$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: oCU3heew8Hc6xp9FfkhEafHUnbkhWqHKDKYI1GzAdtw= Subject key identifier: 1A:90:79:62:C6:E8:DD:A4:5B:61:4A:4E:C8:A1:5E:E6:D9:8D:72:F2 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 074C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0741 Signing time: Thu 12 Jun 2025 21:26:39 +0000 Manifest this update: Thu 12 Jun 2025 21:26:39 +0000 Manifest next update: Thu 19 Jun 2025 21:26:39 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: EN2gbv529M0bNBPavZMcHp4uxNP/ZB6zJ7Auf6DOqTw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Jun 12 21:26:39 2025 GMT Not After : Jun 19 21:26:39 2025 GMT Subject: CN=684b460f-8983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:d4:3d:87:bc:d1:04:71:ac:90:73:c8:92: 00:7a:3b:c2:3b:73:69:fd:ca:eb:d4:4a:4b:10:da: 32:c9:aa:56:81:c9:5f:c2:69:5c:ef:89:83:d5:08: 1e:a8:7a:28:df:aa:58:6a:b5:c7:51:bb:18:e8:10: a2:21:21:34:44:f2:cb:0d:84:94:f0:3d:8e:90:8f: 40:77:49:66:49:ab:ab:ae:c8:fb:ad:89:70:8e:66: 39:7a:12:37:5f:fe:9d:4e:e0:9d:64:de:dc:9e:8c: dc:62:ae:87:b7:94:2b:12:da:fe:d7:17:21:81:a0: 1a:31:df:e7:52:6d:ca:91:d5:61:c6:dd:09:12:ea: 46:2a:d5:b5:10:cc:e0:4c:5e:2b:ac:8a:f0:d5:01: 6b:b2:61:64:ca:0b:f2:ea:c9:1b:9d:87:22:18:a9: 4f:ef:91:c3:34:65:c9:3c:db:e5:e8:f2:4a:5e:a0: db:fb:06:dd:96:4a:74:6b:8c:5b:8a:5b:b7:ad:08: 2c:f3:50:7b:4e:a5:95:4d:8c:36:a4:76:c8:7f:cb: 38:38:c2:ab:29:b2:a0:63:80:2a:ef:45:88:9a:6b: 0f:fb:e6:e4:86:9a:a7:e5:79:b1:70:30:7a:bc:e2: 0a:4f:0b:78:0e:48:0a:ca:5e:30:fa:e3:8a:c0:14: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:90:79:62:C6:E8:DD:A4:5B:61:4A:4E:C8:A1:5E:E6:D9:8D:72:F2 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e6:11:6c:c0:cb:fe:bd:3d:eb:b7:4d:c2:8c:45:8a:62:dc: 82:87:b5:75:56:97:60:8b:b4:ce:14:c5:66:37:e0:79:e4:03: 39:05:11:ab:b0:c4:8d:aa:d9:15:cb:16:d1:d3:95:a4:9a:7b: a7:28:65:d1:3d:1b:14:28:22:de:c1:4a:b3:ae:fc:c5:9e:1e: 36:f0:f6:2c:4e:83:07:05:f9:7b:92:8d:79:17:46:3b:93:cf: 1d:1f:53:9f:00:e4:52:a4:a8:02:f6:c5:f1:34:8e:4f:15:f1: a1:30:93:5e:06:49:27:37:60:e3:fe:1e:09:63:05:4e:81:95: a4:8c:07:a3:a0:52:ba:a3:bc:e0:10:68:10:45:9f:ac:7d:b0: ac:62:8f:b1:a8:0f:46:8f:3d:c9:b1:dc:8b:b1:2d:50:b6:09: d2:90:56:ee:0b:19:4f:30:db:3f:b0:00:1f:4e:5e:87:d7:98: 6a:fc:90:0e:7e:34:01:21:0f:40:1f:26:bd:d2:b8:83:17:25: df:54:72:aa:9a:85:ee:0a:cb:78:20:99:77:80:c3:67:29:88: c1:07:6a:33:f0:cb:b1:3d:3b:72:4b:09:81:dc:4b:0e:3b:80: 34:80:5d:fb:e3:dd:e9:ed:c4:21:b7:46:00:b2:2d:2d:1c:3b: a6:1c:41:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNjEyMjEyNjM5WhcNMjUwNjE5MjEyNjM5WjAYMRYwFAYD VQQDEw02ODRiNDYwZi04OTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkPUPYe80QRxrJBzyJIAejvCO3Np/crr1EpLENoyyapWgclfwmlc74mD1Qge qHoo36pYarXHUbsY6BCiISE0RPLLDYSU8D2OkI9Ad0lmSaurrsj7rYlwjmY5ehI3 X/6dTuCdZN7cnozcYq6Ht5QrEtr+1xchgaAaMd/nUm3KkdVhxt0JEupGKtW1EMzg TF4rrIrw1QFrsmFkygvy6skbnYciGKlP75HDNGXJPNvl6PJKXqDb+wbdlkp0a4xb ilu3rQgs81B7TqWVTYw2pHbIf8s4OMKrKbKgY4Aq70WImmsP++bkhpqn5XmxcDB6 vOIKTwt4DkgKyl4w+uOKwBQPlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqQeWLG 6N2kW2FKTsihXubZjXLyMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm5hFswMv+vT3rt03CjEWKYtyCh7V1Vpdgi7TOFMVmN+B55AM5BRGr sMSNqtkVyxbR05WkmnunKGXRPRsUKCLewUqzrvzFnh428PYsToMHBfl7ko15F0Y7 k88dH1OfAORSpKgC9sXxNI5PFfGhMJNeBkknN2Dj/h4JYwVOgZWkjAejoFK6o7zg EGgQRZ+sfbCsYo+xqA9Gjz3JsdyLsS1QtgnSkFbuCxlPMNs/sAAfTl6H15hq/JAO fjQBIQ9AHya90riDFyXfVHKqmoXuCst4IJl3gMNnKYjBB2oz8MuxPTtySwmB3EsO O4A0gF37493p7cQht0YAsi0tHDumHEEU -----END CERTIFICATE-----Generated at Sat Jun 14 18:53:26 2025 by rpki-client