$ rpki-client -vvf rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft File: KOAXfHClckcH27FJ7VV8D4FW4Ok.mft (raw, json) Hash identifier: nLri/PwoopkP89K+e77z5/ciCfaOa8bCu91m+GtpQAE= Subject key identifier: 35:F2:21:1E:A3:37:60:D1:87:D2:C0:46:AF:31:87:64:38:0E:AB:87 Authority key identifier: 28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 Certificate issuer: /CN=A9136109/serialNumber=28E0177C70A5724707DBB149ED557C0F8156E0E9 Certificate serial: 05BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft Manifest number: 05AF Signing time: Fri 04 Apr 2025 23:18:09 +0000 Manifest this update: Fri 04 Apr 2025 23:18:08 +0000 Manifest next update: Fri 11 Apr 2025 23:18:08 +0000 Files and hashes: 1: KOAXfHClckcH27FJ7VV8D4FW4Ok.crl (hash: wOL+URX1YsHv9kTbM1MJSbMeb9NrsO+ce9/pCZobcss=) 2: 590697D6465611EE8128031BC4F9AE02.roa (hash: JIQ3Z5Vql3trgih29wB+iKDBgbYVi7iH8FQ6aCEf6sw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1469 (0x5bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136109 Validity Not Before: Apr 4 23:18:08 2025 GMT Not After : Apr 11 23:18:08 2025 GMT Subject: CN=67f068b0-a67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:62:7b:1d:e7:14:51:d2:2f:3b:17:79:bb:29: 8b:64:a8:ef:8d:9d:49:f4:2a:04:c2:ce:65:58:28: 1a:c5:58:a0:64:79:43:09:93:a4:70:1c:dc:f8:d3: f9:f1:9d:5a:7f:68:1d:90:e0:75:c8:79:b6:05:6c: 02:2c:dd:f0:a5:f4:45:a5:aa:ee:96:42:5e:61:7b: 4d:74:7d:34:fe:27:62:b7:ae:20:35:ce:bd:77:a3: 9e:10:a2:7c:c1:cd:ab:ce:28:25:da:fb:2d:21:e0: 6d:21:1c:0c:f6:1f:40:08:67:3e:c1:85:b2:91:0b: a4:69:8b:6e:3f:6a:a9:8a:30:bd:68:ac:b9:d3:88: 78:4c:85:e0:9c:fe:f2:f6:bd:d4:99:5d:ec:c8:c6: cc:2f:7f:28:e3:33:ce:eb:c4:a5:a3:a6:cc:c8:65: b6:5b:d4:5f:a7:29:47:b0:49:06:b8:22:c5:c6:27: bd:27:4a:3f:8e:e2:f7:f8:c5:6e:57:a1:6f:bc:66: 30:8c:3c:01:6e:5c:b0:a3:95:98:a1:63:08:ba:ec: c6:c5:6e:b1:bf:27:fc:82:40:25:b7:52:1c:f3:88: 32:3c:dc:ba:be:2c:9b:b0:19:99:a1:dc:f8:11:d3: fd:3d:c2:8d:4e:c4:a3:bb:ec:a0:f3:84:6e:e3:c4: 60:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F2:21:1E:A3:37:60:D1:87:D2:C0:46:AF:31:87:64:38:0E:AB:87 X509v3 Authority Key Identifier: keyid:28:E0:17:7C:70:A5:72:47:07:DB:B1:49:ED:55:7C:0F:81:56:E0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KOAXfHClckcH27FJ7VV8D4FW4Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136109/C8207212C50D11EB9AAEE87BC4F9AE02/KOAXfHClckcH27FJ7VV8D4FW4Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f7:d4:d8:d7:73:6f:29:c2:dc:c4:24:fb:88:f0:f1:03:d8: 