$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: KKJH9OLnEigFeHX0vEKUMQqieFvUvXqVqIHa8CNqZ5c= Subject key identifier: DC:C8:A5:13:39:A0:20:79:3B:FA:A2:A6:BF:61:2E:A9:3F:77:14:22 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0AFE Signing time: Mon 12 May 2025 19:11:36 +0000 Manifest this update: Mon 12 May 2025 19:11:35 +0000 Manifest next update: Mon 19 May 2025 19:11:35 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: zGHsROJ6UTYc3nCSZMTlkWsJruI0LYCpO8KYPEqXsw4=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: May 12 19:11:35 2025 GMT Not After : May 19 19:11:35 2025 GMT Subject: CN=682247e8-e73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:ce:0a:cb:40:a4:34:b0:a8:71:de:41:7e: 84:12:7f:c7:0d:5c:2e:8e:fa:90:1e:ae:c9:08:6e: 6d:f8:9c:2e:7b:18:f4:67:59:e1:ba:16:4b:40:85: 39:fa:b9:56:cc:3f:a5:47:85:33:a9:7e:54:54:c1: 7b:bd:06:e3:2c:cf:37:20:0b:20:83:9d:78:9e:a0: 5c:ed:73:16:f0:33:cf:65:42:97:26:5d:e5:ab:27: 0e:7b:f5:8a:78:20:b3:97:2b:98:50:94:86:41:b2: 1e:6b:62:c8:25:f1:16:92:79:a5:13:d6:2a:dc:24: 96:49:ea:cc:73:ba:48:a9:2e:14:fb:8f:3b:91:ee: 60:2a:2b:10:db:99:56:0b:94:78:1b:8f:4d:10:05: 21:a4:db:52:e9:a5:bb:17:7b:64:a6:d9:08:70:a4: 28:35:d4:0a:52:95:18:a0:96:fc:f1:a5:a3:c5:b9: 54:4d:d3:62:39:c8:16:05:4d:00:b5:67:03:ea:0f: a3:42:18:76:a9:8c:b2:3f:e3:63:1c:f4:94:75:3f: 48:22:6c:84:5b:51:cd:b9:ad:a2:69:86:6c:17:ba: 38:70:55:90:5d:8d:82:52:e3:66:de:d0:3b:3a:84: a7:d4:77:de:33:ee:db:c1:a2:66:75:c8:23:e9:9d: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C8:A5:13:39:A0:20:79:3B:FA:A2:A6:BF:61:2E:A9:3F:77:14:22 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:92:76:bf:20:69:d0:84:db:99:52:c7:e1:ae:64:fc:69:ed: 5c:d7:17:04:4d:9c:78:da:82:f9:a3:c9:4e:89:f8:5b:f9:91: da:df:a4:fd:52:53:ec:21:8c:87:9b:24:46:2c:61:a5:56:ab: 0d:d3:ff:f1:62:e4:a9:34:04:8d:2d:d7:dc:0e:0f:2e:34:58: 62:b2:5e:46:4d:40:aa:86:ae:ff:ac:ff:94:2b:65:2d:98:7f: 25:e7:ef:5e:12:f8:eb:93:27:ad:ad:65:9c:ca:0c:f2:ea:40: 7f:44:96:20:2a:f3:30:35:6c:19:46:58:3b:eb:25:1b:c4:0e: 6c:5d:cc:9a:d6:75:34:07:3d:86:a0:67:bb:eb:16:b9:ad:c0: 32:d7:a5:3c:15:78:8f:c4:eb:e0:81:b0:47:f4:0c:65:3a:66: b2:7f:cc:66:9c:a1:a6:fd:c7:c2:e6:cb:47:3f:c8:e4:df:4d: 44:00:b9:0f:ed:94:a6:e4:b3:3a:31:0f:bd:d2:93:16:3f:3b: 15:1e:f1:29:99:1c:28:6a:31:6b:98:71:80:fe:3c:4a:5f:da: dd:06:d1:b4:48:47:b0:f8:a7:5d:d5:b0:00:8a:f2:1d:b2:62: 87:40:f5:89:5f:52:f2:c5:b3:9b:99:c0:f8:7f:64:99:8f:5c: 61:d3:46:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUwNTEyMTkxMTM1WhcNMjUwNTE5MTkxMTM1WjAYMRYwFAYD VQQDEw02ODIyNDdlOC1lNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IrOCstApDSwqHHeQX6EEn/HDVwujvqQHq7JCG5t+Jwuexj0Z1nhuhZLQIU5 +rlWzD+lR4UzqX5UVMF7vQbjLM83IAsgg514nqBc7XMW8DPPZUKXJl3lqycOe/WK eCCzlyuYUJSGQbIea2LIJfEWknmlE9Yq3CSWSerMc7pIqS4U+487ke5gKisQ25lW C5R4G49NEAUhpNtS6aW7F3tkptkIcKQoNdQKUpUYoJb88aWjxblUTdNiOcgWBU0A tWcD6g+jQhh2qYyyP+NjHPSUdT9IImyEW1HNua2iaYZsF7o4cFWQXY2CUuNm3tA7 OoSn1HfeM+7bwaJmdcgj6Z1sWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzIpRM5 oCB5O/qipr9hLqk/dxQiMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFkna/IGnQhNuZUsfhrmT8ae1c1xcETZx42oL5o8lOifhb+ZHa36T9 UlPsIYyHmyRGLGGlVqsN0//xYuSpNASNLdfcDg8uNFhisl5GTUCqhq7/rP+UK2Ut mH8l5+9eEvjrkyetrWWcygzy6kB/RJYgKvMwNWwZRlg76yUbxA5sXcya1nU0Bz2G oGe76xa5rcAy16U8FXiPxOvggbBH9AxlOmayf8xmnKGm/cfC5stHP8jk301EALkP 7ZSm5LM6MQ+90pMWPzsVHvEpmRwoajFrmHGA/jxKX9rdBtG0SEew+Kdd1bAAivId smKHQPWJX1LyxbObmcD4f2SZj1xh00bo -----END CERTIFICATE-----Generated at Tue May 13 22:53:55 2025 by rpki-client