$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: CPCcQMLa1CTRqdbzdHHG/SoqBvep3Ff3O7S6Sni0oSA= Subject key identifier: 14:1C:03:F0:AE:8C:09:12:DC:81:C8:5B:09:BD:38:19:AA:E0:D4:79 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B31 Signing time: Fri 22 Aug 2025 19:22:59 +0000 Manifest this update: Fri 22 Aug 2025 19:22:59 +0000 Manifest next update: Fri 29 Aug 2025 19:22:59 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: NtYrbptw4KY45cTB2BBizgy3J1hCqXe6Omq6OyWjwQ4=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2873 (0xb39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Aug 22 19:22:59 2025 GMT Not After : Aug 29 19:22:59 2025 GMT Subject: CN=68a8c393-7276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:6c:22:dc:ed:ce:7f:ae:62:a9:42:9d:e9: 0a:6c:88:5f:7a:6b:d9:a4:45:e8:5a:f4:9c:ae:31: 21:8c:98:e1:2f:27:00:fa:ec:a3:16:37:9e:53:7c: f8:44:51:7b:ec:7e:bc:8a:43:0d:ea:8b:7d:08:63: 74:bc:9a:8c:01:9a:a0:14:1b:4c:5b:81:22:9f:f9: 4b:42:78:d8:2c:58:54:6c:93:52:a8:b3:8c:7a:96: 89:88:82:a9:a9:9e:a6:c8:30:85:84:2a:c3:0a:43: 91:21:39:c8:23:af:22:03:bc:1e:c5:2b:f1:f3:75: 25:2f:22:30:94:4f:84:fc:cf:dc:58:41:e1:f8:1a: 9b:2f:cf:76:9a:ca:1d:0c:ba:73:5a:6c:72:35:c5: ed:de:90:65:ab:03:b6:35:00:7e:7e:d2:7c:b4:2b: 2f:c0:1d:d9:a9:1c:10:13:bb:9f:d5:33:66:ab:50: e1:50:be:06:c3:16:bb:33:6d:75:dc:a7:42:1a:0c: 31:9c:d6:c1:6d:92:59:93:43:58:46:fc:59:3f:2d: 9d:1b:0f:fa:55:d9:de:4c:ee:35:c4:50:8b:6c:0d: be:4a:9b:85:4d:52:7f:69:ff:4f:5f:c0:86:99:57: 12:80:ff:bd:9a:2e:6a:5f:83:77:3c:a8:76:3f:62: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1C:03:F0:AE:8C:09:12:DC:81:C8:5B:09:BD:38:19:AA:E0:D4:79 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fb:0f:b9:98:93:da:10:43:bb:ac:5d:1a:61:2e:70:85:02: 97:ad:03:98:97:b0:98:83:e0:5a:cf:14:ea:b6:17:d4:94:ce: 78:36:af:b2:ec:f5:47:ba:78:75:d4:2b:9f:27:ce:e0:49:fc: b0:e1:a0:fb:c8:d5:6a:7a:e2:3e:9f:1e:6b:c3:00:14:dc:20: 8c:da:55:de:68:c4:67:cc:22:04:9b:26:72:88:33:f7:87:df: 38:36:e1:dc:fa:26:2d:16:84:4a:3a:ec:34:83:c4:2c:4a:13: 37:c3:eb:0a:0f:fe:27:1e:b7:9f:7e:db:2b:86:c8:c1:2e:19: e3:00:ac:d9:1c:47:39:5f:d3:b3:ec:dc:a2:2a:08:35:a9:45: 33:41:e6:43:03:f3:05:f8:7c:d4:38:da:ea:48:b6:1a:bd:41: 84:87:d3:18:7c:7c:4c:3e:1d:53:55:5b:ef:27:e1:aa:54:b2: be:e4:10:e7:3f:7f:70:8b:75:c2:f8:1a:f2:5a:10:cb:83:64: b8:26:0c:47:43:75:70:2a:48:8d:98:dc:09:32:c5:b5:af:bc: 82:73:52:65:40:77:36:a3:53:6a:a8:9e:62:e7:b1:5c:d0:15: cd:9e:9b:05:ce:23:8c:30:37:64:0b:0e:44:b7:d3:b6:65:8c: 2c:f0:16:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwODIyMTkyMjU5WhcNMjUwODI5MTkyMjU5WjAYMRYwFAYD VQQDEw02OGE4YzM5My03Mjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukBsItztzn+uYqlCnekKbIhfemvZpEXoWvScrjEhjJjhLycA+uyjFjeeU3z4 RFF77H68ikMN6ot9CGN0vJqMAZqgFBtMW4Ein/lLQnjYLFhUbJNSqLOMepaJiIKp qZ6myDCFhCrDCkORITnII68iA7wexSvx83UlLyIwlE+E/M/cWEHh+BqbL892msod DLpzWmxyNcXt3pBlqwO2NQB+ftJ8tCsvwB3ZqRwQE7uf1TNmq1DhUL4Gwxa7M211 3KdCGgwxnNbBbZJZk0NYRvxZPy2dGw/6VdneTO41xFCLbA2+SpuFTVJ/af9PX8CG mVcSgP+9mi5qX4N3PKh2P2LTbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQcA/Cu jAkS3IHIWwm9OBmq4NR5MB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV+w+5mJPaEEO7rF0aYS5whQKXrQOYl7CYg+BazxTqthfUlM54Nq+y 7PVHunh11CufJ87gSfyw4aD7yNVqeuI+nx5rwwAU3CCM2lXeaMRnzCIEmyZyiDP3 h984NuHc+iYtFoRKOuw0g8QsShM3w+sKD/4nHrefftsrhsjBLhnjAKzZHEc5X9Oz 7NyiKgg1qUUzQeZDA/MF+HzUONrqSLYavUGEh9MYfHxMPh1TVVvvJ+GqVLK+5BDn P39wi3XC+BryWhDLg2S4JgxHQ3VwKkiNmNwJMsW1r7yCc1JlQHc2o1NqqJ5i57Fc 0BXNnpsFziOMMDdkCw5Et9O2ZYws8BYh -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:14 2025 by rpki-client