$ rpki-client -vvf rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft File: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft (raw, json) Hash identifier: lqSYdniZVQLoUHOQbP/AkHKnov0mDhseVEJ+0r+lACM= Subject key identifier: D7:2D:FF:54:E3:9F:27:C1:C8:19:A0:91:4B:9E:04:E9:CA:B3:4F:81 Authority key identifier: 28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D Certificate issuer: /CN=A9195393/serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Certificate serial: 0B56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft Manifest number: 0B4E Signing time: Sat 18 Oct 2025 20:05:31 +0000 Manifest this update: Sat 18 Oct 2025 20:05:30 +0000 Manifest next update: Sat 25 Oct 2025 20:05:30 +0000 Files and hashes: 1: KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl (hash: aFTPFNCRUcPhgvciRgQCgi10+0e9Z+eizze2E8AN8Uo=) 2: 784507FC9F4211ECB5BC4D14C4F9AE02.roa (hash: PBxuOjfrdrDDuEDomrmcRpD3hGyzwGEVv00t5Rb1VZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2902 (0xb56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195393, serialNumber=280B2E93B4AFD20320A3D082A5B3CDA3B00D2E1D Validity Not Before: Oct 18 20:05:30 2025 GMT Not After : Oct 25 20:05:30 2025 GMT Subject: CN=68f3f30b-2d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:45:99:f7:55:fb:a4:13:8c:b4:f5:bb:eb:29: 2d:9a:e9:98:e7:ca:83:26:14:ce:c4:73:55:31:74: 9a:a4:fa:21:12:e8:74:76:29:90:2c:8d:e1:fb:a0: b0:bd:a9:d4:d3:ec:8f:3e:4c:f2:73:89:4d:20:bd: 8c:e8:8c:e1:d0:5c:f0:fa:83:41:21:21:eb:69:8c: 07:fd:1f:ad:3b:23:1d:55:b8:05:9f:b4:f3:3e:ab: 5a:59:d7:a1:a0:da:ea:78:3c:5c:6b:ac:99:10:2e: de:55:0b:15:5e:a5:84:38:b5:7f:5e:d5:d8:7c:87: 02:1c:46:4e:e0:b9:46:4f:3a:f5:46:c3:88:be:3e: bd:87:83:dc:84:f7:1e:a2:14:16:ab:a5:1e:de:63: 9d:c3:8d:51:45:1f:1e:18:2f:93:31:d9:2d:c6:38: 35:05:b5:41:d2:03:f7:c1:b3:38:3d:93:37:eb:8b: 90:15:fc:d8:86:fd:d3:07:14:7f:d2:cb:5a:a8:e3: 60:c2:88:5f:08:4a:5a:d5:06:c0:d5:75:64:4b:42: 14:6a:31:83:8a:15:56:b6:18:f5:e8:c4:0e:08:b3: c7:82:b6:f8:b9:06:69:c6:26:13:d0:b2:74:10:fb: 77:d2:24:22:a6:b2:bc:b9:70:71:39:02:06:a6:f3: a7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:FF:54:E3:9F:27:C1:C8:19:A0:91:4B:9E:04:E9:CA:B3:4F:81 X509v3 Authority Key Identifier: keyid:28:0B:2E:93:B4:AF:D2:03:20:A3:D0:82:A5:B3:CD:A3:B0:0D:2E:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195393/886E8344431711EAAE88C720C4F9AE02/KAsuk7Sv0gMgo9CCpbPNo7ANLh0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:df:ee:4c:a8:24:3a:aa:23:06:af:f6:9f:2d:b9:80:6f:75: 