82:36:91:12:79:d8:15:45:6a:3f:78:89:cd:0f:88:87:c2:aa: bc:ec:be:c7:d2:58:d0:f7:52:cc:9e:ef:68:a9:26:e2:7f:9a: b8:81:bc:08:83:09:73:21:87:f8:0d:5d:66:4f:81:e0:a4:8d: 3a:d2:89:27:34:94:0c:ef:15:81:83:79:44:3d:ff:c7:18:ae: 43:e7:dc:6a:c7:d5:97:46:72:b0:4d:b4:dd:b8:8b:7d:f2:01: 56:4d:42:c5:8b:e2:87:e4:b3:71:55:28:15:b9:6d:64:f3:30: 37:60:a6:8a:20:e6:b4:59:84:f8:4b:63:63:d8:35:d9:fc:fc: ea:4b:c6:bd:2b:95:99:04:de:7c:5e:bf:7d:9b:26:e2:5f:0f: 2b:36:f3:83:85:cb:fb:b3:cf:e0:e1:af:c1:73:59:36:58:a8: e0:6b:42:d8:f7:f2:f5:49:4c:12:c1:12:15:2b:ce:b8:2a:c0: d1:bd:85:f5:bf:d4:7b:59:fb:0f:e3:c2:76:d2:5a:3b:79:73: bd:95:48:f8:7a:26:d4:ba:9d:89:2f:1b:f5:d9:1a:ac:53:63: af:f6:55:07:ff:fc:fb:07:14:dc:d3:37:c9:0e:f1:11:70:3e: f1:ec:57:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzYxMDkxMTAvBgNVBAUTKDI4RTAxNzdDNzBBNTcyNDcwN0RCQjE0OUVENTU3QzBG ODE1NkUwRTkwHhcNMjUwNDA0MjMxODA4WhcNMjUwNDExMjMxODA4WjAYMRYwFAYD VQQDEw02N2YwNjhiMC1hNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GJ7HecUUdIvOxd5uymLZKjvjZ1J9CoEws5lWCgaxVigZHlDCZOkcBzc+NP5 8Z1af2gdkOB1yHm2BWwCLN3wpfRFparulkJeYXtNdH00/idit64gNc69d6OeEKJ8 wc2rzigl2vstIeBtIRwM9h9ACGc+wYWykQukaYtuP2qpijC9aKy504h4TIXgnP7y 9r3UmV3syMbML38o4zPO68Slo6bMyGW2W9RfpylHsEkGuCLFxie9J0o/juL3+MVu V6FvvGYwjDwBblywo5WYoWMIuuzGxW6xvyf8gkAlt1Ic84gyPNy6viybsBmZodz4 EdP9PcKNTsSju+yg84Ru48RgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXyIR6j N2DRh9LARq8xh2Q4DquHMB8GA1UdIwQYMBaAFCjgF3xwpXJHB9uxSe1VfA+BVuDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjEwOS9DODIwNzIxMkM1 MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNrY0gyN0ZKN1ZWOEQ0Rlc0 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tPQVhmSENsY2tjSDI3Rko3VlY4RDRGVzRPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjEwOS9DODIwNzIxMkM1MEQxMUVCOUFBRUU4N0JDNEY5QUUwMi9LT0FYZkhDbGNr Y0gyN0ZKN1ZWOEQ0Rlc0T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB699TY13NvKcLcxCT7iPDxA9iCNpESedgVRWo/eInND4iHwqq87L7H 0ljQ91LMnu9oqSbif5q4gbwIgwlzIYf4DV1mT4HgpI060oknNJQM7xWBg3lEPf/H GK5D59xqx9WXRnKwTbTduIt98gFWTULFi+KH5LNxVSgVuW1k8zA3YKaKIOa0WYT4 S2Nj2DXZ/PzqS8a9K5WZBN58Xr99mybiXw8rNvODhcv7s8/g4a/Bc1k2WKjga0LY 9/L1SUwSwRIVK864KsDRvYX1v9R7WfsP48J20lo7eXO9lUj4eibUup2JLxv12Rqs U2Ov9lUH//z7BxTc0zfJDvERcD7x7Fef -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:06 2025 by rpki-client