$ rpki-client -vvf rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft File: C0KoRA8ajmf95V5DZcfj-5xs_sM.mft (raw, json) Hash identifier: R5gsaC5Kidg0gB7xHivAFIPn6sg8ifoVaamksOKomt4= Subject key identifier: E4:9E:19:93:47:8F:90:0D:30:3D:89:4C:59:86:A5:56:79:08:0C:30 Authority key identifier: 0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 Certificate issuer: /CN=A91A33AA/serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft Manifest number: 22 Signing time: Fri 25 Apr 2025 06:50:51 +0000 Manifest this update: Fri 25 Apr 2025 06:50:51 +0000 Manifest next update: Fri 02 May 2025 06:50:51 +0000 Files and hashes: 1: C0KoRA8ajmf95V5DZcfj-5xs_sM.crl (hash: Yv7gSoj6LAgE6HL5CSkUqY0daf1K1TnNVT1MB8g5Mlc=) 2: A068B0C4F54511EF88062F4FC4F9AE02.roa (hash: 8UmpWKC0MLWSHXoiRKVFfnecHv9v0T/Y7fCq3z5A3bM=) 3: 5283F92CF54511EF9907BE10C4F9AE02.roa (hash: O65AIUEGZRInvPQjuLFeAvXJ9b3uJKozNMV2xLP/Rbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A33AA, serialNumber=0B42A8440F1A8E67FDE55E4365C7E3FB9C6CFEC3 Validity Not Before: Apr 25 06:50:51 2025 GMT Not After : May 2 06:50:51 2025 GMT Subject: CN=680b30cb-744b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:4a:0d:81:e6:9c:9a:fa:84:f6:9a:1b:fd: 39:90:15:d1:a0:ba:ca:d8:3b:0f:a9:2f:37:44:0a: 75:69:cc:94:8d:6c:e6:1b:70:18:54:0f:f3:31:c9: 32:26:92:17:a3:60:15:eb:90:16:e6:f6:f7:58:6e: 02:70:0e:12:e4:57:8b:af:ea:fb:30:3e:ef:55:61: 92:b5:ba:a6:ca:b6:24:ed:1d:4b:07:2a:1c:91:07: 01:8f:e4:a5:48:bd:53:92:b2:7e:84:c1:88:51:f5: 9b:48:69:1e:6a:ec:42:a6:ee:cf:80:ee:05:eb:4c: 08:5b:e0:27:a7:84:ae:91:ac:a9:4d:ca:ca:ca:ec: f5:dd:82:09:b4:d3:7c:33:4b:8b:74:11:35:59:0d: f9:af:ee:cc:68:04:49:87:61:ed:0e:96:c0:f2:23: 98:c4:ec:b5:1f:c7:85:5b:89:b1:2e:5a:d8:dc:c4: b6:ea:df:36:da:ee:4c:2a:fa:95:85:ba:70:c6:bc: ff:16:90:9d:d7:a3:08:32:72:82:d3:fd:20:55:bd: 64:9f:cc:fc:a0:4b:32:45:aa:71:53:6f:30:14:59: b5:68:67:a6:03:8c:bf:d5:82:cf:6e:2d:08:76:14: b0:08:13:b0:7c:54:c8:80:af:69:c2:c9:56:5e:22: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9E:19:93:47:8F:90:0D:30:3D:89:4C:59:86:A5:56:79:08:0C:30 X509v3 Authority Key Identifier: keyid:0B:42:A8:44:0F:1A:8E:67:FD:E5:5E:43:65:C7:E3:FB:9C:6C:FE:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0KoRA8ajmf95V5DZcfj-5xs_sM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A33AA/DC0F3ED2F54411EF97A40410C4F9AE02/C0KoRA8ajmf95V5DZcfj-5xs_sM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:77:89:0b:22:40:32:26:2f:f7:6f:6c:b8:40:35:71:dc:92: 