$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: cASm1LLswdpguuJ2fFVZabnREbfoXoNfmgs/WJvgVi8= Subject key identifier: BC:97:EA:73:16:97:A3:10:A5:16:A2:04:B4:CA:03:1C:77:98:7D:16 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 01D5 Signing time: Mon 21 Jul 2025 02:50:32 +0000 Manifest this update: Mon 21 Jul 2025 02:50:31 +0000 Manifest next update: Mon 28 Jul 2025 02:50:31 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: VNA0DOWuthsZxQYON88OOJh9irTDzvnx+n4HaKaqHFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: Jul 21 02:50:31 2025 GMT Not After : Jul 28 02:50:31 2025 GMT Subject: CN=687daaf7-29ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:88:5f:77:ce:6b:25:43:13:98:74:a0:3a: f6:11:7a:37:23:31:62:72:68:01:17:fb:ba:fc:57: 62:ae:60:4c:3b:a9:9d:52:3d:50:dc:67:cd:65:fa: a1:38:5e:83:63:b6:95:a4:b8:8b:12:74:13:2a:d9: 2a:5d:93:70:7e:70:fd:0b:35:2a:1e:8c:ef:09:09: 06:da:4b:01:dd:2d:8d:b8:3f:e7:d0:19:4f:4b:ba: 4a:62:08:06:fa:8e:c9:ee:bd:04:98:bb:61:e6:a6: ec:e2:34:aa:11:1f:24:6c:5a:30:34:19:4e:e2:de: da:30:d8:e2:06:2d:23:7c:57:0f:f9:26:b1:0c:46: 44:3b:2b:dd:2f:9d:8d:78:43:46:b3:ed:bb:16:c8: b5:68:c6:f2:a6:f1:5b:67:75:36:0f:a3:35:be:05: 09:e3:8a:44:b8:d3:76:07:e2:e7:57:7b:55:76:91: e5:b1:21:f0:35:64:96:dd:d6:be:fc:bd:34:94:75: fb:31:4e:f0:e7:f5:88:04:74:6d:83:d4:40:08:4e: 4a:0e:d3:a9:f7:bd:44:e7:69:5c:a4:e0:d4:63:fe: cb:6d:aa:3b:b8:45:3a:2a:ca:c5:1d:17:62:ae:b3: 7c:a6:49:32:d4:65:11:e9:12:f4:e9:13:37:96:17: a6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:97:EA:73:16:97:A3:10:A5:16:A2:04:B4:CA:03:1C:77:98:7D:16 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:93:95:ab:fe:2d:66:eb:a6:47:b6:e2:c4:bf:01:ee:1f:f9: 49:23:54:9d:2b:1f:c2:00:ab:9b:0e:d2:0b:f9:6e:49:c7:ff: 40:d9:a7:3b:15:7e:d1:15:c5:a7:f2:82:e4:12:f7:c3:0e:14: da:1a:7e:1f:4a:dd:78:f8:dc:96:b2:26:a1:4a:55:4d:9a:a0: da:4a:4e:dc:eb:bd:9f:5e:52:60:a0:5d:d6:21:c1:63:8a:17: 1d:09:1d:06:0f:64:f9:20:93:14:85:57:83:d2:11:c1:01:ed: b6:3e:e5:1d:e5:90:09:2a:76:72:ce:e5:6a:55:96:42:90:5f: 89:58:c5:1f:15:27:b8:e6:af:9b:e7:22:10:c0:98:12:8b:cd: e6:0e:04:78:11:ee:67:e2:51:1a:23:b0:a3:d2:b9:e7:d2:cb: 35:2b:24:a7:c2:16:33:20:28:9a:26:c4:f0:45:fa:7f:78:87: fa:af:62:b6:5b:7e:79:7c:51:d4:f1:d9:2d:0a:dc:1a:db:75: d9:94:d7:19:62:21:3f:a6:b4:34:35:43:42:1f:a2:62:12:47: 57:93:89:69:11:5f:e4:73:9a:d6:60:ac:99:cb:dd:da:09:0e: 04:9a:f9:ab:e1:97:82:d2:56:4c:89:7b:60:41:ce:00:20:21: 70:06:a4:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwNzIxMDI1MDMxWhcNMjUwNzI4MDI1MDMxWjAYMRYwFAYD VQQDEw02ODdkYWFmNy0yOWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuGIX3fOayVDE5h0oDr2EXo3IzFicmgBF/u6/FdirmBMO6mdUj1Q3GfNZfqh OF6DY7aVpLiLEnQTKtkqXZNwfnD9CzUqHozvCQkG2ksB3S2NuD/n0BlPS7pKYggG +o7J7r0EmLth5qbs4jSqER8kbFowNBlO4t7aMNjiBi0jfFcP+SaxDEZEOyvdL52N eENGs+27Fsi1aMbypvFbZ3U2D6M1vgUJ44pEuNN2B+LnV3tVdpHlsSHwNWSW3da+ /L00lHX7MU7w5/WIBHRtg9RACE5KDtOp971E52lcpODUY/7Lbao7uEU6KsrFHRdi rrN8pkky1GUR6RL06RM3lhem6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyX6nMW l6MQpRaiBLTKAxx3mH0WMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1k5Wr/i1m66ZHtuLEvwHuH/lJI1SdKx/CAKubDtIL+W5Jx/9A2ac7 FX7RFcWn8oLkEvfDDhTaGn4fSt14+NyWsiahSlVNmqDaSk7c672fXlJgoF3WIcFj ihcdCR0GD2T5IJMUhVeD0hHBAe22PuUd5ZAJKnZyzuVqVZZCkF+JWMUfFSe45q+b 5yIQwJgSi83mDgR4Ee5n4lEaI7Cj0rnn0ss1KySnwhYzICiaJsTwRfp/eIf6r2K2 W355fFHU8dktCtwa23XZlNcZYiE/prQ0NUNCH6JiEkdXk4lpEV/kc5rWYKyZy93a CQ4Emvmr4ZeC0lZMiXtgQc4AICFwBqSU -----END CERTIFICATE-----Generated at Mon Jul 21 06:53:31 2025 by rpki-client