$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: oHUOb9ECf/c1kWljuesr/t9g0t3VqJak27cwhZWrjuM= Subject key identifier: 68:C5:03:A1:E3:A8:27:02:14:6B:10:D9:F1:86:BA:26:37:81:73:A6 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0730 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0725 Signing time: Thu 24 Apr 2025 21:38:40 +0000 Manifest this update: Thu 24 Apr 2025 21:38:40 +0000 Manifest next update: Thu 01 May 2025 21:38:40 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: Q8i0B7YpKouznsWg1siIKRcyeWShEZfJABuJiPvMYPQ=) 2: 539B27DEF87611EF8366B718C4F9AE02.roa (hash: 1nDM0peqDWmAV340563WsURkfernH1Bm63lk2+LpiqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1840 (0x730) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Apr 24 21:38:40 2025 GMT Not After : May 1 21:38:40 2025 GMT Subject: CN=680aaf60-eb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:17:78:2e:e3:9a:7c:ae:c8:50:d7:cb:7d: 80:f5:29:ff:34:60:fd:19:02:77:46:8d:6a:77:f0: e7:de:05:ba:d2:a1:33:85:eb:f7:a0:e6:dd:52:50: 00:f5:e5:3c:26:84:dd:2a:e0:c5:ad:e1:00:24:fc: 77:99:11:f5:16:6a:fd:08:0e:da:45:5c:11:7e:c4: a4:ac:51:c7:54:72:dd:4e:06:fe:c8:e6:43:ef:8a: 89:e5:fa:a6:50:e6:e0:09:96:c5:a1:02:09:b3:04: 80:5c:96:c6:a7:72:13:96:dc:f4:f0:cf:25:76:7b: a8:44:b9:a4:24:93:7c:86:0f:c8:83:d0:ca:c5:0f: e1:e4:8e:a1:80:eb:19:b6:b9:99:f4:9c:7f:6c:dd: 2e:15:9c:a7:64:c8:36:91:bf:7b:6b:9a:f4:48:00: 2e:ed:65:54:bf:8a:fc:8d:be:5d:e9:e2:37:57:bd: 33:9c:fb:de:8b:bf:a9:d8:2a:58:c8:c1:0a:76:d8: 45:23:d5:b5:57:4b:49:c4:59:24:63:f0:fd:a2:fa: 25:92:72:aa:1d:a1:48:d4:57:eb:3e:df:ef:6d:63: 23:63:d4:be:14:80:29:bd:1d:7e:47:ca:d0:d6:63: c9:08:d9:48:a3:ca:d7:b6:ee:f9:f5:5c:a4:e9:a8: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:03:A1:E3:A8:27:02:14:6B:10:D9:F1:86:BA:26:37:81:73:A6 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:5d:cd:2c:23:8f:e8:d2:16:3a:3d:59:ba:63:d0:19:7a:62: cf:6a:7c:1d:21:a6:87:44:28:52:de:39:bb:aa:a0:55:6c:4c: 7c:c7:bd:53:57:e8:7e:b7:18:66:d2:a9:97:16:8b:1c:42:38: 76:29:75:df:e6:a2:b8:8a:14:54:44:b5:19:53:13:ae:d2:77: e6:7a:f8:7f:2b:ea:f1:1a:30:cc:81:cb:bc:7b:d2:df:13:4d: 81:5c:38:6d:8a:2d:80:df:d6:26:a5:a5:e3:ca:d3:c4:43:25: 33:1a:46:06:6b:4f:f4:31:18:33:30:a3:4e:28:e5:43:96:0f: 1e:f7:d1:bd:3e:9e:30:cf:23:b0:fa:1e:7b:24:3b:ea:81:4e: d8:67:73:6c:5f:d5:a7:a4:10:ae:ae:11:19:28:64:1b:2c:f4: 25:42:f5:54:61:ad:15:b5:89:75:7a:df:cd:f5:a0:bf:83:a3: b5:bf:f8:ff:6e:2a:4f:58:b2:a6:af:c3:e0:0f:f8:ac:ce:6a: 4a:04:05:bb:58:98:5f:03:e2:06:5e:14:8e:37:b3:54:4f:65: a4:d3:f9:fc:1a:1a:5f:4f:60:56:1c:a4:cb:22:b7:05:ab:49: 89:07:c4:96:5d:3c:bb:8e:86:08:3f:14:1c:59:fc:b9:7b:93: fa:35:36:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNDI0MjEzODQwWhcNMjUwNTAxMjEzODQwWjAYMRYwFAYD VQQDEw02ODBhYWY2MC1lYjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NgXeC7jmnyuyFDXy32A9Sn/NGD9GQJ3Ro1qd/Dn3gW60qEzhev3oObdUlAA 9eU8JoTdKuDFreEAJPx3mRH1Fmr9CA7aRVwRfsSkrFHHVHLdTgb+yOZD74qJ5fqm UObgCZbFoQIJswSAXJbGp3ITltz08M8ldnuoRLmkJJN8hg/Ig9DKxQ/h5I6hgOsZ trmZ9Jx/bN0uFZynZMg2kb97a5r0SAAu7WVUv4r8jb5d6eI3V70znPvei7+p2CpY yMEKdthFI9W1V0tJxFkkY/D9ovolknKqHaFI1FfrPt/vbWMjY9S+FIApvR1+R8rQ 1mPJCNlIo8rXtu759Vyk6aj6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjFA6Hj qCcCFGsQ2fGGuiY3gXOmMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIXc0sI4/o0hY6PVm6Y9AZemLPanwdIaaHRChS3jm7qqBVbEx8x71T V+h+txhm0qmXFoscQjh2KXXf5qK4ihRURLUZUxOu0nfmevh/K+rxGjDMgcu8e9Lf E02BXDhtii2A39YmpaXjytPEQyUzGkYGa0/0MRgzMKNOKOVDlg8e99G9Pp4wzyOw +h57JDvqgU7YZ3NsX9WnpBCurhEZKGQbLPQlQvVUYa0VtYl1et/N9aC/g6O1v/j/ bipPWLKmr8PgD/iszmpKBAW7WJhfA+IGXhSON7NUT2Wk0/n8GhpfT2BWHKTLIrcF q0mJB8SWXTy7joYIPxQcWfy5e5P6NTYE -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:37 2025 by rpki-client