$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: v1De47p0gFyQcJVjgWfPk4EIiqTFIFOhdEPQnxdIsQ4= Subject key identifier: A1:7F:80:0C:5F:A0:CB:71:95:33:6A:94:84:77:37:2C:9D:83:03:0D Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BC8 Signing time: Wed 02 Jul 2025 19:09:15 +0000 Manifest this update: Wed 02 Jul 2025 19:09:14 +0000 Manifest next update: Wed 09 Jul 2025 19:09:14 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: /UAsAfThsdxLkho0TfDXNwmmlL0kNgX7Vn/WUHjJo/U=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: Jul 2 19:09:14 2025 GMT Not After : Jul 9 19:09:14 2025 GMT Subject: CN=686583db-e8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:3a:bd:49:3d:ed:3d:da:76:08:de:f1:32: 4b:56:2d:2c:9f:13:90:10:96:88:01:e8:3f:cd:f7: f6:36:23:94:43:0c:37:f6:13:9d:b9:e5:d0:33:61: 69:9c:d3:50:ee:8f:17:df:84:43:19:6a:47:ea:b4: 7d:f9:b3:b6:d0:23:9b:f1:c8:04:f1:83:b8:a8:3a: ba:29:71:0b:72:cf:d8:43:19:25:1b:e9:27:93:5c: 85:b2:57:91:df:ef:25:b9:68:e0:ab:09:24:93:ad: c7:6c:63:3f:da:76:b3:ad:ec:65:d2:2f:e2:c3:3d: 88:53:f1:11:8a:78:71:c8:da:b8:3b:9b:00:f7:29: 53:97:11:da:06:47:50:7d:1f:5e:9c:48:a6:e4:64: 5e:06:59:90:c0:fd:40:34:d5:70:d6:08:73:22:b8: f2:60:d5:07:84:6f:17:47:9b:f1:04:76:64:17:4d: a7:ce:8e:b4:1f:3b:8b:8e:02:a9:1a:a0:77:e7:d7: d2:88:37:5a:b5:8b:2a:5a:33:a4:80:32:e0:e4:e1: 9f:ef:91:c6:57:38:c6:0a:8e:07:8b:33:43:e9:80: af:18:0b:99:f3:f6:b9:a5:25:8d:72:21:3e:c9:a8: 50:11:19:d3:1e:2b:70:a8:37:ec:fa:37:01:8f:96: 9a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7F:80:0C:5F:A0:CB:71:95:33:6A:94:84:77:37:2C:9D:83:03:0D X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b9:76:8d:18:e7:d8:c6:3d:54:60:a7:b4:b9:c0:a1:22:2f: 51:59:5e:9b:97:7b:cf:8d:26:a6:c2:17:77:b1:52:c0:e3:8b: 94:97:39:d6:8c:ff:fe:3b:0f:c6:30:e0:04:d6:ae:c9:64:b8: 4f:7f:98:5a:a3:c0:27:44:5c:8f:54:ac:c6:7b:78:4e:4e:2d: 01:21:1f:7b:46:cc:8b:cf:21:7c:72:16:39:5e:0e:0b:63:85: a4:91:09:5c:60:ef:7e:d5:18:e4:cf:9d:a9:1e:77:7a:6b:b5: 80:0c:fb:8e:11:68:dd:a4:55:fa:30:de:cf:0a:64:59:98:ef: 5b:1a:d0:0c:9d:7a:a2:e9:af:88:47:81:04:aa:0e:dd:91:3b: 5f:54:ce:5b:cc:0a:96:ca:9c:75:a5:ad:9d:aa:5d:01:a7:30: 5b:1a:24:67:56:99:33:42:9b:da:a2:d0:36:14:f4:c9:7d:8d: b3:b5:60:82:e7:6c:fa:4b:2a:c1:a2:9f:9d:26:f3:0d:0d:f0: 54:0f:a8:4d:dd:1a:0a:51:7c:b1:88:f4:56:5a:b0:63:87:bc: 09:d0:a6:ab:fd:fe:e2:08:a2:ca:a6:42:d4:82:8f:55:14:93: ba:69:3a:0d:c3:d7:f3:a5:2a:0c:e9:71:ad:55:b7:e3:03:0d: 79:5d:90:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwNzAyMTkwOTE0WhcNMjUwNzA5MTkwOTE0WjAYMRYwFAYD VQQDEw02ODY1ODNkYi1lOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvU06vUk97T3adgje8TJLVi0snxOQEJaIAeg/zff2NiOUQww39hOdueXQM2Fp nNNQ7o8X34RDGWpH6rR9+bO20COb8cgE8YO4qDq6KXELcs/YQxklG+knk1yFsleR 3+8luWjgqwkkk63HbGM/2nazrexl0i/iwz2IU/ERinhxyNq4O5sA9ylTlxHaBkdQ fR9enEim5GReBlmQwP1ANNVw1ghzIrjyYNUHhG8XR5vxBHZkF02nzo60HzuLjgKp GqB359fSiDdatYsqWjOkgDLg5OGf75HGVzjGCo4HizND6YCvGAuZ8/a5pSWNciE+ yahQERnTHitwqDfs+jcBj5aapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKF/gAxf oMtxlTNqlIR3NyydgwMNMB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNuXaNGOfYxj1UYKe0ucChIi9RWV6bl3vPjSamwhd3sVLA44uUlznW jP/+Ow/GMOAE1q7JZLhPf5hao8AnRFyPVKzGe3hOTi0BIR97RsyLzyF8chY5Xg4L Y4WkkQlcYO9+1Rjkz52pHnd6a7WADPuOEWjdpFX6MN7PCmRZmO9bGtAMnXqi6a+I R4EEqg7dkTtfVM5bzAqWypx1pa2dql0BpzBbGiRnVpkzQpvaotA2FPTJfY2ztWCC 52z6SyrBop+dJvMNDfBUD6hN3RoKUXyxiPRWWrBjh7wJ0Kar/f7iCKLKpkLUgo9V FJO6aToNw9fzpSoM6XGtVbfjAw15XZDc -----END CERTIFICATE-----Generated at Fri Jul 4 18:46:48 2025 by rpki-client