$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: q2ykF071UrCFsdZthFragiQ1boeYxOKv+Oe4JVs/d9w= Subject key identifier: 6B:08:25:46:B3:B0:BA:5B:86:28:B2:33:D6:2C:04:AF:31:19:CE:23 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0AF8 Signing time: Wed 30 Apr 2025 19:10:23 +0000 Manifest this update: Wed 30 Apr 2025 19:10:22 +0000 Manifest next update: Wed 07 May 2025 19:10:22 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: 5kQ8qZNQQ2eYfowMDxLM9DM1xDUej+H8rdXb7JY9uW0=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 19:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Apr 30 19:10:22 2025 GMT Not After : May 7 19:10:22 2025 GMT Subject: CN=6812759e-3616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:9d:37:9c:58:1d:62:b3:c8:3e:81:83:00: 9c:03:bb:1a:00:4b:67:9c:ce:1b:69:78:6d:10:c8: b8:9d:7b:f2:94:7f:74:cc:97:58:0b:e9:b0:0a:b7: 66:b8:8f:db:c5:d6:f1:b7:a4:e5:2a:e0:7d:03:66: f5:fa:a9:cd:46:30:7a:63:8e:bb:31:d0:72:3f:3d: fd:c5:ae:02:35:bd:1e:90:8c:c1:55:e6:46:5a:0e: e7:98:b8:eb:26:da:0b:89:8f:1e:f1:a7:d9:30:4e: 82:4b:a4:fd:04:01:cd:bd:b0:1b:92:42:79:df:ee: 5c:53:90:5c:15:3a:91:55:5b:59:7a:62:67:ca:ef: 89:01:c8:c7:c2:ca:28:a5:70:ca:d6:00:d5:14:2c: cf:85:74:08:94:4f:9e:07:4d:23:f0:06:10:a9:36: d5:95:3e:79:07:99:f0:3a:a0:f5:4b:dc:53:13:0d: f9:05:4e:83:89:da:91:ea:55:79:c8:27:8b:c3:b5: a5:ec:5e:ed:96:34:bc:d4:fe:c2:f1:59:2a:75:f9: 1c:9a:d8:13:b6:36:3e:7c:13:27:a3:52:ea:60:5b: 55:a0:14:6a:55:7b:7b:da:ad:d6:0a:01:73:e2:68: c0:bd:94:fb:03:23:b8:3c:4a:10:96:fd:de:0c:63: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:08:25:46:B3:B0:BA:5B:86:28:B2:33:D6:2C:04:AF:31:19:CE:23 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:92:d4:79:8d:80:b9:b4:31:df:cc:a9:29:73:be:f3:12:01: ea:28:db:0f:87:b8:81:7c:a9:49:f0:68:83:99:f7:10:0e:6f: 04:71:24:2b:98:dc:f2:99:84:a0:39:e8:63:7b:27:f1:09:12: e5:6f:ef:a0:60:b2:4d:1c:92:e9:4c:72:bd:c1:f4:4d:7b:ea: c4:80:a8:55:f9:7b:57:52:2d:88:fc:fa:80:98:32:a8:df:ff: d7:52:c5:37:a9:d7:33:eb:6f:90:ef:7f:86:33:d8:d0:d0:bb: b7:a4:b8:6d:47:28:06:2c:55:88:33:bb:9e:dd:86:35:23:5f: e2:d0:8f:3f:65:71:aa:6e:b9:59:a2:d4:0f:b9:ae:35:6d:1c: db:c4:a3:27:52:f4:4d:92:26:e6:e1:22:7d:61:3c:dc:f7:55: f9:4e:82:12:dd:f5:48:44:93:0c:50:e7:08:12:e5:5d:ba:c5: 50:0f:03:04:af:a0:58:5d:a6:8b:e6:56:c1:9d:4d:83:a3:1e: 82:c0:fe:df:4a:c3:e7:b5:86:a5:b2:2b:b9:11:2c:98:49:d9: 85:e9:fd:48:5f:b8:8c:3a:65:4e:4d:b5:92:4c:f8:02:b8:fd: 59:73:82:95:aa:48:39:4b:b5:1f:1d:16:12:3c:aa:a5:9c:54: ea:a9:9a:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwNDMwMTkxMDIyWhcNMjUwNTA3MTkxMDIyWjAYMRYwFAYD VQQDEw02ODEyNzU5ZS0zNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39CdN5xYHWKzyD6BgwCcA7saAEtnnM4baXhtEMi4nXvylH90zJdYC+mwCrdm uI/bxdbxt6TlKuB9A2b1+qnNRjB6Y467MdByPz39xa4CNb0ekIzBVeZGWg7nmLjr JtoLiY8e8afZME6CS6T9BAHNvbAbkkJ53+5cU5BcFTqRVVtZemJnyu+JAcjHwsoo pXDK1gDVFCzPhXQIlE+eB00j8AYQqTbVlT55B5nwOqD1S9xTEw35BU6DidqR6lV5 yCeLw7Wl7F7tljS81P7C8VkqdfkcmtgTtjY+fBMno1LqYFtVoBRqVXt72q3WCgFz 4mjAvZT7AyO4PEoQlv3eDGO3jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsIJUaz sLpbhiiyM9YsBK8xGc4jMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqktR5jYC5tDHfzKkpc77zEgHqKNsPh7iBfKlJ8GiDmfcQDm8EcSQr mNzymYSgOehjeyfxCRLlb++gYLJNHJLpTHK9wfRNe+rEgKhV+XtXUi2I/PqAmDKo 3//XUsU3qdcz62+Q73+GM9jQ0Lu3pLhtRygGLFWIM7ue3YY1I1/i0I8/ZXGqbrlZ otQPua41bRzbxKMnUvRNkibm4SJ9YTzc91X5ToIS3fVIRJMMUOcIEuVdusVQDwME r6BYXaaL5lbBnU2Dox6CwP7fSsPntYalsiu5ESyYSdmF6f1IX7iMOmVOTbWSTPgC uP1Zc4KVqkg5S7UfHRYSPKqlnFTqqZqF -----END CERTIFICATE-----Generated at Thu May 1 19:30:50 2025 by rpki-client