$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: A68sTSZbJeOK6klHzMgRKzKX9SjBjSH4ffYL9l17p6U= Subject key identifier: F4:66:EC:96:7E:AD:E7:FB:D8:C5:81:3B:9A:2A:52:DF:14:92:AE:47 Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BE2 Signing time: Fri 22 Aug 2025 19:00:38 +0000 Manifest this update: Fri 22 Aug 2025 19:00:38 +0000 Manifest next update: Fri 29 Aug 2025 19:00:38 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: fQM4VZhH6uMN7yRePBEtlSgsDorfxvqpipcxDe3EJ+k=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3053 (0xbed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Aug 22 19:00:38 2025 GMT Not After : Aug 29 19:00:38 2025 GMT Subject: CN=68a8be56-007c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:bc:17:f8:86:23:2e:91:ec:08:12:5a:74: 34:39:b1:1a:42:4f:ab:8a:37:de:f0:4f:01:d2:6a: 7f:99:b6:42:7f:e4:5b:cc:61:12:b9:e0:64:b0:88: 8e:71:4e:5d:a2:7f:2d:0e:a2:ec:c9:81:cd:80:a0: e4:17:90:2a:26:a0:a0:d3:c5:cc:66:1f:ed:d8:df: 30:bc:50:a8:a1:6c:a1:e0:63:73:3d:4a:05:80:74: 61:e0:ab:f8:fe:2f:b4:64:37:e1:a1:4f:ea:0b:be: c4:d8:f4:eb:cf:93:ad:7a:fd:f2:14:c6:90:55:67: 5f:8b:7e:bb:a9:9c:bc:4b:7b:d4:9f:5c:63:28:bb: 6e:e7:9d:e6:a6:e4:d2:84:b1:7a:b3:64:69:6b:12: 48:70:1a:a5:32:7f:6f:ff:9e:e6:a9:38:e4:08:85: fd:14:e4:0d:27:6e:fb:41:b3:1a:2f:43:c1:c9:e5: 7d:21:12:d7:4f:fa:a7:b0:e6:18:ca:4d:32:b3:73: 6b:ee:cf:1c:4e:0d:8c:64:57:28:e4:de:d6:79:4d: 5b:2b:76:6e:cc:88:5a:b0:e1:04:b4:13:a9:ce:18: 6f:a2:25:ca:2f:46:66:d5:3a:68:dd:1f:9d:6b:97: 0b:b9:cf:7f:f3:94:1b:5b:b8:f3:bb:fe:ca:39:b4: 5a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:EC:96:7E:AD:E7:FB:D8:C5:81:3B:9A:2A:52:DF:14:92:AE:47 X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:10:39:26:37:97:b3:b9:00:48:65:5c:2e:a2:26:88:82: 44:32:20:20:ab:cf:e3:84:83:d1:31:b9:ce:86:57:e6:0c:e2: 94:e7:cc:50:c1:60:2b:7f:86:b0:86:ae:1d:a3:0f:d4:a0:0d: e3:8c:fe:1f:bf:c5:46:4b:24:4a:b3:8c:cc:44:48:c5:a9:c2: b1:df:50:83:d1:49:55:98:73:c7:43:b4:78:51:61:df:10:68: e2:fd:c3:4e:4c:21:7b:f0:21:bb:2e:84:33:69:6a:f2:3b:5d: b2:04:c5:20:19:c4:f2:62:b8:03:1d:f3:9b:9c:6c:15:64:89: 4a:dc:02:fb:70:fb:a8:a3:e1:e2:98:bf:65:d6:ff:22:44:1b: e7:34:cc:97:d7:9a:af:d4:23:23:53:03:ba:d9:3c:1e:6a:e5: 43:6e:ce:fd:7c:2a:ac:c0:7d:b3:2d:fd:1f:70:35:65:97:5c: 4d:11:5f:16:d3:da:4a:fe:eb:81:65:3d:f0:55:20:99:06:4b: 89:61:80:b2:d3:60:a8:08:4a:48:57:93:75:f9:22:4c:2c:86: 97:56:03:db:63:6b:f6:c8:23:ec:f9:9c:d2:da:95:2d:02:5e: d0:89:f7:fd:9a:2d:04:b2:39:11:9c:92:b5:33:1e:df:11:e2: 56:28:ef:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwODIyMTkwMDM4WhcNMjUwODI5MTkwMDM4WjAYMRYwFAYD VQQDEw02OGE4YmU1Ni0wMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxOG8F/iGIy6R7AgSWnQ0ObEaQk+rijfe8E8B0mp/mbZCf+RbzGESueBksIiO cU5don8tDqLsyYHNgKDkF5AqJqCg08XMZh/t2N8wvFCooWyh4GNzPUoFgHRh4Kv4 /i+0ZDfhoU/qC77E2PTrz5Otev3yFMaQVWdfi367qZy8S3vUn1xjKLtu553mpuTS hLF6s2RpaxJIcBqlMn9v/57mqTjkCIX9FOQNJ277QbMaL0PByeV9IRLXT/qnsOYY yk0ys3Nr7s8cTg2MZFco5N7WeU1bK3ZuzIhasOEEtBOpzhhvoiXKL0Zm1Tpo3R+d a5cLuc9/85QbW7jzu/7KObRaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRm7JZ+ ref72MWBO5oqUt8Ukq5HMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb8RA5JjeXs7kASGVcLqImiIJEMiAgq8/jhIPRMbnOhlfmDOKU58xQ wWArf4awhq4dow/UoA3jjP4fv8VGSyRKs4zMREjFqcKx31CD0UlVmHPHQ7R4UWHf EGji/cNOTCF78CG7LoQzaWryO12yBMUgGcTyYrgDHfObnGwVZIlK3AL7cPuoo+Hi mL9l1v8iRBvnNMyX15qv1CMjUwO62TweauVDbs79fCqswH2zLf0fcDVll1xNEV8W 09pK/uuBZT3wVSCZBkuJYYCy02CoCEpIV5N1+SJMLIaXVgPbY2v2yCPs+ZzS2pUt Al7Qiff9mi0EsjkRnJK1Mx7fEeJWKO/L -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:14 2025 by rpki-client