$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: w6DSQjXz79P1kIlaltiq7fX6YCylSqlHNwmy9xzNwK0= Subject key identifier: ED:87:82:07:1D:EE:0F:9D:A1:CD:D4:12:B0:E0:D8:4B:95:32:8F:C0 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 019C Signing time: Sat 29 Mar 2025 02:54:27 +0000 Manifest this update: Sat 29 Mar 2025 02:54:27 +0000 Manifest next update: Sat 05 Apr 2025 02:54:27 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: dQteEKVrJjuKOwDt+VULWPJoMCDfjDLNiqiSGQMwC2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2 Validity Not Before: Mar 29 02:54:27 2025 GMT Not After : Apr 5 02:54:27 2025 GMT Subject: CN=67e760e3-1078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:6b:c5:10:5c:18:1e:8f:75:24:4c:56:77: 83:d7:93:14:c0:f9:5e:17:a3:8b:b5:07:91:f9:46: 86:a6:04:1d:e2:c3:2f:41:f4:00:db:13:8b:b2:73: 4c:42:45:52:41:6d:ee:d1:40:cb:3f:c4:d1:76:27: e4:15:07:9d:5f:71:6c:30:f0:66:7f:51:f2:b6:75: ca:07:bf:c4:56:cc:a2:0b:31:88:a1:f2:a7:2d:61: be:43:a9:7c:b0:40:f2:5d:8e:60:58:7c:97:b2:ce: 36:02:3e:c1:2b:ab:94:22:96:d3:e4:be:75:89:12: 8c:2e:ec:42:c2:72:c3:11:bc:ea:06:81:4e:55:86: 62:c3:e7:ec:5a:1d:e1:56:b6:82:1f:4b:47:ce:84: 6b:a1:d7:7e:f4:66:29:8d:d5:0e:c6:99:b7:22:71: a2:74:c5:01:b1:43:ba:1a:73:e4:19:84:c4:d7:90: 20:31:98:63:40:2c:0f:05:cc:e8:06:b4:f8:e1:df: 9d:f2:0b:74:31:25:27:7d:09:ab:d5:76:a2:00:ce: 63:ce:66:44:35:37:d1:7e:0e:fd:3d:67:15:4c:d3: 7a:c3:a0:f6:09:0a:f3:34:3f:52:58:de:8a:24:9c: 66:26:18:d5:29:2b:3b:7e:8f:16:95:33:c5:85:ed: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:82:07:1D:EE:0F:9D:A1:CD:D4:12:B0:E0:D8:4B:95:32:8F:C0 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:24:3c:29:c8:d8:da:45:59:c4:ac:79:e8:3d:f9:f1:af:5a: 56:86:1e:5a:63:2c:17:0f:17:a6:4b:23:77:46:8f:49:3a:02: 6a:75:24:78:a8:3e:d2:29:63:2c:9b:d2:d5:a8:ea:4b:66:53: 89:d0:ed:97:92:bb:3d:69:da:a0:c5:cf:cc:e3:60:c3:9a:99: 92:00:5f:bb:5b:9a:27:93:d3:2b:7f:9d:4b:48:15:66:ec:11: 17:ab:57:b9:01:3f:21:46:62:90:90:4b:18:63:e3:2f:0c:50: ae:1f:81:bc:b0:fb:6e:7c:3a:cd:e7:23:dc:91:59:c4:ec:92: cd:1c:da:ad:0d:94:52:c1:f4:72:72:22:6d:b2:43:1c:7b:35: b0:2d:fb:c4:01:d8:3a:e1:9e:52:fd:a6:95:ab:2d:d5:92:3d: f7:22:23:76:7a:5a:c4:6a:f8:f5:7a:5e:9c:a7:03:7b:2d:fe: 2d:2d:14:d3:88:67:ff:61:ba:19:63:9e:87:5d:80:9a:9e:bd: aa:00:98:b2:da:63:b2:b8:06:25:ec:83:54:9b:b5:8c:a4:f4: e0:2d:93:d2:1b:1c:26:b8:21:24:b0:cb:df:a7:f6:e4:8f:77: 62:9f:e3:f5:71:64:38:bd:3e:63:0a:9d:5e:75:7d:cf:ef:0f: 41:fa:d2:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwMzI5MDI1NDI3WhcNMjUwNDA1MDI1NDI3WjAYMRYwFAYD VQQDEw02N2U3NjBlMy0xMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzZrxRBcGB6PdSRMVneD15MUwPleF6OLtQeR+UaGpgQd4sMvQfQA2xOLsnNM QkVSQW3u0UDLP8TRdifkFQedX3FsMPBmf1HytnXKB7/EVsyiCzGIofKnLWG+Q6l8 sEDyXY5gWHyXss42Aj7BK6uUIpbT5L51iRKMLuxCwnLDEbzqBoFOVYZiw+fsWh3h VraCH0tHzoRrodd+9GYpjdUOxpm3InGidMUBsUO6GnPkGYTE15AgMZhjQCwPBczo BrT44d+d8gt0MSUnfQmr1XaiAM5jzmZENTfRfg79PWcVTNN6w6D2CQrzND9SWN6K JJxmJhjVKSs7fo8WlTPFhe1bdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2Hggcd 7g+doc3UErDg2EuVMo/AMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1JDwpyNjaRVnErHnoPfnxr1pWhh5aYywXDxemSyN3Ro9JOgJqdSR4 qD7SKWMsm9LVqOpLZlOJ0O2Xkrs9adqgxc/M42DDmpmSAF+7W5onk9Mrf51LSBVm 7BEXq1e5AT8hRmKQkEsYY+MvDFCuH4G8sPtufDrN5yPckVnE7JLNHNqtDZRSwfRy ciJtskMcezWwLfvEAdg64Z5S/aaVqy3Vkj33IiN2elrEavj1el6cpwN7Lf4tLRTT iGf/YboZY56HXYCanr2qAJiy2mOyuAYl7INUm7WMpPTgLZPSGxwmuCEksMvfp/bk j3din+P1cWQ4vT5jCp1edX3P7w9B+tKz -----END CERTIFICATE-----Generated at Fri Apr 4 21:51:58 2025 by rpki-client