$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: qEcGBWfpFMSePIxqXHpKpQdCUZ1NPmIWdB6+CDe5A4w= Subject key identifier: FA:58:90:85:85:91:F0:62:6C:BA:B4:53:4C:F5:6B:7D:C0:7A:C8:2A Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 57 Signing time: Sat 09 Aug 2025 07:42:43 +0000 Manifest this update: Sat 09 Aug 2025 07:42:42 +0000 Manifest next update: Sat 16 Aug 2025 07:42:42 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: sC5MWQ8hFD+n7quH7a7zatgAk726Fkydjb79Y+BW7ls=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Aug 9 07:42:42 2025 GMT Not After : Aug 16 07:42:42 2025 GMT Subject: CN=6896fbf3-c9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:44:ce:92:be:27:b0:b0:1e:92:d9:73:78: 67:6e:cc:cc:69:91:7d:09:3c:71:93:2b:71:1d:1f: e9:6b:f8:27:d4:55:ce:e0:c2:a3:f1:54:35:38:82: 2f:f8:c7:ef:ac:ed:7e:14:47:ca:1b:3b:65:1c:52: 1b:82:00:f9:61:a4:e3:29:f3:99:0b:5c:e4:51:1c: fa:22:71:95:74:72:42:77:43:93:02:0d:bb:cc:50: 32:21:a8:21:b1:e3:34:c2:cc:22:38:a5:ef:18:12: 68:20:6e:82:c2:93:12:52:5e:1c:58:be:69:81:04: ca:3b:b7:0a:c1:c2:f1:12:9e:df:9b:67:6e:c6:f0: ee:5a:32:29:6f:8b:1c:90:6c:97:1d:96:6d:4c:61: b7:2d:67:ad:48:61:23:b6:7c:6a:ca:6d:f2:a1:85: 8d:73:93:8f:da:09:a4:96:c9:73:b2:72:78:15:96: f5:e5:cc:d6:88:fd:f5:9e:c9:f8:b8:f6:15:99:0c: cb:b9:b2:57:26:4a:d9:a1:ae:1d:8b:3f:31:24:1e: 22:38:97:e5:67:3f:ac:ae:de:a4:cb:78:8b:15:3f: bd:af:e9:97:72:f9:af:f2:ec:cc:c4:06:a7:27:f7: 6c:22:c5:eb:f6:39:85:e9:86:54:08:d7:83:a3:db: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:90:85:85:91:F0:62:6C:BA:B4:53:4C:F5:6B:7D:C0:7A:C8:2A X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:d7:e3:a6:b8:3d:8c:b0:3b:ed:42:b0:15:0d:d2:ec:05:2a: 85:8f:d1:44:61:86:36:cd:3c:90:2b:7f:d5:f9:5e:21:3f:ea: 34:cb:66:de:13:f4:da:e3:b7:af:35:57:23:7b:7e:65:a5:0d: e2:36:32:99:c9:5d:88:d8:22:d4:7c:37:b0:ed:d9:46:23:c5: 01:2f:08:f5:cb:01:f0:5f:db:85:e7:5e:26:25:41:7a:92:ec: 7a:ea:72:7a:0c:e1:09:e7:30:15:04:89:4c:b7:b8:83:98:f9: 88:1c:eb:9a:a6:f7:bf:7f:5c:0b:f6:2f:27:6a:cd:ee:19:a2: a4:82:ec:04:09:cf:da:7d:0a:b0:80:0d:3e:2c:59:7f:83:49: 47:9e:de:e0:6d:c5:41:08:e4:dc:85:9c:68:91:1a:1b:29:37: 41:6a:55:0f:3e:95:78:cf:59:91:e9:3f:56:1d:a4:62:db:75: e7:5e:00:6b:9a:30:89:75:4b:5b:2a:92:a3:46:9a:15:8f:ba: 7b:7f:d0:9c:13:56:19:50:29:2c:b7:96:f6:b2:c3:f3:e1:66: b3:70:1d:c2:08:61:89:18:e1:f7:86:de:80:a3:54:ef:e6:06: d5:e7:b2:cb:5b:59:2d:25:f3:69:be:73:0f:da:45:17:af:a6: b2:16:c4:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5 QzZDRkVDMzAeFw0yNTA4MDkwNzQyNDJaFw0yNTA4MTYwNzQyNDJaMBgxFjAUBgNV BAMTDTY4OTZmYmYzLWM5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxWETOkr4nsLAektlzeGduzMxpkX0JPHGTK3EdH+lr+CfUVc7gwqPxVDU4gi/4 x++s7X4UR8obO2UcUhuCAPlhpOMp85kLXORRHPoicZV0ckJ3Q5MCDbvMUDIhqCGx 4zTCzCI4pe8YEmggboLCkxJSXhxYvmmBBMo7twrBwvESnt+bZ27G8O5aMilvixyQ bJcdlm1MYbctZ61IYSO2fGrKbfKhhY1zk4/aCaSWyXOycngVlvXlzNaI/fWeyfi4 9hWZDMu5slcmStmhrh2LPzEkHiI4l+VnP6yu3qTLeIsVP72v6Zdy+a/y7MzEBqcn 92wixev2OYXphlQI14Oj223dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+liQhYWR 8GJsurRTTPVrfcB6yCowHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0 NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz M0FBL0RDMEYzRUQyRjU0NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1m OTVWNURaY2ZqLTV4c19zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACLX46a4PYywO+1CsBUN0uwFKoWP0URhhjbNPJArf9X5XiE/6jTLZt4T 9Nrjt681VyN7fmWlDeI2MpnJXYjYItR8N7Dt2UYjxQEvCPXLAfBf24XnXiYlQXqS 7HrqcnoM4QnnMBUEiUy3uIOY+Ygc65qm979/XAv2Lydqze4ZoqSC7AQJz9p9CrCA DT4sWX+DSUee3uBtxUEI5NyFnGiRGhspN0FqVQ8+lXjPWZHpP1YdpGLbdedeAGua MIl1S1sqkqNGmhWPunt/0JwTVhlQKSy3lvayw/PhZrNwHcIIYYkY4feG3oCjVO/m BtXnsstbWS0l82m+cw/aRRevprIWxHA= -----END CERTIFICATE-----Generated at Sat Aug 9 23:23:05 2025 by rpki-client