$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: 1NjxOpE8KSbyDN5EUVv7//fxVWV5vwgj22Dc3DLTD34= Subject key identifier: C3:0B:70:2F:B0:23:E1:33:99:55:75:2A:20:A0:AF:8E:D3:22:E3:F7 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 05EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 05DB Signing time: Sat 28 Jun 2025 22:39:29 +0000 Manifest this update: Sat 28 Jun 2025 22:39:29 +0000 Manifest next update: Sat 05 Jul 2025 22:39:29 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: 9fxY9P/5gdNHbDDE71dbEjNrJfJ5fXl28ecORNlnA4E=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: D/6BYkGqlNOLOYOgY8KQs7LafMiP8Rro2RlyCrKrnhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1514 (0x5ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Jun 28 22:39:29 2025 GMT Not After : Jul 5 22:39:29 2025 GMT Subject: CN=68606f21-43c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:92:f2:e3:87:16:2d:42:e2:59:f4:d0:d0: 91:02:82:02:0d:dc:8e:1e:f5:22:a8:4f:95:82:9d: c7:01:76:30:66:e3:ba:45:6f:c8:43:21:ea:44:37: 81:6c:00:48:48:7b:58:be:83:5f:6c:db:c5:88:db: 63:7e:9a:7c:06:0b:2d:bd:e4:1b:ad:04:ec:ec:d4: c3:ce:22:37:32:b7:41:cd:cd:35:89:a4:7d:1a:b2: 62:6a:16:bc:ad:64:4f:b2:ec:38:f4:65:5c:f4:69: c4:ab:7d:e9:46:a3:af:05:9f:01:1b:06:17:e3:7c: ba:91:ee:e8:0d:8e:2e:7e:a7:6c:94:3f:2e:65:36: 8a:b1:e5:cd:6b:e0:11:92:80:19:62:01:5d:80:e2: ea:0b:dd:c6:79:44:f7:6b:b4:43:bc:ef:02:38:53: be:dc:e6:45:b7:fe:6f:54:cf:62:b0:80:fc:a9:2b: dd:1e:f4:68:96:a0:8d:56:09:81:1a:e6:be:a2:1b: 74:38:dd:3e:2f:1c:ff:ee:d8:f1:8b:13:9d:b2:01: f3:bd:a4:ff:c5:58:89:3b:0e:49:3c:a0:17:78:78: df:c8:c7:68:5c:d2:15:cc:9b:56:03:2b:66:c0:ce: 90:c4:cb:45:04:84:e0:78:dd:74:2a:b8:95:3f:f0: 59:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0B:70:2F:B0:23:E1:33:99:55:75:2A:20:A0:AF:8E:D3:22:E3:F7 X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5f:b1:7f:c5:e0:b3:df:da:05:aa:13:f1:d8:1a:d0:7d:5c: 8d:4c:6d:3f:ab:6a:31:72:ab:03:90:75:b5:b0:6f:a0:22:3d: bb:a7:17:a7:2d:79:9e:ad:bc:f3:76:40:4e:31:94:38:5c:cf: a9:ae:e5:20:c2:0a:93:98:27:f3:06:5c:b2:74:0d:8c:6d:d6: e7:69:62:0c:db:66:ba:1d:82:63:ec:79:68:15:26:30:97:95: ad:89:f7:70:37:96:99:b0:3c:16:4c:de:90:72:1d:2e:15:c2: c9:63:ae:5d:6e:0e:dd:bd:9b:88:0b:12:c2:e3:32:aa:bb:31: e5:69:ad:6b:53:2d:4e:d2:88:a3:c9:ba:25:ed:25:eb:d2:ab: 5e:e5:30:b9:2c:8b:5e:67:d0:af:ef:aa:c3:69:e6:c5:89:cd: 88:a5:09:a2:a9:c5:0b:7d:5a:bd:42:d2:0d:f7:93:a0:18:6c: 80:84:66:8f:2f:4a:47:e4:88:70:87:d1:d3:25:b5:2b:23:bc: c6:40:e6:9f:24:31:f3:96:ce:16:7e:6c:8e:88:35:ba:87:9d: f3:bb:ec:14:a4:cb:83:02:91:23:d6:d7:3b:eb:fc:e0:02:3e: 13:e4:0b:3a:91:8b:8a:24:4d:fe:10:08:15:52:74:16:a6:8e: 0f:97:e1:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwNjI4MjIzOTI5WhcNMjUwNzA1MjIzOTI5WjAYMRYwFAYD VQQDEw02ODYwNmYyMS00M2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQOS8uOHFi1C4ln00NCRAoICDdyOHvUiqE+Vgp3HAXYwZuO6RW/IQyHqRDeB bABISHtYvoNfbNvFiNtjfpp8BgstveQbrQTs7NTDziI3MrdBzc01iaR9GrJiaha8 rWRPsuw49GVc9GnEq33pRqOvBZ8BGwYX43y6ke7oDY4ufqdslD8uZTaKseXNa+AR koAZYgFdgOLqC93GeUT3a7RDvO8COFO+3OZFt/5vVM9isID8qSvdHvRolqCNVgmB Gua+oht0ON0+Lxz/7tjxixOdsgHzvaT/xViJOw5JPKAXeHjfyMdoXNIVzJtWAytm wM6QxMtFBITgeN10KriVP/BZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMLcC+w I+EzmVV1KiCgr47TIuP3MB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6X7F/xeCz39oFqhPx2BrQfVyNTG0/q2oxcqsDkHW1sG+gIj27pxen LXmerbzzdkBOMZQ4XM+pruUgwgqTmCfzBlyydA2MbdbnaWIM22a6HYJj7HloFSYw l5WtifdwN5aZsDwWTN6Qch0uFcLJY65dbg7dvZuICxLC4zKquzHlaa1rUy1O0oij ybol7SXr0qte5TC5LIteZ9Cv76rDaebFic2IpQmiqcULfVq9QtIN95OgGGyAhGaP L0pH5Ihwh9HTJbUrI7zGQOafJDHzls4WfmyOiDW6h53zu+wUpMuDApEj1tc76/zg Aj4T5As6kYuKJE3+EAgVUnQWpo4Pl+Ht -----END CERTIFICATE-----Generated at Mon Jun 30 23:49:59 2025 by rpki-client