90:2b:9a:1c:45:6f:89:36:f0:0f:7a:2c:57:d9:e3:e3:3c:18: ba:2a:5b:08:41:4f:4a:55:88:a1:69:28:4d:e0:78:23:b4:33: f8:e7:cd:4f:32:24:c2:be:99:92:ec:b1:83:eb:d8:71:2d:28: 62:b6:41:b3:58:bc:95:2d:33:ea:44:dc:9f:c6:3e:9d:54:d8: e3:ee:8b:78:00:fc:8b:c9:f6:93:55:26:42:44:38:fd:9e:96: c2:44:ca:54:44:41:1f:37:83:f6:cb:21:81:9f:ee:c4:a2:96: c6:dc:8b:c8:e5:55:cf:4b:fb:08:41:bc:19:fe:2a:ee:a6:2f: 99:60:c1:ca:7d:80:ab:67:08:a1:97:dd:c0:d5:a8:ed:2e:47: 76:b7:2f:48:b5:56:68:bf:8f:b5:05:ec:10:44:e1:ac:65:b4: 4f:67:09:4d:89:c9:0d:89:3e:f3:76:17:91:ec:dd:7d:e3:4a: b4:5f:4d:45:0b:27:d6:51:a8:fb:b5:ac:f0:c3:81:9f:72:bc: 1b:c6:94:34:3d:df:26:89:70:94:7f:3d:f4:5b:3f:59:53:81: fc:a6:e1:39:96:13:80:0f:4c:c7:14:a3:a3:2a:e5:39:b3:3c: 5f:bb:64:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTUzOTMxMTAvBgNVBAUTKDI4MEIyRTkzQjRBRkQyMDMyMEEzRDA4MkE1QjNDREEz QjAwRDJFMUQwHhcNMjUxMDE4MjAwNTMwWhcNMjUxMDI1MjAwNTMwWjAYMRYwFAYD VQQDEw02OGYzZjMwYi0yZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukWZ91X7pBOMtPW76yktmumY58qDJhTOxHNVMXSapPohEuh0dimQLI3h+6Cw vanU0+yPPkzyc4lNIL2M6Izh0Fzw+oNBISHraYwH/R+tOyMdVbgFn7TzPqtaWdeh oNrqeDxca6yZEC7eVQsVXqWEOLV/XtXYfIcCHEZO4LlGTzr1RsOIvj69h4PchPce ohQWq6Ue3mOdw41RRR8eGC+TMdktxjg1BbVB0gP3wbM4PZM364uQFfzYhv3TBxR/ 0staqONgwohfCEpa1QbA1XVkS0IUajGDihVWthj16MQOCLPHgrb4uQZpxiYT0LJ0 EPt30iQiprK8uXBxOQIGpvOnbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNct/1Tj nyfByBmgkUueBOnKs0+BMB8GA1UdIwQYMBaAFCgLLpO0r9IDIKPQgqWzzaOwDS4d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM5My84ODZFODM0NDQz MTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBnTWdvOUNDcGJQTm83QU5M aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tBc3VrN1N2MGdNZ285Q0NwYlBObzdBTkxoMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTM5My84ODZFODM0NDQzMTcxMUVBQUU4OEM3MjBDNEY5QUUwMi9LQXN1azdTdjBn TWdvOUNDcGJQTm83QU5MaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs3+5MqCQ6qiMGr/afLbmAb3WQK5ocRW+JNvAPeixX2ePjPBi6KlsI QU9KVYihaShN4HgjtDP4581PMiTCvpmS7LGD69hxLShitkGzWLyVLTPqRNyfxj6d VNjj7ot4APyLyfaTVSZCRDj9npbCRMpUREEfN4P2yyGBn+7EopbG3IvI5VXPS/sI QbwZ/irupi+ZYMHKfYCrZwihl93A1ajtLkd2ty9ItVZov4+1BewQROGsZbRPZwlN ickNiT7zdheR7N1940q0X01FCyfWUaj7tazww4GfcrwbxpQ0Pd8miXCUfz30Wz9Z U4H8puE5lhOAD0zHFKOjKuU5szxfu2QJ -----END CERTIFICATE-----Generated at Mon Oct 20 16:16:53 2025 by rpki-client