$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: niygVxez31IC1k+4t6xsy99/oBrQ6DdyBDN2FV+HMWc= Subject key identifier: 5E:F3:94:84:8A:6C:2A:AA:C0:6D:AD:34:1A:3A:72:A5:3A:6F:5A:9E Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 073B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0730 Signing time: Sat 10 May 2025 21:27:16 +0000 Manifest this update: Sat 10 May 2025 21:27:15 +0000 Manifest next update: Sat 17 May 2025 21:27:15 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: iiYbf2IW3PCqtEInb83zVPczY2gA0+ay1EEf4hJ+nhU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1851 (0x73b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: May 10 21:27:15 2025 GMT Not After : May 17 21:27:15 2025 GMT Subject: CN=681fc4b3-6723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:a3:74:eb:0c:70:ee:a6:c0:06:93:1a:45: 33:d5:00:9b:9a:6a:06:55:dc:b9:46:74:63:a4:5d: 6c:ca:ea:66:bc:50:01:db:46:5a:02:b6:23:76:97: 27:a8:0f:21:0a:64:41:99:47:33:94:e4:5f:82:7e: b6:a6:34:46:69:56:85:83:8d:6b:47:be:2e:d2:13: ee:16:90:c3:41:a0:c2:87:53:5b:ba:01:e0:94:61: 4c:75:25:db:91:de:68:9a:85:cc:79:20:0a:54:91: 1f:9d:41:a7:c5:b5:ca:58:af:d7:12:5e:5e:e8:ef: 89:a6:84:0d:e9:7f:da:e9:52:ca:32:30:4b:3d:e2: 99:49:51:9e:33:7f:4e:d9:7d:40:1a:bc:67:4e:26: f7:b5:d3:b3:1a:3f:65:1d:ba:90:ef:c1:ee:75:63: f3:80:7a:d6:be:cf:0c:14:ec:7e:b1:27:77:da:dc: 91:0b:d7:33:2a:1c:4a:99:38:8b:33:0b:5b:75:ab: 3c:10:10:ad:dc:98:0b:d0:3b:8e:a2:08:6e:50:8f: 15:50:61:53:75:6c:6a:9c:68:2a:9c:98:83:86:90: 63:6d:dc:a9:3a:9c:33:ff:d2:f2:ee:20:c1:7b:19: 63:e3:97:03:9f:ab:03:3b:eb:e4:cb:8b:43:c3:9b: 04:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F3:94:84:8A:6C:2A:AA:C0:6D:AD:34:1A:3A:72:A5:3A:6F:5A:9E X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7f:f6:2e:90:8b:8a:42:9f:88:3c:ba:64:c2:10:ea:34:78: 66:eb:c2:76:8d:f4:5b:81:da:f3:6a:36:d6:08:59:a3:fd:58: ed:e4:d8:c9:96:de:13:7f:28:cf:93:1a:0c:8b:61:30:d4:57: 51:60:a1:d4:a0:e7:8f:23:f8:bf:70:6d:2e:be:8c:cf:c5:57: 2d:75:99:20:c3:ab:37:85:18:b1:92:bf:16:2c:b1:ff:68:03: 06:31:f9:a2:1a:c4:52:4e:96:95:10:4a:ff:f4:e1:dd:25:e9: ba:c2:5d:42:7c:16:8e:ba:7d:ae:0e:49:e2:3f:97:ed:54:00: d4:28:61:fe:a2:65:4a:80:36:2c:d2:08:02:ac:ed:75:ca:2e: 36:c5:f1:d2:e9:ad:63:27:74:72:05:00:ec:35:c7:af:14:ef: 0c:91:47:ea:33:ac:8f:73:95:0d:26:58:35:24:7e:ee:ef:14: a4:24:ce:58:7e:81:8a:a3:4b:6f:c2:77:e2:b8:86:16:ba:d7: 80:43:69:cc:e9:fa:c6:64:39:ed:b9:8b:b5:0f:df:2d:ca:c3: 5a:54:98:cb:7d:bb:89:c7:0f:f6:4a:34:d0:07:63:89:54:15: e9:c3:93:4b:3c:9d:29:ee:43:84:c9:58:78:03:03:72:81:06: 17:af:a2:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNTEwMjEyNzE1WhcNMjUwNTE3MjEyNzE1WjAYMRYwFAYD VQQDEw02ODFmYzRiMy02NzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJGjdOsMcO6mwAaTGkUz1QCbmmoGVdy5RnRjpF1syupmvFAB20ZaArYjdpcn qA8hCmRBmUczlORfgn62pjRGaVaFg41rR74u0hPuFpDDQaDCh1NbugHglGFMdSXb kd5omoXMeSAKVJEfnUGnxbXKWK/XEl5e6O+JpoQN6X/a6VLKMjBLPeKZSVGeM39O 2X1AGrxnTib3tdOzGj9lHbqQ78HudWPzgHrWvs8MFOx+sSd32tyRC9czKhxKmTiL Mwtbdas8EBCt3JgL0DuOoghuUI8VUGFTdWxqnGgqnJiDhpBjbdypOpwz/9Ly7iDB exlj45cDn6sDO+vky4tDw5sEZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF7zlISK bCqqwG2tNBo6cqU6b1qeMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASf/YukIuKQp+IPLpkwhDqNHhm68J2jfRbgdrzajbWCFmj/Vjt5NjJ lt4TfyjPkxoMi2Ew1FdRYKHUoOePI/i/cG0uvozPxVctdZkgw6s3hRixkr8WLLH/ aAMGMfmiGsRSTpaVEEr/9OHdJem6wl1CfBaOun2uDkniP5ftVADUKGH+omVKgDYs 0ggCrO11yi42xfHS6a1jJ3RyBQDsNcevFO8MkUfqM6yPc5UNJlg1JH7u7xSkJM5Y foGKo0tvwnfiuIYWuteAQ2nM6frGZDntuYu1D98tysNaVJjLfbuJxw/2SjTQB2OJ VBXpw5NLPJ0p7kOEyVh4AwNygQYXr6Ks -----END CERTIFICATE-----Generated at Sun May 11 15:05:41 2025 by rpki-client