22:5a:f3:75:55:e1:37:47:98:f6:a3:f1:f8:3c:b0:8b:fd:2a: 5d:8e:41:c9:3b:94:60:5a:fc:93:40:c7:de:ee:97:10:93:e3: 8f:3a:57:e9:09:99:09:8a:a9:a9:2e:c9:ff:bd:20:4d:c4:e5: ea:06:49:37:68:b4:1b:54:08:bf:24:56:f2:9e:b4:94:4c:b2: 0a:01:62:f2:7a:ec:c5:3f:07:10:02:03:3b:67:32:5c:b7:c1: 34:98:c3:05:62:67:99:fb:88:71:31:8e:90:64:09:24:c5:20: 45:93:2c:96:17:8e:b9:b4:93:19:f9:16:c9:51:22:a4:f1:74: 02:aa:82:e5:5f:55:96:27:1b:05:ef:b7:3e:a8:4d:f6:19:1b: 56:ad:65:6f:36:52:ca:d6:bb:8f:31:b5:ca:38:6c:dd:ab:c8: 1a:e6:a5:61:e5:35:d4:77:da:45:8d:2f:5d:c6:94:75:7d:96: f2:43:db:e0:06:4f:d6:6b:f7:76:b3:94:eb:86:e9:91:ea:6a: 04:6c:96:e7:ff:44:0a:8b:5b:4b:00:55:29:1d:03:9b:c4:c0: 11:15:ff:a1:ad:a2:ce:5d:6f:b0:5c:89:3c:e9:b3:cd:c8:63: 24:bc:90:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MzNBQTExMC8GA1UEBRMoMEI0MkE4NDQwRjFBOEU2N0ZERTU1RTQzNjVDN0UzRkI5 QzZDRkVDMzAeFw0yNTA0MjUwNjUwNTFaFw0yNTA1MDIwNjUwNTFaMBgxFjAUBgNV BAMTDTY4MGIzMGNiLTc0NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbDkoNgeacmvqE9pob/TmQFdGgusrYOw+pLzdECnVpzJSNbOYbcBhUD/MxyTIm khejYBXrkBbm9vdYbgJwDhLkV4uv6vswPu9VYZK1uqbKtiTtHUsHKhyRBwGP5KVI vVOSsn6EwYhR9ZtIaR5q7EKm7s+A7gXrTAhb4CenhK6RrKlNysrK7PXdggm003wz S4t0ETVZDfmv7sxoBEmHYe0OlsDyI5jE7LUfx4VbibEuWtjcxLbq3zba7kwq+pWF unDGvP8WkJ3XowgycoLT/SBVvWSfzPygSzJFqnFTbzAUWbVoZ6YDjL/Vgs9uLQh2 FLAIE7B8VMiAr2nCyVZeIqEfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5J4Zk0eP kA0wPYlMWYalVnkIDDAwHwYDVR0jBBgwFoAUC0KoRA8ajmf95V5DZcfj+5xs/sMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEzM0FBL0RDMEYzRUQyRjU0 NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1mOTVWNURaY2ZqLTV4c19z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzBLb1JBOGFqbWY5NVY1RFpjZmotNXhzX3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEz M0FBL0RDMEYzRUQyRjU0NDExRUY5N0E0MDQxMEM0RjlBRTAyL0MwS29SQThham1m OTVWNURaY2ZqLTV4c19zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABR3iQsiQDImL/dvbLhANXHckiJa83VV4TdHmPaj8fg8sIv9Kl2OQck7 lGBa/JNAx97ulxCT4486V+kJmQmKqakuyf+9IE3E5eoGSTdotBtUCL8kVvKetJRM sgoBYvJ67MU/BxACAztnMly3wTSYwwViZ5n7iHExjpBkCSTFIEWTLJYXjrm0kxn5 FslRIqTxdAKqguVfVZYnGwXvtz6oTfYZG1atZW82UsrWu48xtco4bN2ryBrmpWHl NdR32kWNL13GlHV9lvJD2+AGT9Zr93azlOuG6ZHqagRsluf/RAqLW0sAVSkdA5vE wBEV/6Gtos5db7BciTzps83IYyS8kCw= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:28 2025 by rpki-client