$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: 9gFgDr9jNxxuvRz70eos/gWi0ZZxRk1boVXsrpayMww= Subject key identifier: DA:D7:BD:5E:B2:8D:C3:17:DA:97:B6:7E:2E:D5:63:AB:E3:D8:C6:61 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 7B Signing time: Sun 19 Oct 2025 10:05:23 +0000 Manifest this update: Sun 19 Oct 2025 10:05:22 +0000 Manifest next update: Sun 26 Oct 2025 10:05:22 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: qSiXUY6PtOgRBb1orL+XKeCpJHrQkrcnyiu/7a5haY0=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Oct 19 10:05:22 2025 GMT Not After : Oct 26 10:05:22 2025 GMT Subject: CN=68f4b7e3-9f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e6:73:32:f5:b3:04:4c:b0:75:58:cf:f5:fb: 17:c4:c7:c3:84:c5:a1:11:97:0d:b4:f3:1f:fa:d7: fc:6f:cd:f0:83:55:62:78:81:38:e5:26:fd:4f:ad: 21:15:7c:59:94:19:87:f9:ff:e5:39:6a:ca:2b:01: 24:08:5c:3b:b5:ec:7a:1f:53:2d:a2:6e:25:1c:82: 48:bd:e6:e7:3e:b2:2d:60:20:a2:42:c7:c5:9c:1e: 71:6d:f8:29:d6:a4:d7:89:8f:bb:43:d6:20:aa:6c: 28:73:9d:85:bf:b8:2c:22:7c:64:4d:04:d2:8d:fe: ae:e2:fb:bd:e6:2a:35:12:56:24:24:f6:3f:48:d9: 68:2b:ad:5d:51:e3:a7:55:bc:c6:8b:cb:7c:8c:f0: 7e:6c:66:26:32:3f:ad:d5:de:91:89:12:c1:86:d7: ca:99:58:ed:14:4c:64:56:fb:82:51:7a:86:b3:bf: 03:da:b7:a9:d2:1c:ab:f5:f7:f8:1f:9a:3b:fd:6d: b0:de:8f:0b:e3:d2:c2:91:83:0a:5d:13:b0:70:e7: c1:94:98:1e:32:21:94:96:71:a1:33:0e:a7:c4:15: 59:10:00:62:f5:60:9d:56:5e:68:38:84:87:13:06: 62:b4:cf:f9:6e:76:e5:a8:ad:11:c1:7c:8d:d2:e2: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D7:BD:5E:B2:8D:C3:17:DA:97:B6:7E:2E:D5:63:AB:E3:D8:C6:61 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:31:5a:eb:52:90:03:a1:34:08:9d:9f:74:81:30:09:78: e2:e0:a1:f8:ac:a5:97:aa:ae:5c:68:d3:f3:db:dc:7f:2e:7f: 34:cf:9c:8b:41:48:e4:08:cc:c6:2b:c0:e8:55:04:c8:e7:6c: c7:68:0e:c3:4a:a6:6d:92:0f:f2:de:f1:93:ff:ca:6b:2a:8d: 07:bb:48:9b:5f:af:ea:a5:0a:75:ce:2e:2a:50:83:a2:b7:06: 1b:48:80:7a:ee:9a:6a:d8:2e:13:fc:29:0e:da:e1:65:31:e6: 8a:5e:c6:b8:0f:cd:f4:94:bd:ae:e7:cf:bc:71:ce:78:3e:40: 8f:59:23:61:27:40:54:d8:9c:31:24:3c:34:ff:f8:96:bf:b8: d8:f6:0f:8c:fd:e9:3b:49:53:59:9a:a6:f1:33:98:ac:cc:44: e4:e0:05:42:0a:6d:af:49:9e:6d:d0:33:d7:4d:fa:75:d9:87: 1b:c6:85:d7:b7:26:0f:dd:16:ab:fb:6d:44:13:bf:0d:89:48: 86:c7:ed:c7:97:1c:bf:e8:30:80:f9:67:48:0c:6e:f2:c6:54: 67:3a:4e:c8:d1:3e:ac:80:5f:c6:5e:bf:15:97:9f:f4:ac:3d: 85:a9:e3:8e:f1:d1:cd:e5:91:34:fb:3d:69:bf:6f:59:cf:92: 69:91:21:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5 QzZDRkVDMzAeFw0yNTEwMTkxMDA1MjJaFw0yNTEwMjYxMDA1MjJaMBgxFjAUBgNV BAMTDTY4ZjRiN2UzLTlmNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE5nMy9bMETLB1WM/1+xfEx8OExaERlw208x/61/xvzfCDVWJ4gTjlJv1PrSEV fFmUGYf5/+U5asorASQIXDu17HofUy2ibiUcgki95uc+si1gIKJCx8WcHnFt+CnW pNeJj7tD1iCqbChznYW/uCwifGRNBNKN/q7i+73mKjUSViQk9j9I2WgrrV1R46dV vMaLy3yM8H5sZiYyP63V3pGJEsGG18qZWO0UTGRW+4JReoazvwPat6nSHKv19/gf mjv9bbDejwvj0sKRgwpdE7Bw58GUmB4yIZSWcaEzDqfEFVkQAGL1YJ1WXmg4hIcT BmK0z/luduWorRHBfI3S4vdZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2te9XrKN wxfal7Z+LtVjq+PYxmEwHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0 NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz M0FBL0RDMEYzRUQyRjU0NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1m OTVWNURaY2ZqLTV4c19zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFShMVrrUpADoTQInZ90gTAJeOLgofispZeqrlxo0/Pb3H8ufzTPnItB SOQIzMYrwOhVBMjnbMdoDsNKpm2SD/Le8ZP/ymsqjQe7SJtfr+qlCnXOLipQg6K3 BhtIgHrummrYLhP8KQ7a4WUx5opexrgPzfSUva7nz7xxzng+QI9ZI2EnQFTYnDEk PDT/+Ja/uNj2D4z96TtJU1mapvEzmKzMROTgBUIKba9Jnm3QM9dN+nXZhxvGhde3 Jg/dFqv7bUQTvw2JSIbH7ceXHL/oMID5Z0gMbvLGVGc6TsjRPqyAX8ZevxWXn/Ss PYWp447x0c3lkTT7PWm/b1nPkmmRIUg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:56 2025 by rpki-client