$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: B7qcJWaIyQ9iGcEs1lTSowWvTrus3G7ec1ZKXg0YcNw= Subject key identifier: 37:1E:CC:CD:04:EB:0A:34:67:99:22:17:86:B0:32:18:47:87:C2:26 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0789 Signing time: Sun 02 Nov 2025 21:32:27 +0000 Manifest this update: Sun 02 Nov 2025 21:32:26 +0000 Manifest next update: Sun 09 Nov 2025 21:32:26 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: z5S6e1Af7pf1iN0SlUP2un1HP0p3KOUc87i2DXZYU7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Nov 2 21:32:26 2025 GMT Not After : Nov 9 21:32:26 2025 GMT Subject: CN=6907cdea-131c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5e:e4:25:b3:6f:ca:81:12:d1:9d:ea:d6:7a: 0c:56:ec:b9:d6:5d:f9:ff:d4:51:7e:14:13:5a:cd: 87:82:78:7e:90:98:44:7c:cb:b6:37:c7:ae:7a:7a: 25:ab:b9:1f:e0:8b:25:71:ca:dd:00:8f:04:54:de: e2:bb:38:0e:d3:d7:0b:31:6f:08:38:28:7d:94:19: 54:21:a2:39:0f:36:02:f6:de:96:ac:1d:ba:bc:74: da:9f:76:ad:d9:f9:39:6a:1c:0b:ee:19:4f:9e:35: da:e3:80:2e:c7:81:1e:35:4d:0e:a9:b9:c9:f7:ed: fe:0e:6e:15:56:48:89:6d:56:fe:c2:7a:a4:22:4a: d1:24:41:90:be:b9:36:5d:1f:42:d1:d5:c5:fb:b7: 69:dc:19:69:d3:52:f3:42:6c:06:c3:c5:80:88:c2: 38:3d:bf:04:53:b6:3a:9e:b0:1d:a5:d1:2a:01:5f: 31:8b:77:bc:c5:9f:55:c6:5c:27:ba:01:ed:b6:06: 5b:13:68:bb:5a:6e:d1:f1:b7:f8:07:94:73:d2:12: 11:2a:70:46:29:80:2e:b6:f2:55:47:a4:df:1d:0d: 34:d5:ec:9f:66:c2:69:00:e6:51:61:76:e2:bd:31: 18:05:a4:70:dd:10:6d:76:49:0d:dd:07:dd:97:d5: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1E:CC:CD:04:EB:0A:34:67:99:22:17:86:B0:32:18:47:87:C2:26 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:cd:4a:c7:bd:1b:22:31:55:b0:8b:3b:60:c5:24:a9:99:00: 38:53:92:40:bf:60:ae:1e:98:06:e8:08:43:ae:15:84:d7:8b: 6f:7d:6d:db:69:9b:e9:82:ce:e5:2c:ee:8d:61:25:b3:ed:1b: e6:2f:d0:50:bc:cb:2a:63:be:ed:8d:6e:a5:3d:f3:da:84:16: 55:40:10:e3:41:cf:92:48:31:be:e7:50:c0:13:3d:30:1f:0e: 6a:da:75:5d:9c:fa:06:35:92:fd:a3:4c:94:8d:f8:0d:80:dd: 6f:34:1f:e1:f6:de:d2:86:45:f8:35:b2:db:0d:34:7d:ab:99: 43:0f:92:3c:32:1e:2d:85:f9:f1:e2:68:45:39:e3:d3:f7:01: dd:d3:dd:92:ef:81:8e:8f:6c:54:6e:5e:1b:d1:63:e2:b8:87: c3:28:7e:a2:3c:8f:fd:14:4c:bd:76:c3:d4:97:e0:15:b1:a3: 9b:cd:c0:c6:79:b8:d8:0f:5b:0a:5b:85:0b:cc:07:35:62:b3: c8:c4:4b:cc:a0:3e:dd:0a:7a:72:bb:a6:f3:89:13:19:36:51: 1d:05:a2:fa:2d:14:2d:b0:8f:a9:06:5a:64:8a:c5:0f:49:b6: 5f:1d:3b:46:ea:c0:8e:3d:59:0e:34:ae:55:07:bd:3b:3d:be: 46:94:f9:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUxMTAyMjEzMjI2WhcNMjUxMTA5MjEzMjI2WjAYMRYwFAYD VQQDEw02OTA3Y2RlYS0xMzFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzV7kJbNvyoES0Z3q1noMVuy51l35/9RRfhQTWs2Hgnh+kJhEfMu2N8euenol q7kf4IslccrdAI8EVN7iuzgO09cLMW8IOCh9lBlUIaI5DzYC9t6WrB26vHTan3at 2fk5ahwL7hlPnjXa44Aux4EeNU0OqbnJ9+3+Dm4VVkiJbVb+wnqkIkrRJEGQvrk2 XR9C0dXF+7dp3Blp01LzQmwGw8WAiMI4Pb8EU7Y6nrAdpdEqAV8xi3e8xZ9Vxlwn ugHttgZbE2i7Wm7R8bf4B5Rz0hIRKnBGKYAutvJVR6TfHQ001eyfZsJpAOZRYXbi vTEYBaRw3RBtdkkN3Qfdl9UrUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcezM0E 6wo0Z5kiF4awMhhHh8ImMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZzUrHvRsiMVWwiztgxSSpmQA4U5JAv2CuHpgG6AhDrhWE14tvfW3b aZvpgs7lLO6NYSWz7RvmL9BQvMsqY77tjW6lPfPahBZVQBDjQc+SSDG+51DAEz0w Hw5q2nVdnPoGNZL9o0yUjfgNgN1vNB/h9t7ShkX4NbLbDTR9q5lDD5I8Mh4thfnx 4mhFOePT9wHd092S74GOj2xUbl4b0WPiuIfDKH6iPI/9FEy9dsPUl+AVsaObzcDG ebjYD1sKW4ULzAc1YrPIxEvMoD7dCnpyu6bziRMZNlEdBaL6LRQtsI+pBlpkisUP SbZfHTtG6sCOPVkONK5VB707Pb5GlPmd -----END CERTIFICATE-----Generated at Tue Nov 4 01:07:26 2025 by rpki-client