$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: GgzDIQSOjpjPd2+SMKpZu9hzAAcdNmLx2wEx+Ab65Mc= Subject key identifier: 9B:AB:62:59:5D:7A:CE:B7:5B:7A:68:D5:FA:F4:64:F8:FA:05:C4:B9 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0729 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 071E Signing time: Thu 10 Apr 2025 21:47:37 +0000 Manifest this update: Thu 10 Apr 2025 21:47:36 +0000 Manifest next update: Thu 17 Apr 2025 21:47:36 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: B1Ws2k/vTT7kHMgyO1kP3TmDJHK9azWvDy8rnPSuL+k=) 2: 539B27DEF87611EF8366B718C4F9AE02.roa (hash: 1nDM0peqDWmAV340563WsURkfernH1Bm63lk2+LpiqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1833 (0x729) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Apr 10 21:47:36 2025 GMT Not After : Apr 17 21:47:36 2025 GMT Subject: CN=67f83c78-e62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:8e:83:4d:9b:5a:3f:c7:73:06:ca:10:e2: 40:07:de:07:cc:76:7b:05:11:34:65:4d:e7:ef:59: 61:2b:11:4b:4e:58:52:5b:6c:67:fa:28:4a:76:bc: e4:7a:94:85:ee:79:e1:c0:eb:90:b0:5f:20:f4:a8: 4b:c7:dd:30:e4:31:5d:20:60:a8:26:24:43:f9:ba: ea:c0:c4:f8:1b:b7:98:73:5b:04:61:1a:98:16:6b: c6:37:96:eb:13:35:c3:8c:0f:84:de:08:b1:36:9b: ea:32:f3:50:59:ac:9e:d6:89:c8:f0:e6:21:f7:a3: b9:03:a3:00:b9:7f:7d:7e:d9:31:82:6f:a2:0f:68: 75:ee:4b:06:0a:0f:a4:c0:20:aa:f9:81:e2:a5:32: e3:d5:e9:11:0e:f1:b2:93:5a:00:d9:ce:79:c8:9b: 3b:75:d9:70:80:6d:5d:ae:e3:c0:4d:e1:c2:dd:2b: c1:7f:ee:06:84:da:ea:3c:dc:b3:41:53:cf:07:71: c1:9c:f1:dd:98:c1:cd:21:c8:64:22:bc:e1:6b:9e: 86:97:cc:f5:6a:65:d6:e2:e6:be:f7:c5:e1:bc:6f: 6b:00:95:ca:fc:1b:e8:6d:d2:a6:6d:d9:65:74:30: 0e:07:de:db:9b:db:1f:e3:08:70:f9:60:d7:2f:86: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AB:62:59:5D:7A:CE:B7:5B:7A:68:D5:FA:F4:64:F8:FA:05:C4:B9 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:8d:53:bc:bc:47:eb:30:7c:5d:8b:10:8f:ec:fc:3c:6a:7a: 09:96:b5:f0:28:ed:2c:a2:61:e4:d4:59:72:42:bc:ad:eb:ff: aa:3c:c2:49:52:cb:d2:53:7e:b7:b1:8d:87:93:d4:e3:03:9f: 3b:3b:55:49:2d:65:54:3b:f8:c5:29:38:6f:c9:c7:3f:48:08: d8:bf:f6:fc:9d:29:02:38:aa:6f:38:20:a1:2b:98:5b:23:77: 23:cb:5a:12:1a:73:56:7e:1e:fc:df:88:95:67:d8:d6:d1:b1: 32:73:6a:7c:5d:18:89:ae:3f:43:d5:30:9e:f1:1b:04:ef:91: f4:f3:aa:19:0f:db:9b:bc:7c:03:b8:16:e5:43:1c:02:27:df: 1e:ca:fd:4c:97:ed:5f:58:bc:e0:b4:2e:d0:0c:ec:9d:cd:8c: 91:5d:81:57:97:1b:e6:74:70:47:d3:06:95:09:35:52:90:dc: 64:a8:78:f6:87:41:a9:5a:40:6a:ee:a2:56:8e:2c:04:96:9e: ca:91:cd:a9:44:c9:48:cf:35:6d:9c:2f:97:19:bc:98:9e:0b: f4:c0:f4:2e:50:65:02:ea:88:d4:d6:5d:b9:fa:58:ea:a0:76: 9f:d0:34:cf:78:ca:ba:0e:91:59:92:92:c6:04:f6:01:1b:aa: 78:57:7f:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNDEwMjE0NzM2WhcNMjUwNDE3MjE0NzM2WjAYMRYwFAYD VQQDEw02N2Y4M2M3OC1lNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3+Og02bWj/HcwbKEOJAB94HzHZ7BRE0ZU3n71lhKxFLTlhSW2xn+ihKdrzk epSF7nnhwOuQsF8g9KhLx90w5DFdIGCoJiRD+brqwMT4G7eYc1sEYRqYFmvGN5br EzXDjA+E3gixNpvqMvNQWaye1onI8OYh96O5A6MAuX99ftkxgm+iD2h17ksGCg+k wCCq+YHipTLj1ekRDvGyk1oA2c55yJs7ddlwgG1druPATeHC3SvBf+4GhNrqPNyz QVPPB3HBnPHdmMHNIchkIrzha56Gl8z1amXW4ua+98XhvG9rAJXK/BvobdKmbdll dDAOB97bm9sf4whw+WDXL4buxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJurYlld es63W3po1fr0ZPj6BcS5MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAljVO8vEfrMHxdixCP7Pw8anoJlrXwKO0somHk1FlyQryt6/+qPMJJ UsvSU363sY2Hk9TjA587O1VJLWVUO/jFKThvycc/SAjYv/b8nSkCOKpvOCChK5hb I3cjy1oSGnNWfh7834iVZ9jW0bEyc2p8XRiJrj9D1TCe8RsE75H086oZD9ubvHwD uBblQxwCJ98eyv1Ml+1fWLzgtC7QDOydzYyRXYFXlxvmdHBH0waVCTVSkNxkqHj2 h0GpWkBq7qJWjiwElp7Kkc2pRMlIzzVtnC+XGbyYngv0wPQuUGUC6ojU1l25+ljq oHaf0DTPeMq6DpFZkpLGBPYBG6p4V3/c -----END CERTIFICATE-----Generated at Sat Apr 12 22:21:10 2025 by rpki-client