$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: SgZGAFjKWZo9rQr/ynYezkWB6XSmcqFzGRKVePr822c= Subject key identifier: 3B:8C:D2:1E:1D:CA:6D:9C:C7:3C:70:E4:24:C4:82:D9:55:46:E1:92 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B57 Signing time: Tue 04 Nov 2025 19:16:53 +0000 Manifest this update: Tue 04 Nov 2025 19:16:52 +0000 Manifest next update: Tue 11 Nov 2025 19:16:52 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: Uq58LE59ut7nOmCMNxfggLVgsEDUnpw14T/n8E1mDdI=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Nov 4 19:16:52 2025 GMT Not After : Nov 11 19:16:52 2025 GMT Subject: CN=690a5124-064b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:b4:4d:ec:76:64:c1:87:5e:1a:1c:0d:44: 5b:49:9b:27:2d:d8:ec:9a:43:f5:c1:01:c9:80:da: 93:73:37:77:cb:78:94:5b:1c:45:73:e0:5f:b0:f9: 7f:7e:8f:61:44:c8:df:fc:f8:48:e0:26:65:f0:1c: 5b:7a:90:67:21:8d:38:67:b9:1d:a8:82:11:47:4f: 53:44:37:15:93:da:2a:db:22:75:6e:c5:2c:80:98: 94:fd:1e:c8:aa:69:0f:71:15:bf:71:1e:84:3e:56: f9:f9:f5:70:70:48:57:c9:20:e5:49:05:18:a5:56: ca:b3:60:b5:26:52:9c:63:ef:24:4d:9b:5e:da:ab: a8:df:2f:7b:b4:19:ed:0d:fc:bf:bf:d0:9c:16:24: 61:a1:fc:e0:ee:76:f4:37:96:e9:9e:4a:fd:e6:5b: 13:8f:0e:e3:5a:bf:f8:c6:0a:c2:1d:e7:26:90:30: 2a:02:0c:ea:9a:0b:91:f9:41:50:8b:83:9d:4c:dd: 86:94:8b:d8:9b:c8:00:d3:17:db:cc:ad:8f:62:bd: e7:7f:91:0e:7f:4f:58:2e:56:c0:24:4f:9a:75:73: dd:2e:29:5f:bf:69:6e:ab:80:a3:cc:88:89:8d:ab: 51:3f:b7:8d:ab:96:7a:3d:9c:16:14:e6:0b:c3:52: bc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:8C:D2:1E:1D:CA:6D:9C:C7:3C:70:E4:24:C4:82:D9:55:46:E1:92 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:87:b5:12:e3:18:72:94:86:75:54:f1:65:fe:8e:9c:60: 72:34:a2:98:fe:ff:16:69:67:93:31:27:49:57:aa:94:94:20: 2c:93:81:cd:4e:8e:18:9f:d5:ef:9d:c4:8c:85:58:1b:1b:58: 6a:b9:a5:85:64:fa:93:3b:6e:54:68:3d:7a:0b:15:05:ab:3d: 7b:3e:18:fd:63:e7:84:37:73:4e:aa:e9:0d:50:43:9a:51:20: 40:ca:71:cd:2e:68:05:8f:73:31:b4:11:ac:96:83:1f:a9:0c: b1:41:e8:17:31:0d:45:ec:6f:0c:ac:94:35:04:03:d3:59:28: fb:8f:e5:aa:01:c7:1c:1d:4f:9c:f7:7b:f6:97:b5:d2:49:fb: b0:fc:62:d5:1b:ac:4d:80:33:91:ac:98:a5:5c:d4:f8:c8:ae: d1:39:7f:d4:41:5a:9d:22:c7:7f:90:55:05:f3:9a:bc:8e:e8: 7c:6b:ba:89:70:57:8b:ca:b8:2c:8d:d3:3e:68:23:f3:20:23: c1:ae:dc:4a:8f:3b:df:56:39:cc:b7:5b:c9:ec:be:8a:aa:a3: 95:a4:68:e5:32:13:59:3a:35:ae:ee:89:c2:6a:a1:6c:b9:4a: c2:e7:bf:d6:2e:63:e0:67:47:bb:97:72:31:ac:aa:05:53:32: 4a:18:bc:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUxMTA0MTkxNjUyWhcNMjUxMTExMTkxNjUyWjAYMRYwFAYD VQQDEw02OTBhNTEyNC0wNjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y+0Tex2ZMGHXhocDURbSZsnLdjsmkP1wQHJgNqTczd3y3iUWxxFc+BfsPl/ fo9hRMjf/PhI4CZl8BxbepBnIY04Z7kdqIIRR09TRDcVk9oq2yJ1bsUsgJiU/R7I qmkPcRW/cR6EPlb5+fVwcEhXySDlSQUYpVbKs2C1JlKcY+8kTZte2quo3y97tBnt Dfy/v9CcFiRhofzg7nb0N5bpnkr95lsTjw7jWr/4xgrCHecmkDAqAgzqmguR+UFQ i4OdTN2GlIvYm8gA0xfbzK2PYr3nf5EOf09YLlbAJE+adXPdLilfv2luq4CjzIiJ jatRP7eNq5Z6PZwWFOYLw1K8bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuM0h4d ym2cxzxw5CTEgtlVRuGSMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrEYe1EuMYcpSGdVTxZf6OnGByNKKY/v8WaWeTMSdJV6qUlCAsk4HN To4Yn9XvncSMhVgbG1hquaWFZPqTO25UaD16CxUFqz17Phj9Y+eEN3NOqukNUEOa USBAynHNLmgFj3MxtBGsloMfqQyxQegXMQ1F7G8MrJQ1BAPTWSj7j+WqAcccHU+c 93v2l7XSSfuw/GLVG6xNgDORrJilXNT4yK7ROX/UQVqdIsd/kFUF85q8juh8a7qJ cFeLyrgsjdM+aCPzICPBrtxKjzvfVjnMt1vJ7L6KqqOVpGjlMhNZOjWu7onCaqFs uUrC57/WLmPgZ0e7l3IxrKoFUzJKGLyV -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:53 2025 by rpki-client