$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: Ne0IMHk/F23bgqBpfDCah8xub22pJq/vIt6V6VVqJtk= Subject key identifier: EC:1C:C5:8B:22:38:21:7F:38:0F:15:44:27:71:84:A3:36:68:CE:5D Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 01F3 Signing time: Wed 17 Sep 2025 02:57:43 +0000 Manifest this update: Wed 17 Sep 2025 02:57:42 +0000 Manifest next update: Wed 24 Sep 2025 02:57:42 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: J+pRThIfYA89cCF658mSWwIcTYFFpIx+qipoDf4gUwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: Sep 17 02:57:42 2025 GMT Not After : Sep 24 02:57:42 2025 GMT Subject: CN=68ca23a7-1144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4e:9d:98:3b:8f:dc:c6:3f:35:89:cb:13:81: 31:36:ea:cd:d1:60:75:ff:44:dc:92:9b:13:a5:67: 06:d1:35:26:98:c6:e1:b3:22:30:d5:2e:49:a5:19: ef:0d:63:f0:94:1f:34:08:5e:c4:2b:7f:1a:2b:f2: 7c:b8:f8:24:32:93:ba:66:12:2e:19:0d:00:35:93: a6:b6:ae:67:c9:49:fb:ac:3d:12:00:08:80:91:0c: c8:0d:70:5c:41:21:d9:50:35:ce:22:57:bc:36:2e: 9c:19:c1:03:36:61:fd:cc:88:fe:2e:37:10:e6:25: 5c:8b:65:02:bc:7e:4d:e6:17:f5:f4:41:3e:51:63: 54:0a:3f:a6:6a:e6:86:76:f3:f6:48:50:30:ff:05: 8d:49:fc:84:82:ab:15:6a:e6:18:55:a7:b9:f7:91: 10:72:22:63:25:30:75:df:52:5c:68:7a:d9:63:d0: 4a:38:db:04:ed:1d:b0:2e:6a:db:bc:fa:82:d6:37: e9:5e:df:52:09:bb:46:79:be:e1:74:7c:85:80:a7: 41:5f:e9:b5:c7:57:cd:e0:3b:a7:25:8b:6d:20:c5: eb:cf:2c:1a:21:12:3c:f4:62:fe:e2:c9:42:45:fc: bc:81:be:db:ef:14:81:31:23:6a:33:9a:18:ba:3e: 32:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:1C:C5:8B:22:38:21:7F:38:0F:15:44:27:71:84:A3:36:68:CE:5D X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:aa:35:2e:54:1f:f7:a4:0e:3f:b5:19:2c:08:a5:d7:15:97: 88:d3:97:25:7b:57:f1:24:5e:69:0b:f8:6c:54:19:ff:be:c9: 4c:c2:0b:df:5e:ad:0f:fe:c7:8f:99:1d:53:4e:a2:e1:a4:3e: 1e:8b:bb:6c:48:00:73:c7:f5:90:30:13:4f:64:18:49:7a:64: 7d:2e:a8:90:e2:5f:4c:4c:8b:54:32:93:d3:7f:c4:00:a3:4b: fb:f4:f6:34:89:a8:a2:43:d8:de:73:6c:75:ff:52:aa:b8:53: d2:64:de:07:69:54:3c:f5:85:91:08:e8:9f:9a:4d:f5:df:b1: ff:d7:f4:14:50:85:fe:d7:ac:01:85:ef:e9:4f:8a:c6:76:48: dc:53:f8:24:8c:ea:8b:ff:7d:cb:ea:4f:62:99:ec:01:bf:87: 76:c5:a0:58:b1:ee:39:66:8b:2f:7f:3a:83:fc:e6:0c:49:0c: 1c:6a:60:73:ff:ed:07:4a:25:62:3d:6c:05:86:e5:f2:82:50: a9:da:5f:26:1e:6e:d8:87:0b:93:72:41:5c:d8:ca:12:06:ce: 40:7c:c3:28:82:06:9a:2b:c9:9c:ca:f7:40:da:f7:88:ba:e7: 7f:d1:f3:93:7f:03:16:8c:41:a9:36:2e:f3:c6:5e:1b:d7:d7: ae:db:43:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwOTE3MDI1NzQyWhcNMjUwOTI0MDI1NzQyWjAYMRYwFAYD VQQDEw02OGNhMjNhNy0xMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U6dmDuP3MY/NYnLE4ExNurN0WB1/0TckpsTpWcG0TUmmMbhsyIw1S5JpRnv DWPwlB80CF7EK38aK/J8uPgkMpO6ZhIuGQ0ANZOmtq5nyUn7rD0SAAiAkQzIDXBc QSHZUDXOIle8Ni6cGcEDNmH9zIj+LjcQ5iVci2UCvH5N5hf19EE+UWNUCj+mauaG dvP2SFAw/wWNSfyEgqsVauYYVae595EQciJjJTB131JcaHrZY9BKONsE7R2wLmrb vPqC1jfpXt9SCbtGeb7hdHyFgKdBX+m1x1fN4DunJYttIMXrzywaIRI89GL+4slC Rfy8gb7b7xSBMSNqM5oYuj4yQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwcxYsi OCF/OA8VRCdxhKM2aM5dMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArqjUuVB/3pA4/tRksCKXXFZeI05cle1fxJF5pC/hsVBn/vslMwgvf Xq0P/sePmR1TTqLhpD4ei7tsSABzx/WQMBNPZBhJemR9LqiQ4l9MTItUMpPTf8QA o0v79PY0iaiiQ9jec2x1/1KquFPSZN4HaVQ89YWRCOifmk3137H/1/QUUIX+16wB he/pT4rGdkjcU/gkjOqL/33L6k9imewBv4d2xaBYse45ZosvfzqD/OYMSQwcamBz /+0HSiViPWwFhuXyglCp2l8mHm7YhwuTckFc2MoSBs5AfMMoggaaK8mcyvdA2veI uud/0fOTfwMWjEGpNi7zxl4b19eu20O/ -----END CERTIFICATE-----Generated at Thu Sep 18 23:52:01 2025 by rpki-client