$ rpki-client -vvf rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft File: asqbm3MwkHBq_T-FI8wMwYzWjjE.mft (raw, json) Hash identifier: VxXR6xUP0MtxWT5TtB9mG9Z5/hd0ef4cuFz9NkK3AGA= Subject key identifier: 78:AF:15:99:F6:B5:9B:EE:C0:8F:78:26:8A:8A:94:25:51:1A:A1:BB Authority key identifier: 6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 Certificate issuer: /CN=A9130EA4/serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft Manifest number: 0BB0 Signing time: Wed 14 May 2025 19:05:49 +0000 Manifest this update: Wed 14 May 2025 19:05:49 +0000 Manifest next update: Wed 21 May 2025 19:05:49 +0000 Files and hashes: 1: asqbm3MwkHBq_T-FI8wMwYzWjjE.crl (hash: 7P52tvP3OveE7HUAv2GIXak++UgTeOtcuIKoC46kwI0=) 2: 08754752218611EAA5DF883CC4F9AE02.roa (hash: gxdwZieFTn54JsEYN33sdU/rLYZSttG97jPAuU0togE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130EA4, serialNumber=6ACA9B9B733090706AFD3F8523CC0CC18CD68E31 Validity Not Before: May 14 19:05:49 2025 GMT Not After : May 21 19:05:49 2025 GMT Subject: CN=6824e98d-8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:35:4c:91:b9:83:de:12:83:36:2f:a7:bf:d8: 76:de:e2:5f:04:8e:66:0f:5c:8b:17:d9:a0:28:e2: f9:83:6c:17:2b:ef:27:a1:9c:8e:d3:1d:08:05:c9: 5b:67:1d:32:85:34:ed:71:70:4d:26:b2:d4:dc:98: 08:00:c4:32:81:bf:0d:ec:b4:37:44:80:83:83:2f: 80:66:9d:0f:c4:9c:a4:dd:42:aa:97:3e:fc:b9:6b: f7:0d:ce:8d:91:3b:f8:be:0a:4b:e9:db:c1:1f:48: 23:c6:f3:63:9b:fe:7f:6b:9e:ba:b8:0e:a6:d3:0e: f5:15:b7:2c:cc:b0:b8:99:e7:27:0e:a0:01:6d:ec: ef:23:f9:59:13:30:a3:a9:8d:ee:2b:30:f2:c8:f6: 76:17:0d:09:3a:95:ee:bb:0c:bc:21:6f:af:ae:20: 33:ff:f7:ae:20:ad:73:53:df:2f:27:eb:e5:18:07: 22:30:a3:91:d9:6e:3a:7f:88:c4:82:5d:80:aa:e9: fe:5f:8f:3a:46:f8:9a:e5:35:4a:fc:96:ec:5c:66: ad:4b:83:76:90:1a:47:02:c4:bc:af:ee:3e:73:2d: a2:29:d1:4f:15:e4:5c:ac:30:f2:b1:6f:4b:c1:20: 61:7e:31:83:b3:87:d1:0d:84:d1:ff:4f:22:14:4e: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AF:15:99:F6:B5:9B:EE:C0:8F:78:26:8A:8A:94:25:51:1A:A1:BB X509v3 Authority Key Identifier: keyid:6A:CA:9B:9B:73:30:90:70:6A:FD:3F:85:23:CC:0C:C1:8C:D6:8E:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asqbm3MwkHBq_T-FI8wMwYzWjjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130EA4/B62CCE80218411EAA2D0413AC4F9AE02/asqbm3MwkHBq_T-FI8wMwYzWjjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:bc:64:c3:f2:74:19:72:45:1a:02:61:b4:e6:55:e2:39:09: 