$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: B/LsXv0lZ/VgGVY8KPACCbvsU2pS+8vuPdLNTwTFOkU= Subject key identifier: CD:25:3B:C4:EA:37:CA:4E:20:4A:62:81:D2:FE:1F:78:8E:D6:28:7C Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 17 Signing time: Thu 03 Apr 2025 07:16:07 +0000 Manifest this update: Thu 03 Apr 2025 07:16:07 +0000 Manifest next update: Thu 10 Apr 2025 07:16:07 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: GfP7H4ws7XiahNdrKfyGgrmlHkq+lGDtEoJGIPPotlE=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA Validity Not Before: Apr 3 07:16:07 2025 GMT Not After : Apr 10 07:16:07 2025 GMT Subject: CN=67ee35b7-749d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:61:de:91:ad:fc:31:09:e3:4a:bb:0f:f8: f5:ce:b6:74:2e:68:8d:40:69:1a:6c:28:32:95:81: 9c:0c:b3:16:50:ec:96:fe:dd:62:13:ea:0d:7c:f2: 1a:ac:2d:62:84:39:17:0d:47:22:f3:42:f5:dc:ea: b9:ed:d6:65:10:82:b3:f1:01:b3:4c:47:c0:fe:02: 4b:49:3c:34:06:7c:75:05:ac:3f:69:9b:c2:b8:ed: f2:ec:d6:c7:37:71:c6:59:8c:b0:72:96:e5:39:87: fb:d5:c1:4e:55:34:c7:b1:e9:71:7d:64:6c:f2:62: dc:ac:cd:f3:ca:f3:3f:66:13:c2:08:e2:ef:7a:66: b4:29:db:44:65:ba:d3:18:5b:10:1a:52:19:40:11: 4e:11:6a:1c:ce:8b:e0:1a:cd:2f:83:5f:e2:4f:4d: cb:23:6f:25:38:86:b2:8f:0f:a4:d0:66:65:2f:95: 5f:f0:7e:7a:4e:44:ba:3b:28:4d:76:77:a8:4c:b3: 83:5c:4c:19:fa:9f:88:13:a5:06:d4:19:72:d1:20: 1d:62:08:78:cb:ef:6f:40:bf:83:68:df:f8:7f:3c: bd:52:4a:64:ff:b9:b2:db:37:28:1e:d9:9a:54:96: 5a:70:13:07:94:f7:e0:29:56:39:43:81:7e:70:29: 1b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:25:3B:C4:EA:37:CA:4E:20:4A:62:81:D2:FE:1F:78:8E:D6:28:7C X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:07:6d:49:59:f1:ab:47:69:bf:f1:2e:49:83:4e:3d:f1:a0: 6d:32:3b:4d:2c:65:66:5f:40:3d:e6:f2:3f:04:9e:06:fd:7a: d2:e2:f8:9f:8c:4f:23:f8:e7:d0:09:9d:8b:9c:90:e6:2e:3b: 5e:1b:66:91:09:80:3d:c0:1d:03:6e:85:d1:e7:5b:9c:eb:5b: f0:ba:31:aa:f1:33:cf:43:e2:a9:ba:24:cc:ef:9f:2c:f5:9a: 70:37:5a:56:62:e3:1b:36:65:1c:44:65:23:d4:05:7c:31:b9: 2e:b0:94:c4:0d:de:39:a0:21:26:50:a6:ee:b8:84:d0:68:03: ec:2f:5c:94:ec:72:28:e4:45:ea:06:9f:3d:46:dc:30:90:ed: 93:f3:79:de:59:12:0d:18:31:80:91:48:d6:34:88:62:c8:77: 0d:0f:a6:ab:3e:cc:76:b8:fd:37:17:3a:25:ff:47:02:76:ea: cb:1f:05:d1:8c:71:24:9a:a3:f4:1a:da:88:7d:ba:d4:48:d0: 09:73:d8:e5:b4:af:b5:fa:a0:30:e7:50:2d:e5:3f:ad:b5:b0: 84:bc:16:2e:2d:bf:01:11:6b:06:ab:9c:dd:ec:eb:bd:86:49: d2:b7:2d:cc:0a:82:f7:d0:ee:c0:f7:6c:aa:3d:21:34:89:3f: 29:26:0a:b1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5 QzZDRkVDMzAeFw0yNTA0MDMwNzE2MDdaFw0yNTA0MTAwNzE2MDdaMBgxFjAUBgNV BAMTDTY3ZWUzNWI3LTc0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSX2Heka38MQnjSrsP+PXOtnQuaI1AaRpsKDKVgZwMsxZQ7Jb+3WIT6g188hqs LWKEORcNRyLzQvXc6rnt1mUQgrPxAbNMR8D+AktJPDQGfHUFrD9pm8K47fLs1sc3 ccZZjLByluU5h/vVwU5VNMex6XF9ZGzyYtyszfPK8z9mE8II4u96ZrQp20RlutMY WxAaUhlAEU4RahzOi+AazS+DX+JPTcsjbyU4hrKPD6TQZmUvlV/wfnpORLo7KE12 d6hMs4NcTBn6n4gTpQbUGXLRIB1iCHjL729Av4No3/h/PL1SSmT/ubLbNyge2ZpU llpwEweU9+ApVjlDgX5wKRvFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzSU7xOo3 yk4gSmKB0v4feI7WKHwwHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0 NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz M0FBL0RDMEYzRUQyRjU0NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1m OTVWNURaY2ZqLTV4c19zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEYHbUlZ8atHab/xLkmDTj3xoG0yO00sZWZfQD3m8j8Engb9etLi+J+M TyP459AJnYuckOYuO14bZpEJgD3AHQNuhdHnW5zrW/C6MarxM89D4qm6JMzvnyz1 mnA3WlZi4xs2ZRxEZSPUBXwxuS6wlMQN3jmgISZQpu64hNBoA+wvXJTscijkReoG nz1G3DCQ7ZPzed5ZEg0YMYCRSNY0iGLIdw0Ppqs+zHa4/TcXOiX/RwJ26ssfBdGM cSSao/Qa2oh9utRI0Alz2OW0r7X6oDDnUC3lP621sIS8Fi4tvwERawarnN3s672G SdK3LcwKgvfQ7sD3bKo9ITSJPykmCrE= -----END CERTIFICATE-----Generated at Sat Apr 5 05:05:47 2025 by rpki-client