$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: wCZ/BdR/SVi6pJ9Mk+Vt7cNp+SDRiplZLpn5HXC/CZE= Subject key identifier: 6D:52:45:E6:D2:18:F9:4F:F6:F5:77:61:DB:CA:8A:F0:76:35:CD:48 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 33 Signing time: Sat 31 May 2025 07:13:27 +0000 Manifest this update: Sat 31 May 2025 07:13:26 +0000 Manifest next update: Sat 07 Jun 2025 07:13:26 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: 4WqvRr5EXqPK82Cp8p6RHCKzGGDmp/OgBwkWDmGc0cY=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: May 31 07:13:26 2025 GMT Not After : Jun 7 07:13:26 2025 GMT Subject: CN=683aac16-2d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:09:e7:63:d6:a5:5a:45:6d:8b:81:7b:69:7a: 27:12:8d:94:f3:52:34:72:70:86:3e:23:03:92:62: 78:38:ce:c6:a5:ec:fd:a9:9a:39:fa:b9:3d:0c:90: b3:a6:d4:8d:11:02:4d:5c:4f:6a:f9:58:c8:7f:67: 80:9b:57:47:af:4e:46:1e:9d:0d:98:ea:57:16:1e: 80:70:b0:40:30:4b:f7:82:aa:cc:0e:30:01:23:ff: a8:aa:77:72:3b:c0:a0:00:8a:81:34:d2:31:9a:e5: bb:c8:f8:79:76:a6:07:b2:44:cc:2c:03:a3:a1:21: db:e3:a1:df:d3:eb:26:44:06:d9:5f:d5:e8:28:b3: 73:df:8c:3e:8d:a5:6e:c9:e1:34:01:c1:4f:71:b6: ab:ee:94:8c:a2:bd:dd:1e:14:79:95:aa:7d:19:35: 2d:5b:b1:7b:df:e2:5a:aa:55:33:fc:f3:10:18:18: eb:c7:84:6e:3c:cc:d0:54:dd:71:40:ad:84:79:3b: 5c:a8:f5:b0:e2:0b:83:da:74:f6:1b:32:06:8b:58: 73:a3:24:7e:a3:35:58:cf:c3:f7:7f:1c:9f:38:67: 3f:52:df:08:a4:99:5d:f5:33:af:1d:0a:6f:b6:7d: 6a:7e:4e:ec:fd:91:b9:f9:5d:a8:4d:c9:d7:54:35: e6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:52:45:E6:D2:18:F9:4F:F6:F5:77:61:DB:CA:8A:F0:76:35:CD:48 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:d2:04:31:a5:7f:fc:81:5d:b3:1d:41:85:5a:f6:ca:42: 85:e7:33:e7:49:34:85:b7:81:d5:3d:6b:0e:a0:8e:36:0e:05: c9:e6:30:79:b8:3a:ee:09:95:5a:80:e7:14:05:a9:df:0e:b0: 87:a0:d0:67:c1:70:f7:fa:a8:73:52:56:71:3d:48:af:65:72: 26:28:f3:ba:c7:67:be:75:8b:2b:63:4e:1f:08:d4:89:9d:f3: 7b:63:c0:c8:be:81:1d:ca:4a:9b:00:64:d9:03:9c:c1:4d:0c: 49:ec:30:22:24:85:12:f6:2d:c1:35:c9:51:b6:9b:11:58:ca: 55:79:6d:db:cb:75:04:86:7e:20:c8:fd:0f:2c:17:69:96:a9: f4:87:02:13:01:45:a6:40:47:05:b0:d5:bc:4d:0a:af:7e:a2: 5a:79:30:b4:6d:36:d8:0d:c5:69:d8:67:30:46:c2:d5:c4:fa: ba:22:ee:d0:03:6d:26:cb:6d:17:a6:5a:33:de:5f:ee:b2:37: ab:d8:94:8d:80:bc:39:b7:fa:ec:e1:6e:23:8f:71:c3:fc:1d: 5c:99:64:ac:85:d4:8f:61:05:dd:75:9d:6e:ca:79:67:c2:c6: 63:f2:6b:ec:31:4b:4d:9a:e4:3f:8e:72:ec:7b:72:b7:2d:40: 13:79:cf:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5 QzZDRkVDMzAeFw0yNTA1MzEwNzEzMjZaFw0yNTA2MDcwNzEzMjZaMBgxFjAUBgNV BAMTDTY4M2FhYzE2LTJkN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5Cedj1qVaRW2LgXtpeicSjZTzUjRycIY+IwOSYng4zsal7P2pmjn6uT0MkLOm 1I0RAk1cT2r5WMh/Z4CbV0evTkYenQ2Y6lcWHoBwsEAwS/eCqswOMAEj/6iqd3I7 wKAAioE00jGa5bvI+Hl2pgeyRMwsA6OhIdvjod/T6yZEBtlf1egos3PfjD6NpW7J 4TQBwU9xtqvulIyivd0eFHmVqn0ZNS1bsXvf4lqqVTP88xAYGOvHhG48zNBU3XFA rYR5O1yo9bDiC4PadPYbMgaLWHOjJH6jNVjPw/d/HJ84Zz9S3wikmV31M68dCm+2 fWp+Tuz9kbn5XahNyddUNeb3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbVJF5tIY +U/29Xdh28qK8HY1zUgwHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0 NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz M0FBL0RDMEYzRUQyRjU0NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1m OTVWNURaY2ZqLTV4c19zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH+R0gQxpX/8gV2zHUGFWvbKQoXnM+dJNIW3gdU9aw6gjjYOBcnmMHm4 Ou4JlVqA5xQFqd8OsIeg0GfBcPf6qHNSVnE9SK9lciYo87rHZ751iytjTh8I1Imd 83tjwMi+gR3KSpsAZNkDnMFNDEnsMCIkhRL2LcE1yVG2mxFYylV5bdvLdQSGfiDI /Q8sF2mWqfSHAhMBRaZARwWw1bxNCq9+olp5MLRtNtgNxWnYZzBGwtXE+roi7tAD bSbLbRemWjPeX+6yN6vYlI2AvDm3+uzhbiOPccP8HVyZZKyF1I9hBd11nW7KeWfC xmPya+wxS02a5D+Ocux7crctQBN5z1Q= -----END CERTIFICATE-----Generated at Sat May 31 17:02:17 2025 by rpki-client