$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: 8pxZOdZqApAtXWWqUBH4bQDrWdsUotiQSW+oxwPlNwg= Subject key identifier: 11:6F:E1:8D:F3:B7:E3:C8:CE:1F:85:32:08:30:7B:14:3F:85:23:73 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B2A Signing time: Fri 08 Aug 2025 19:31:28 +0000 Manifest this update: Fri 08 Aug 2025 19:31:28 +0000 Manifest next update: Fri 15 Aug 2025 19:31:28 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: GVnt47cJ1cVUBi3l7uqTRxO93wEo6+ZUqxv3No7QTcg=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Aug 8 19:31:28 2025 GMT Not After : Aug 15 19:31:28 2025 GMT Subject: CN=68965090-0746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:4c:f8:2c:56:1a:ef:5c:bf:44:0f:70:37: 83:d7:db:04:0c:9d:7b:6a:5b:9e:3b:d2:b2:bd:e2: f1:85:4a:36:c3:80:79:b9:2b:4b:05:66:71:5a:8a: 17:63:b5:f1:76:ed:9c:19:b9:45:38:2f:94:68:43: 94:a5:3a:d7:67:5d:ac:1c:b7:59:ff:c4:c1:e3:a2: e9:5c:e7:e4:c1:12:48:c9:04:57:2f:36:8b:36:7f: d1:de:5d:fa:f5:06:54:75:54:00:64:4b:ae:dc:6b: 83:eb:5d:7f:c5:bf:bf:30:f5:83:69:56:d3:20:bb: 35:07:77:ea:58:73:28:86:a9:45:4a:2b:bc:d9:51: 73:6b:2c:e9:e0:64:bc:8b:0e:d0:4d:28:b3:65:01: 41:a3:4e:ae:f4:e2:40:8e:0a:54:d1:d2:1d:7e:4b: 3d:31:1a:25:55:56:aa:b6:05:32:62:1f:3b:63:12: b3:80:2f:19:58:38:98:dc:37:9f:d2:b5:76:1a:83: 86:77:9a:b9:2a:3c:ab:3a:f2:6f:46:47:4b:8d:1c: b1:c1:d6:07:4d:db:38:d2:a6:ce:a3:72:64:64:d2: f0:f3:96:68:60:6d:58:77:c5:50:da:b7:9b:c4:e8: 70:3d:7a:d6:8b:f1:ba:76:ef:3f:3c:6e:32:e7:d4: f1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:E1:8D:F3:B7:E3:C8:CE:1F:85:32:08:30:7B:14:3F:85:23:73 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:22:6b:4f:79:ef:ec:fa:83:33:47:64:c0:67:9a:f1:d0:78: 28:b8:cf:37:74:11:b4:e2:bd:59:0f:42:5a:da:2a:b3:86:14: c4:1c:a4:03:72:b8:45:e6:41:b5:52:38:29:ab:4c:15:c8:87: c5:0c:0c:2e:0b:c1:46:70:b0:e6:45:ba:6a:2d:ff:15:a1:32: 28:a9:42:23:fd:1f:fc:35:88:d0:c2:c4:2d:97:54:ec:eb:f8: 58:4e:e4:23:fe:04:5d:f5:d1:f0:7e:2c:13:46:54:b6:1c:c7: f7:24:4e:df:95:78:6f:95:dd:83:bd:26:72:49:5d:ef:6c:cf: 92:17:07:c1:fb:ed:5d:d1:83:df:f2:0f:83:f2:3a:e5:7b:fe: eb:be:b9:5c:47:5c:2c:1a:d4:d3:78:dc:ea:fd:aa:5a:e7:6c: 44:49:af:b5:75:e2:de:26:b2:42:d5:31:e9:6b:de:3a:15:4d: 82:4c:3c:ad:53:5d:84:01:d3:d2:7a:b8:9c:b0:2a:e5:16:25: 9c:f9:8f:a5:c2:24:fe:0b:5a:e0:00:c1:91:a0:3d:13:87:05: a4:88:a9:81:4a:ca:25:07:bf:a3:cc:1a:6d:57:83:95:d2:b6: d3:8a:50:ab:d6:93:04:20:5a:84:b4:41:50:43:a1:d0:7d:b0: c8:0b:9d:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwODA4MTkzMTI4WhcNMjUwODE1MTkzMTI4WjAYMRYwFAYD VQQDEw02ODk2NTA5MC0wNzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rVM+CxWGu9cv0QPcDeD19sEDJ17alueO9KyveLxhUo2w4B5uStLBWZxWooX Y7Xxdu2cGblFOC+UaEOUpTrXZ12sHLdZ/8TB46LpXOfkwRJIyQRXLzaLNn/R3l36 9QZUdVQAZEuu3GuD611/xb+/MPWDaVbTILs1B3fqWHMohqlFSiu82VFzayzp4GS8 iw7QTSizZQFBo06u9OJAjgpU0dIdfks9MRolVVaqtgUyYh87YxKzgC8ZWDiY3Def 0rV2GoOGd5q5KjyrOvJvRkdLjRyxwdYHTds40qbOo3JkZNLw85ZoYG1Yd8VQ2reb xOhwPXrWi/G6du8/PG4y59TxjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFv4Y3z t+PIzh+FMggwexQ/hSNzMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjImtPee/s+oMzR2TAZ5rx0HgouM83dBG04r1ZD0Ja2iqzhhTEHKQD crhF5kG1Ujgpq0wVyIfFDAwuC8FGcLDmRbpqLf8VoTIoqUIj/R/8NYjQwsQtl1Ts 6/hYTuQj/gRd9dHwfiwTRlS2HMf3JE7flXhvld2DvSZySV3vbM+SFwfB++1d0YPf 8g+D8jrle/7rvrlcR1wsGtTTeNzq/apa52xESa+1deLeJrJC1THpa946FU2CTDyt U12EAdPSericsCrlFiWc+Y+lwiT+C1rgAMGRoD0ThwWkiKmBSsolB7+jzBptV4OV 0rbTilCr1pMEIFqEtEFQQ6HQfbDIC539 -----END CERTIFICATE-----Generated at Sun Aug 10 10:44:35 2025 by rpki-client