67:ef:99:9b:ba:8d:aa:11:b8:73:a7:51:e9:77:0a:bc:ee:91: 35:bb:71:91:81:f4:4c:e8:d9:3f:96:80:5a:fe:4a:44:89:40: 1a:67:ba:6f:24:d5:fa:67:02:f0:96:1d:33:f1:16:67:75:fa: 25:1f:2a:f3:8e:48:ae:b0:a7:50:ca:5c:ba:03:b0:c0:1b:6a: 70:91:17:f2:9b:36:95:e6:2c:95:cb:58:9c:13:41:16:9a:81: 15:c0:27:9b:bc:b5:35:0f:b9:89:57:39:8b:33:e6:3a:5c:f1: 3d:ce:5a:6e:60:29:a7:82:4a:40:12:ee:2d:76:df:99:a2:10: 7e:36:fa:b5:7e:f9:51:54:76:cc:9e:05:0e:93:f5:74:97:c0: 0a:61:e5:8a:62:fb:f9:33:10:f1:5f:3b:ab:72:98:63:0b:85: 86:a7:4f:c9:28:d6:f9:3b:9b:e2:4e:95:12:de:e0:17:a3:50: f7:8f:c0:52:31:c6:f7:f3:0d:b2:f4:1e:83:bc:d1:cd:e7:e1: ec:e3:c8:65:88:09:01:bf:f6:0f:49:51:7d:29:0d:13:06:42: b6:6a:5d:84:bf:13:06:43:9f:73:cf:f3:4f:34:8b:74:a7:fe: 5a:2f:f0:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBFQTQxMTAvBgNVBAUTKDZBQ0E5QjlCNzMzMDkwNzA2QUZEM0Y4NTIzQ0MwQ0Mx OENENjhFMzEwHhcNMjUwNTE0MTkwNTQ5WhcNMjUwNTIxMTkwNTQ5WjAYMRYwFAYD VQQDEw02ODI0ZTk4ZC04YzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqDVMkbmD3hKDNi+nv9h23uJfBI5mD1yLF9mgKOL5g2wXK+8noZyO0x0IBclb Zx0yhTTtcXBNJrLU3JgIAMQygb8N7LQ3RICDgy+AZp0PxJyk3UKqlz78uWv3Dc6N kTv4vgpL6dvBH0gjxvNjm/5/a566uA6m0w71FbcszLC4mecnDqABbezvI/lZEzCj qY3uKzDyyPZ2Fw0JOpXuuwy8IW+vriAz//euIK1zU98vJ+vlGAciMKOR2W46f4jE gl2Aqun+X486Rvia5TVK/JbsXGatS4N2kBpHAsS8r+4+cy2iKdFPFeRcrDDysW9L wSBhfjGDs4fRDYTR/08iFE7XmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHivFZn2 tZvuwI94JoqKlCVRGqG7MB8GA1UdIwQYMBaAFGrKm5tzMJBwav0/hSPMDMGM1o4x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEVBNC9CNjJDQ0U4MDIx ODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tIQnFfVC1GSTh3TXdZeldq akUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzcWJtM013a0hCcV9ULUZJOHdNd1l6V2pqRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEVBNC9CNjJDQ0U4MDIxODQxMUVBQTJEMDQxM0FDNEY5QUUwMi9hc3FibTNNd2tI QnFfVC1GSTh3TXdZeldqakUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlvGTD8nQZckUaAmG05lXiOQln75mbuo2qEbhzp1Hpdwq87pE1u3GR gfRM6Nk/loBa/kpEiUAaZ7pvJNX6ZwLwlh0z8RZndfolHyrzjkiusKdQyly6A7DA G2pwkRfymzaV5iyVy1icE0EWmoEVwCebvLU1D7mJVzmLM+Y6XPE9zlpuYCmngkpA Eu4tdt+ZohB+Nvq1fvlRVHbMngUOk/V0l8AKYeWKYvv5MxDxXzurcphjC4WGp0/J KNb5O5viTpUS3uAXo1D3j8BSMcb38w2y9B6DvNHN5+Hs48hliAkBv/YPSVF9KQ0T BkK2al2EvxMGQ59zz/NPNIt0p/5aL/Bp -----END CERTIFICATE-----Generated at Fri May 16 11:48:26 2025 by rpki-client