$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: JwAsNLwQCF1cMHj3yKhFnUWCHAWhKxxVXFD/NyeEbi4= Subject key identifier: 15:7A:10:13:28:40:19:BB:B6:9A:37:5B:88:74:C9:C0:65:7C:58:6D Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 05CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 05C1 Signing time: Sat 10 May 2025 22:44:09 +0000 Manifest this update: Sat 10 May 2025 22:44:09 +0000 Manifest next update: Sat 17 May 2025 22:44:09 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: rabB/insiPUdeyYfouK0sf+6iqAp+iaR9TpPxtHFgw8=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: JIQ3Z5Vql3trgih29wB+iKDBgbYVi7iH8FQ6aCEf6sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1487 (0x5cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: May 10 22:44:09 2025 GMT Not After : May 17 22:44:09 2025 GMT Subject: CN=681fd6b9-3e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d7:53:02:90:f8:8f:6a:67:85:93:32:3b:ee: e0:56:b0:56:d6:81:5a:93:fd:61:26:f5:7e:7d:be: 55:0c:b0:a9:bc:ae:f1:32:36:9a:6b:d8:0c:95:3f: 73:36:d7:fa:d4:47:a6:73:89:a4:9a:22:fa:ee:93: 4f:ae:23:44:01:a8:04:a2:2a:2d:54:e2:cd:aa:e3: 7b:d1:b1:56:7c:b4:b2:5f:b4:9a:af:09:d8:0b:53: 52:c0:29:e2:a4:10:0b:f1:21:a8:b9:cd:d8:06:b9: c5:e8:ae:5f:2d:ea:08:7a:69:6d:3f:8b:fa:b3:25: 08:cc:19:08:61:93:05:f4:c7:84:a4:90:ce:ad:1c: b0:4e:f7:fd:8d:09:ce:9c:0d:89:c2:da:92:3b:9d: f3:0c:2b:16:51:e6:97:c6:00:9d:11:9c:f2:1f:2b: 15:a5:48:c7:32:d3:d1:fe:a4:2b:b0:e1:b8:d1:2f: 30:c0:39:3f:de:9f:47:42:ba:64:c8:24:cd:5b:8b: 54:17:5a:7d:a7:5d:a6:7b:bb:b5:f0:b5:03:6f:60: 40:e5:e2:c2:7b:af:27:98:9b:c2:7f:14:be:64:a7: 1b:ca:58:79:b8:55:ea:81:4f:28:39:cc:c8:0f:06: 75:8d:0b:1a:17:13:c6:31:76:f0:04:89:1b:2d:0f: 4a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7A:10:13:28:40:19:BB:B6:9A:37:5B:88:74:C9:C0:65:7C:58:6D X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d2:be:53:43:eb:75:4c:dd:85:c5:85:0a:a8:a6:2b:e3:e6: 1d:1e:bc:0b:54:fe:55:3d:f6:b3:06:0f:b7:ad:65:27:93:6b: ab:67:d1:3c:f7:0e:fe:99:94:10:67:01:b0:ba:75:cc:c0:67: 77:b5:6d:69:af:5c:41:93:f7:8f:a5:9b:4f:a3:11:ae:f2:7c: d7:93:25:00:d5:00:ba:32:90:40:cb:16:b8:a6:f5:7f:71:80: ad:d3:74:83:3c:83:3d:f0:cf:ab:66:84:69:e2:78:05:2d:c4: 59:f1:3e:7c:a8:54:0a:51:f7:fc:89:6d:f0:d0:57:31:1f:49: 63:b0:f0:e6:1a:50:a1:2c:0b:3f:2f:11:31:b9:d2:d6:1a:2c: 9f:ff:6b:1f:66:6f:06:5f:6d:11:d1:86:d9:3f:c3:a6:f1:fb: 7a:4b:16:f5:ae:db:24:a5:e0:ad:35:97:3f:c4:dd:b7:6a:47: 70:27:4e:af:ca:09:6e:a8:53:b4:88:76:8e:f7:5e:99:31:4b: 3c:48:cb:b1:4f:bc:92:3b:08:6b:f1:48:e0:f0:c8:b8:59:fe: 87:c0:3a:13:2f:3b:ae:2f:21:07:6e:20:d9:a2:8a:b9:38:9e: e8:eb:0e:81:67:63:97:73:8c:e8:9e:c8:d6:dc:92:58:83:25: b8:48:3f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwNTEwMjI0NDA5WhcNMjUwNTE3MjI0NDA5WjAYMRYwFAYD VQQDEw02ODFmZDZiOS0zZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA09dTApD4j2pnhZMyO+7gVrBW1oFak/1hJvV+fb5VDLCpvK7xMjaaa9gMlT9z Ntf61Eemc4mkmiL67pNPriNEAagEoiotVOLNquN70bFWfLSyX7SarwnYC1NSwCni pBAL8SGouc3YBrnF6K5fLeoIemltP4v6syUIzBkIYZMF9MeEpJDOrRywTvf9jQnO nA2JwtqSO53zDCsWUeaXxgCdEZzyHysVpUjHMtPR/qQrsOG40S8wwDk/3p9HQrpk yCTNW4tUF1p9p12me7u18LUDb2BA5eLCe68nmJvCfxS+ZKcbylh5uFXqgU8oOczI DwZ1jQsaFxPGMXbwBIkbLQ9KdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV6EBMo QBm7tpo3W4h0ycBlfFhtMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCe0r5TQ+t1TN2FxYUKqKYr4+YdHrwLVP5VPfazBg+3rWUnk2urZ9E8 9w7+mZQQZwGwunXMwGd3tW1pr1xBk/ePpZtPoxGu8nzXkyUA1QC6MpBAyxa4pvV/ cYCt03SDPIM98M+rZoRp4ngFLcRZ8T58qFQKUff8iW3w0FcxH0ljsPDmGlChLAs/ LxExudLWGiyf/2sfZm8GX20R0YbZP8Om8ft6Sxb1rtskpeCtNZc/xN23akdwJ06v ygluqFO0iHaO916ZMUs8SMuxT7ySOwhr8Ujg8Mi4Wf6HwDoTLzuuLyEHbiDZooq5 OJ7o6w6BZ2OXc4zonsjW3JJYgyW4SD8O -----END CERTIFICATE-----Generated at Sun May 11 03:43:37 2025 by rpki-client