$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: U53kldEmp419NAlxoatran6HozvS9XY1oZyFoA3U8LM= Subject key identifier: BD:7D:FA:4A:DB:AE:20:9E:81:3A:FE:57:E4:58:24:BB:DE:35:F5:38 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 01BB Signing time: Sat 31 May 2025 02:46:04 +0000 Manifest this update: Sat 31 May 2025 02:46:04 +0000 Manifest next update: Sat 07 Jun 2025 02:46:04 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: EbfA2bSuzcr0Z4Vpa1gnbxISpq6ALXBXnBjxL6k3lWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: May 31 02:46:04 2025 GMT Not After : Jun 7 02:46:04 2025 GMT Subject: CN=683a6d6c-fe4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:94:37:95:dd:cf:33:97:e9:fe:5f:cd:1c: 6b:62:6d:fc:26:a8:d9:1f:02:e1:84:85:b8:69:1a: 94:3b:a4:61:cb:a7:a8:59:77:81:ce:29:a6:74:9e: 00:36:59:ac:71:a7:ab:0b:af:10:83:61:77:5f:c2: df:41:83:49:2d:d5:5c:88:bd:3a:7d:cc:4b:58:0f: 90:f4:64:02:37:b5:49:13:f9:0e:59:6a:91:09:10: 63:a1:1b:88:a6:c2:8a:23:5a:e9:d9:79:30:ed:21: 9e:58:18:ab:a8:be:ca:37:95:5e:81:df:18:bf:42: 4a:37:81:2e:aa:92:84:e5:28:d9:df:64:e4:de:53: 75:6d:81:fc:14:91:1b:ab:e3:5f:31:f9:2e:2f:a8: 15:c6:0c:75:36:70:df:e2:5c:54:43:41:52:54:0a: 71:3b:31:10:e6:2e:03:a0:5d:6b:fc:77:b1:5b:99: ce:43:1d:e1:1a:aa:01:ed:7e:6a:5f:a7:59:68:7f: 7f:62:ef:2b:34:c7:c5:b7:d2:bd:9d:91:2e:21:e8: 3b:8b:a2:f8:8a:33:11:b0:cf:af:4e:78:86:e5:02: 70:6c:20:01:a0:4e:b5:88:c1:ad:f2:77:3e:3d:e6: e7:8c:ba:4a:f2:51:7a:6a:03:ad:af:5a:1a:06:6a: 9c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7D:FA:4A:DB:AE:20:9E:81:3A:FE:57:E4:58:24:BB:DE:35:F5:38 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:49:80:6c:97:4b:07:20:30:7c:6c:c0:de:3a:01:27:bc:17: e4:d7:8b:35:92:9d:21:82:58:db:d8:09:46:73:cf:0b:b0:a6: 06:eb:46:f9:61:19:c6:67:d1:5e:e7:3b:d3:f4:49:d4:dc:9c: b8:29:10:32:9c:92:b5:27:cb:51:f8:f4:28:61:cc:87:a7:ee: 07:ec:cf:b1:a3:e1:f3:c3:3d:2b:0f:36:fc:79:fb:81:fb:0c: 14:75:06:e6:46:5e:21:cc:60:12:77:13:11:08:6b:83:31:c5: d3:f5:a7:17:74:d6:0d:57:bb:88:ca:40:00:b7:19:3e:9e:95: b9:ce:02:de:1e:cb:c6:8e:96:ef:6f:41:b0:0b:d4:0d:2f:c4: 52:28:5f:a9:7a:48:90:b7:d0:54:cd:12:f0:5a:17:93:c7:cf: 6c:fd:7a:70:1e:2b:7c:3b:c9:ac:cc:e3:ba:34:86:40:f6:4d: 99:c7:e4:28:b3:37:71:ac:e7:ab:d6:76:a1:41:14:b0:51:1c: 63:05:b5:47:04:24:84:d0:09:fc:4e:35:7e:76:e0:82:f8:60: d0:6f:f4:2e:90:af:e8:ce:3f:0a:a1:a1:cf:cf:39:54:a8:63: c4:7a:2d:82:1c:a5:14:97:f6:53:5a:66:69:0e:d7:fc:03:3f: ed:b7:ad:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwNTMxMDI0NjA0WhcNMjUwNjA3MDI0NjA0WjAYMRYwFAYD VQQDEw02ODNhNmQ2Yy1mZTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIWUN5XdzzOX6f5fzRxrYm38JqjZHwLhhIW4aRqUO6Rhy6eoWXeBzimmdJ4A NlmscaerC68Qg2F3X8LfQYNJLdVciL06fcxLWA+Q9GQCN7VJE/kOWWqRCRBjoRuI psKKI1rp2Xkw7SGeWBirqL7KN5Vegd8Yv0JKN4EuqpKE5SjZ32Tk3lN1bYH8FJEb q+NfMfkuL6gVxgx1NnDf4lxUQ0FSVApxOzEQ5i4DoF1r/HexW5nOQx3hGqoB7X5q X6dZaH9/Yu8rNMfFt9K9nZEuIeg7i6L4ijMRsM+vTniG5QJwbCABoE61iMGt8nc+ PebnjLpK8lF6agOtr1oaBmqc0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL19+krb riCegTr+V+RYJLveNfU4MB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6SYBsl0sHIDB8bMDeOgEnvBfk14s1kp0hgljb2AlGc88LsKYG60b5 YRnGZ9Fe5zvT9EnU3Jy4KRAynJK1J8tR+PQoYcyHp+4H7M+xo+Hzwz0rDzb8efuB +wwUdQbmRl4hzGASdxMRCGuDMcXT9acXdNYNV7uIykAAtxk+npW5zgLeHsvGjpbv b0GwC9QNL8RSKF+pekiQt9BUzRLwWheTx89s/XpwHit8O8mszOO6NIZA9k2Zx+Qo szdxrOer1nahQRSwURxjBbVHBCSE0An8TjV+duCC+GDQb/QukK/ozj8KoaHPzzlU qGPEei2CHKUUl/ZTWmZpDtf8Az/tt62Z -----END CERTIFICATE-----Generated at Sat May 31 16:43:00 2025 by rpki-client