$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: uTUdh6NW8IdGc1KSh5/RDDYRRLCpcsM/yIxQ2jdtQk4= Subject key identifier: D5:D9:23:DC:B5:3E:8F:6F:BF:DF:75:44:57:49:58:1F:E5:99:21:F0 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0745 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 073A Signing time: Fri 30 May 2025 22:00:07 +0000 Manifest this update: Fri 30 May 2025 22:00:06 +0000 Manifest next update: Fri 06 Jun 2025 22:00:06 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: z4/ZS62JvSSCqWknsVW7jbG0cakO0egH9WGl+CE6urk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1861 (0x745) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: May 30 22:00:06 2025 GMT Not After : Jun 6 22:00:06 2025 GMT Subject: CN=683a2a66-39ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:28:71:fb:9b:84:8a:98:3e:32:0b:14:8c:cf: 0a:48:96:d0:bb:e8:12:4f:81:c3:3d:a5:4f:63:d7: e8:e9:a1:39:98:55:34:a1:61:8a:3d:e0:25:c7:62: a9:63:29:82:7c:c1:35:13:64:af:cc:da:01:5f:b3: 5a:83:2a:2e:36:bc:13:61:db:47:e0:9b:27:b8:53: 3e:b3:52:d6:bf:d2:8f:35:dd:c9:2a:a7:57:3b:36: ed:84:d4:b1:a7:09:17:59:ef:0c:27:78:35:3f:3d: bd:88:47:d8:14:87:3c:8a:45:f6:55:b9:f0:67:e4: 4a:37:e4:ca:30:d7:e8:1c:d3:16:ef:8f:19:ec:df: 5c:88:57:44:08:4f:da:30:94:d5:88:a7:dc:98:81: a1:33:af:c0:73:f7:89:41:32:06:ae:81:53:85:33: 7d:77:b1:49:d0:1a:47:4c:43:c7:38:19:11:18:9d: 9a:95:57:75:5a:2c:61:3b:61:33:4c:a3:0f:9a:59: 68:6b:c9:a0:bc:54:51:a8:82:fd:d0:fe:02:e6:2c: 85:40:b7:e3:0f:0c:58:2c:32:47:78:e9:76:a5:66: 9b:b7:f7:c7:5c:9c:7d:0e:ef:fd:8b:64:a3:fb:e0: 90:7a:62:3b:6b:9e:c5:22:69:c6:8f:3b:06:93:4f: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:23:DC:B5:3E:8F:6F:BF:DF:75:44:57:49:58:1F:E5:99:21:F0 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9d:cd:c3:ef:0f:38:dc:38:de:92:01:48:42:ee:02:fc:8d: 4f:df:2e:14:45:71:a6:a5:70:aa:b7:eb:ee:dd:a0:4f:c5:c1: d9:c7:bf:bd:ed:56:4a:ec:ed:3d:d5:32:a1:70:ef:bc:8d:9c: 58:7c:ea:98:39:de:41:42:1b:a2:81:43:51:15:a2:97:b8:34: 36:7b:67:ae:13:43:83:d6:48:7b:28:93:c4:95:e3:d3:89:07: 30:b0:ef:bd:d1:d4:62:b6:2f:5c:43:0d:e9:25:c8:57:cd:39: 44:4a:38:b1:9e:4b:5b:f7:b4:4a:5f:23:7d:29:6e:29:98:f1: 95:6a:09:99:d0:a6:33:38:ea:2c:c0:79:38:63:34:64:5d:9a: 1b:aa:60:36:13:37:4b:db:9b:35:b0:33:58:30:98:58:f2:b1: 99:2c:20:c3:eb:ef:17:8d:0b:db:75:b3:e1:4b:bf:1a:d3:50: bb:70:c5:e9:33:35:ea:d0:88:fd:1f:d9:9e:6c:2f:6d:77:a2: 4b:25:f6:15:90:15:57:2c:70:86:67:97:79:1c:35:5d:07:8d: d2:d7:39:71:ad:1f:40:3e:44:2d:a1:7d:35:c1:03:33:45:d9: d6:a3:8b:0f:6c:fe:89:b1:3a:72:0d:2b:88:54:b9:11:0d:78: fd:1c:70:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNTMwMjIwMDA2WhcNMjUwNjA2MjIwMDA2WjAYMRYwFAYD VQQDEw02ODNhMmE2Ni0zOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ihx+5uEipg+MgsUjM8KSJbQu+gST4HDPaVPY9fo6aE5mFU0oWGKPeAlx2Kp YymCfME1E2SvzNoBX7NagyouNrwTYdtH4JsnuFM+s1LWv9KPNd3JKqdXOzbthNSx pwkXWe8MJ3g1Pz29iEfYFIc8ikX2VbnwZ+RKN+TKMNfoHNMW748Z7N9ciFdECE/a MJTViKfcmIGhM6/Ac/eJQTIGroFThTN9d7FJ0BpHTEPHOBkRGJ2alVd1WixhO2Ez TKMPmlloa8mgvFRRqIL90P4C5iyFQLfjDwxYLDJHeOl2pWabt/fHXJx9Du/9i2Sj ++CQemI7a57FImnGjzsGk08VRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXZI9y1 Po9vv991RFdJWB/lmSHwMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCnc3D7w843DjekgFIQu4C/I1P3y4URXGmpXCqt+vu3aBPxcHZx7+9 7VZK7O091TKhcO+8jZxYfOqYOd5BQhuigUNRFaKXuDQ2e2euE0OD1kh7KJPElePT iQcwsO+90dRiti9cQw3pJchXzTlESjixnktb97RKXyN9KW4pmPGVagmZ0KYzOOos wHk4YzRkXZobqmA2EzdL25s1sDNYMJhY8rGZLCDD6+8XjQvbdbPhS78a01C7cMXp MzXq0Ij9H9mebC9td6JLJfYVkBVXLHCGZ5d5HDVdB43S1zlxrR9APkQtoX01wQMz RdnWo4sPbP6JsTpyDSuIVLkRDXj9HHAQ -----END CERTIFICATE-----Generated at Sat May 31 16:38:57 2025 by rpki-client