$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: 4+nK7KkVIZd7oZ0ZDqpz2qsBGUh5pg5LhkSgFMlrHMU= Subject key identifier: 07:84:6F:65:29:3F:C7:AA:A3:AB:A7:3B:C4:D3:96:C4:4C:B7:94:60 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 0614 Signing time: Sun 19 Oct 2025 00:30:13 +0000 Manifest this update: Sun 19 Oct 2025 00:30:12 +0000 Manifest next update: Sun 26 Oct 2025 00:30:12 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: FHotM0CddqE07caD1d/+7u99TeCExA2dswkypiQjKbs=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: D/6BYkGqlNOLOYOgY8KQs7LafMiP8Rro2RlyCrKrnhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Oct 19 00:30:12 2025 GMT Not After : Oct 26 00:30:12 2025 GMT Subject: CN=68f43114-4040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:a3:5a:12:ed:d6:22:01:77:1c:2b:96:3b: 70:58:e1:06:69:60:a2:99:4d:ef:2a:ef:4a:86:55: da:ce:d2:fc:97:b5:eb:db:99:0d:29:b9:7f:1b:cc: 47:4c:78:cf:0c:1e:4f:be:b9:af:36:2c:11:cf:92: 6b:75:28:e4:00:6a:28:94:81:d9:02:d0:83:6c:97: 11:9a:17:31:c0:02:e9:41:60:80:9f:e3:e6:d2:8c: 6e:d7:64:d8:c7:6c:ec:98:07:6b:0f:b2:7e:74:ea: be:91:9b:ad:60:d8:89:e5:8d:78:08:4d:aa:cb:8f: 8d:41:89:98:60:48:6c:fa:a9:c0:e9:37:49:ae:0c: 7d:5f:41:a6:9c:5a:5a:59:d4:c7:e9:19:d3:f9:7f: 04:61:f9:61:bf:0c:b3:e4:71:e9:9d:4d:d9:f6:7b: e6:3e:2f:1d:06:10:4b:00:90:86:2f:d0:9d:9d:20: ec:6f:bb:94:2e:82:85:2e:a3:55:c4:5e:52:72:8a: 1b:67:33:8a:b7:2d:d3:07:fb:32:c5:be:09:3f:72: 22:d4:f4:4e:c3:08:e3:51:54:5d:b7:83:b2:96:1b: 9c:cc:75:04:76:90:e3:46:7a:ef:d1:ab:32:83:9a: b7:a8:91:6c:68:40:ce:3f:0b:80:e3:f4:68:44:43: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:84:6F:65:29:3F:C7:AA:A3:AB:A7:3B:C4:D3:96:C4:4C:B7:94:60 X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:88:93:6c:27:c4:a1:5f:d7:8f:0c:69:c1:14:0a:b3:90:13: b4:c0:54:c8:96:04:4e:66:b5:5f:58:5d:de:14:3b:96:8a:ae: 8c:e4:df:4e:2d:2a:4e:83:54:12:9d:40:a4:78:5d:f1:67:db: 5c:ec:91:03:67:6f:81:56:58:fa:50:f5:ac:be:45:38:a3:d7: 4a:9b:42:2a:ee:70:bc:36:a8:82:95:a5:b3:aa:dd:95:9a:f1: 8a:78:fb:63:88:7c:e1:6f:aa:fe:90:b3:d4:d3:68:b5:06:15: f7:14:3d:a9:80:a4:fc:60:40:eb:8a:f2:e2:54:79:00:b3:29: 16:8e:ca:29:7d:1b:cf:ab:a3:ac:c7:74:27:ee:0a:de:04:b8: ff:29:07:b0:e2:37:f2:10:a7:f3:ec:4f:28:a1:9c:41:e0:4b: 1c:47:e3:70:e6:1a:d2:f6:0e:66:2d:eb:61:24:36:02:59:85: 11:1e:c9:5a:8b:c4:68:94:c0:98:d2:9e:67:86:1d:30:88:9c: de:52:67:d3:2e:61:7a:f1:73:ca:f1:ea:fc:de:8c:d4:1c:f3: cc:38:94:05:8b:56:04:5e:33:7c:d2:af:20:ff:80:4e:74:b4: a3:02:93:58:ac:2e:1d:73:0e:dd:f9:7e:cb:4c:f0:7c:4d:b0: 21:3d:84:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUxMDE5MDAzMDEyWhcNMjUxMDI2MDAzMDEyWjAYMRYwFAYD VQQDEw02OGY0MzExNC00MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB2jWhLt1iIBdxwrljtwWOEGaWCimU3vKu9KhlXaztL8l7Xr25kNKbl/G8xH THjPDB5PvrmvNiwRz5JrdSjkAGoolIHZAtCDbJcRmhcxwALpQWCAn+Pm0oxu12TY x2zsmAdrD7J+dOq+kZutYNiJ5Y14CE2qy4+NQYmYYEhs+qnA6TdJrgx9X0GmnFpa WdTH6RnT+X8EYflhvwyz5HHpnU3Z9nvmPi8dBhBLAJCGL9CdnSDsb7uULoKFLqNV xF5ScoobZzOKty3TB/syxb4JP3Ii1PROwwjjUVRdt4OylhuczHUEdpDjRnrv0asy g5q3qJFsaEDOPwuA4/RoREOYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAeEb2Up P8eqo6unO8TTlsRMt5RgMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsiJNsJ8ShX9ePDGnBFAqzkBO0wFTIlgROZrVfWF3eFDuWiq6M5N9O LSpOg1QSnUCkeF3xZ9tc7JEDZ2+BVlj6UPWsvkU4o9dKm0Iq7nC8NqiClaWzqt2V mvGKePtjiHzhb6r+kLPU02i1BhX3FD2pgKT8YEDrivLiVHkAsykWjsopfRvPq6Os x3Qn7greBLj/KQew4jfyEKfz7E8ooZxB4EscR+Nw5hrS9g5mLethJDYCWYURHsla i8RolMCY0p5nhh0wiJzeUmfTLmF68XPK8er83ozUHPPMOJQFi1YEXjN80q8g/4BO dLSjApNYrC4dcw7d+X7LTPB8TbAhPYSL -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:56 2025 by rpki-client