$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: kDG89oBFBJ6tNuCd+YTFyPHvodKPXzRIoBgpvBwf6kc= Subject key identifier: 99:30:97:B5:12:2B:F3:EE:CD:5C:D2:03:53:E0:1A:46:3D:A2:D4:4F Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 05F7 Signing time: Fri 22 Aug 2025 23:09:30 +0000 Manifest this update: Fri 22 Aug 2025 23:09:29 +0000 Manifest next update: Fri 29 Aug 2025 23:09:29 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: ITr2aaRNGOte8OgM0kuCcFHtlHQ8NXhGUuv61lDYOXE=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: D/6BYkGqlNOLOYOgY8KQs7LafMiP8Rro2RlyCrKrnhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:09:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109, serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Validity Not Before: Aug 22 23:09:29 2025 GMT Not After : Aug 29 23:09:29 2025 GMT Subject: CN=68a8f8a9-00bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:45:d1:f4:51:8c:0e:27:bc:5a:d9:8a:e0: 1c:d5:a8:3c:7c:1b:58:62:7b:4f:ca:d2:ea:97:32: 62:d1:87:b0:82:dc:f0:e1:a5:87:58:a4:63:ff:f2: 0a:41:d2:21:ee:e4:2f:46:11:37:9f:22:6b:4a:81: 0d:2d:8c:19:a7:b7:41:33:a9:ca:60:1c:7e:21:45: 72:41:fe:76:9b:2e:7d:57:f4:a9:85:44:0f:82:9e: 07:7a:02:73:07:4e:31:d2:16:1e:f9:3c:e4:eb:d9: 27:cd:fd:d3:01:5e:a0:8f:1d:84:d8:f4:8d:16:bd: 2d:39:63:9a:41:4a:ad:cc:d1:7d:a9:67:54:5f:87: 41:45:7a:a0:70:94:f5:66:a4:9d:87:a0:f2:b5:e8: c9:af:06:31:40:31:5e:72:b0:6e:ed:c9:86:55:65: 97:48:3f:1a:28:f4:77:7f:12:35:41:7d:fc:06:3c: e3:50:9d:e4:f2:8c:08:88:25:b5:96:35:3d:af:57: 93:16:a4:49:30:db:7c:d8:b3:95:be:7a:22:72:6c: 6d:98:50:4c:ee:de:27:71:d3:c7:25:07:4c:c6:8c: e5:b0:47:d4:d3:4a:65:cb:6d:e7:5a:f9:c1:7f:b1: 81:71:ef:c0:67:44:b1:26:16:12:17:53:cb:68:03: 13:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:30:97:B5:12:2B:F3:EE:CD:5C:D2:03:53:E0:1A:46:3D:A2:D4:4F X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:4c:ae:ea:72:23:c2:65:2d:f1:1d:dc:28:b8:3f:ae:78:f8: d3:b3:42:2e:68:ea:8d:52:11:b6:ac:64:63:96:55:6a:22:9e: 7a:00:cc:dc:a2:7b:d9:d8:a5:5a:56:72:2a:f2:f2:cc:53:3a: 25:5b:51:a5:21:a4:07:d1:98:4c:0f:fa:cb:e2:e6:54:e1:b1: 5a:e9:5e:de:00:5c:52:50:de:e2:9a:42:d8:9e:21:d8:f6:d0: 91:da:0a:d7:52:aa:15:0c:3e:b5:b6:a7:e1:14:16:3c:2f:c1: f1:e9:79:00:ae:52:60:95:67:a5:08:bd:bc:be:3f:66:73:eb: 03:a7:33:89:d2:db:f7:18:8c:0a:2c:c5:0b:0f:18:9a:0a:98: e1:1c:6b:bd:eb:20:54:b2:1f:01:6e:b8:21:c2:c3:f0:55:b3: 37:e0:bc:67:58:80:43:9a:08:6b:2a:40:77:6c:77:a2:57:e1: b6:ae:e3:97:92:a5:d5:41:6d:80:31:7d:d5:1d:49:a5:a5:57: 7b:ed:bd:c9:0b:78:c8:56:86:61:56:eb:42:99:e9:e7:4a:d0: c4:80:e4:fb:c7:0d:f5:cf:59:4a:be:e2:46:a5:97:d7:b5:6b: c9:05:42:05:8f:c7:b9:8f:f0:96:23:d8:41:f1:53:92:10:1e: 41:62:23:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwODIyMjMwOTI5WhcNMjUwODI5MjMwOTI5WjAYMRYwFAYD VQQDEw02OGE4ZjhhOS0wMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrJF0fRRjA4nvFrZiuAc1ag8fBtYYntPytLqlzJi0Yewgtzw4aWHWKRj//IK QdIh7uQvRhE3nyJrSoENLYwZp7dBM6nKYBx+IUVyQf52my59V/SphUQPgp4HegJz B04x0hYe+Tzk69knzf3TAV6gjx2E2PSNFr0tOWOaQUqtzNF9qWdUX4dBRXqgcJT1 ZqSdh6DytejJrwYxQDFecrBu7cmGVWWXSD8aKPR3fxI1QX38BjzjUJ3k8owIiCW1 ljU9r1eTFqRJMNt82LOVvnoicmxtmFBM7t4ncdPHJQdMxozlsEfU00ply23nWvnB f7GBce/AZ0SxJhYSF1PLaAMTkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJkwl7US K/PuzVzSA1PgGkY9otRPMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuTK7qciPCZS3xHdwouD+uePjTs0IuaOqNUhG2rGRjllVqIp56AMzc onvZ2KVaVnIq8vLMUzolW1GlIaQH0ZhMD/rL4uZU4bFa6V7eAFxSUN7imkLYniHY 9tCR2grXUqoVDD61tqfhFBY8L8Hx6XkArlJglWelCL28vj9mc+sDpzOJ0tv3GIwK LMULDxiaCpjhHGu96yBUsh8BbrghwsPwVbM34LxnWIBDmghrKkB3bHeiV+G2ruOX kqXVQW2AMX3VHUmlpVd77b3JC3jIVoZhVutCmennStDEgOT7xw31z1lKvuJGpZfX tWvJBUIFj8e5j/CWI9hB8VOSEB5BYiMg -----END CERTIFICATE-----Generated at Sat Aug 23 18:53:53 2025 by rpki-client