$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft File: CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json) Hash identifier: Y3pOai+M5RyyQ8AM4PhGTTgSIGQHiYeOUBscCgQccps= Subject key identifier: 2D:A1:6E:79:4E:F7:90:C5:04:6E:C5:CB:D1:BB:7B:BC:2E:C7:BD:2D Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A Certificate issuer: /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft Manifest number: 70 Signing time: Thu 07 Aug 2025 07:27:10 +0000 Manifest this update: Thu 07 Aug 2025 07:27:10 +0000 Manifest next update: Thu 14 Aug 2025 07:27:10 +0000 Files and hashes: 1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: jCkYIwniBT4eSXCQcfHHOb8ruDWKVppSkVkbNqwNiyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A Validity Not Before: Aug 7 07:27:10 2025 GMT Not After : Aug 14 07:27:10 2025 GMT Subject: CN=6894554e-93a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ea:3f:99:83:80:46:d3:42:fd:2a:8a:b1:6b: d8:45:7a:b0:88:24:c8:cc:65:92:af:0e:47:14:9b: 7b:8e:c7:62:ae:d2:52:2f:e0:4a:c0:51:9c:d3:40: ff:fc:08:51:1c:45:cd:4c:0b:2d:7d:35:92:5a:0b: 09:52:3b:c2:0c:ba:1b:14:4b:67:02:db:0b:dd:7a: cc:8b:bf:36:2d:c6:4a:7b:52:5a:53:f9:be:60:65: 8d:5c:0b:95:7a:29:19:88:99:de:49:69:1d:8f:39: da:e5:fe:79:34:0c:a6:92:5a:1e:14:e6:d8:db:77: e2:4d:5d:49:b5:6a:b6:e0:e3:22:c9:d0:64:03:18: ec:3f:fa:52:d2:93:40:32:a5:1d:99:7a:a8:a6:d1: 23:ed:69:56:5d:6b:f6:13:60:5c:03:0a:f7:aa:e2: 66:63:97:1b:3a:ce:c0:42:24:a9:8c:d8:de:5a:64: f3:85:60:91:ed:47:5e:6f:76:5e:b7:da:fa:a8:b6: 26:d2:97:b9:4e:5e:e8:0a:4d:97:c2:dd:bc:b8:c0: 7f:b7:1f:f6:6f:e8:cb:5e:ce:e0:96:e2:32:16:fd: 6d:ad:49:c0:40:b9:3e:8d:51:8d:b4:a5:3a:c5:7a: 20:83:1a:f0:e6:74:be:7c:9f:20:44:67:c1:cd:d8: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:6E:79:4E:F7:90:C5:04:6E:C5:CB:D1:BB:7B:BC:2E:C7:BD:2D X509v3 Authority Key Identifier: keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:d0:3b:c8:29:80:2d:9a:28:8e:0a:8f:5a:1f:ac:21:d6:f5: d9:24:5c:c5:0d:96:29:b6:8c:bb:83:29:39:dd:49:da:00:5c: 60:94:6d:68:f4:b0:24:3d:53:c6:28:96:81:1c:c7:60:ed:00: 54:50:11:14:c3:1d:74:00:26:ff:ea:70:ec:ab:af:cc:cc:92: a5:ca:ff:1e:fa:09:12:9a:d5:2d:49:3a:85:59:c3:9c:06:e3: f1:07:b9:54:32:73:a7:9b:ec:58:4f:63:5d:76:5d:a6:bb:71: 84:3f:6a:5e:a9:e9:9b:3d:55:0b:a0:37:16:86:10:30:af:91: 91:86:b7:91:ce:9b:4e:df:37:9a:fe:8c:fb:73:16:d1:68:f8: b8:f2:dc:86:ac:fb:e6:4e:ab:81:99:39:5d:27:1d:8c:46:a3: 8b:53:9e:b7:2b:2e:d1:79:d7:b1:92:5f:8b:76:7a:2f:1a:ec: 61:42:88:ae:5f:30:8c:0e:8a:6a:8e:26:89:af:cf:29:58:32: 7c:b8:62:b2:f2:a7:93:5c:e9:a7:92:6c:d2:91:ed:88:e6:54: d6:34:00:d4:c9:0e:2e:36:88:73:38:3f:f1:af:30:ad:e3:e4: 44:2d:22:27:d1:c3:05:b9:4b:98:18:24:f9:6f:ab:9f:bf:4f: e9:8c:a8:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MThCQjExMC8GA1UEBRMoMDhFRkQ3MTkzOEY3RjlEQzg3QTY5RjVDQjNGODRDN0E0 QjcyQTAwQTAeFw0yNTA4MDcwNzI3MTBaFw0yNTA4MTQwNzI3MTBaMBgxFjAUBgNV BAMTDTY4OTQ1NTRlLTkzYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC76j+Zg4BG00L9Koqxa9hFerCIJMjMZZKvDkcUm3uOx2Ku0lIv4ErAUZzTQP/8 CFEcRc1MCy19NZJaCwlSO8IMuhsUS2cC2wvdesyLvzYtxkp7UlpT+b5gZY1cC5V6 KRmImd5JaR2POdrl/nk0DKaSWh4U5tjbd+JNXUm1arbg4yLJ0GQDGOw/+lLSk0Ay pR2Zeqim0SPtaVZda/YTYFwDCveq4mZjlxs6zsBCJKmM2N5aZPOFYJHtR15vdl63 2vqotibSl7lOXugKTZfC3by4wH+3H/Zv6MtezuCW4jIW/W2tScBAuT6NUY20pTrF eiCDGvDmdL58nyBEZ8HN2MrpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULaFueU73 kMUEbsXL0bt7vC7HvS0wHwYDVR0jBBgwFoAUCO/XGTj3+dyHpp9cs/hMektyoAow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxOEJCLzcxRDUwNjJFQzhD NTExRUY4RUM1NTU2NUM0RjlBRTAyL0NPX1hHVGozLWR5SHBwOWNzX2hNZWt0eW9B by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ09fWEdUajMtZHlIcHA5Y3NfaE1la3R5b0FvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx OEJCLzcxRDUwNjJFQzhDNTExRUY4RUM1NTU2NUM0RjlBRTAyL0NPX1hHVGozLWR5 SHBwOWNzX2hNZWt0eW9Bby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFbQO8gpgC2aKI4Kj1ofrCHW9dkkXMUNlim2jLuDKTndSdoAXGCUbWj0 sCQ9U8YoloEcx2DtAFRQERTDHXQAJv/qcOyrr8zMkqXK/x76CRKa1S1JOoVZw5wG 4/EHuVQyc6eb7FhPY112Xaa7cYQ/al6p6Zs9VQugNxaGEDCvkZGGt5HOm07fN5r+ jPtzFtFo+Ljy3Ias++ZOq4GZOV0nHYxGo4tTnrcrLtF517GSX4t2ei8a7GFCiK5f MIwOimqOJomvzylYMny4YrLyp5Nc6aeSbNKR7YjmVNY0ANTJDi42iHM4P/GvMK3j 5EQtIifRwwW5S5gYJPlvq5+/T+mMqJk= -----END CERTIFICATE-----Generated at Fri Aug 8 19:37:25 2025 by rpki-client