc2MrjWoAqVmXxxd2n0hwDg3XYACclIYmqhgKpqbtm7E tOIMKAvqwg+DV78l+znENp1wMxm4W1GlcHyuHlRQnwt8MzSCqrQyL2trEq7W28XK 7oS/kM77zU85cE8568LAAQUpZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtIcOBw n1WCQxshQStQYhdt4pGMMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaDUWbM9E6Dt0dDGLS2V45a/jhte2nLJGm8neVlEBGETItXQMHQR19 AJQTL1oEPE76bjPsQUbXw2bszi2Dl4g1XahGUVnQNMRgN7sZuH2XzSrDIfAe5HeQ e8Q8ksBi2GmsdXcUJHYdtR4ExIESl+tJ+CE1iTQIZ4ZAWh8fUHMQMEaYd8okMB1h 5fP51nR8P3RSlImc1tqJXf0SIIonES8cu3enRE+Y3B8XS3fMxBMfVEJM+PIU98JC ohG9daB7CKxDMKrt51sahLlbN9c4N4xiEItWFV76vnBhcKK9p8mIRjyy83o3Z6X/ VxM0M0U/4A0LYRZbKchBUTjT8GeTWb/5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:19:01 2025 by rpki-client