$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: 7YlhXjJjSm0B2KGMtf5d85blUlqEHfd6CacMXPqQVlk= Subject key identifier: 7B:2C:62:14:17:27:C6:10:97:78:65:1F:19:4B:29:6A:D9:3C:DC:7A Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 078D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0782 Signing time: Sat 18 Oct 2025 22:55:44 +0000 Manifest this update: Sat 18 Oct 2025 22:55:43 +0000 Manifest next update: Sat 25 Oct 2025 22:55:43 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: JKrujfWjolPfKlhc5+Tcii3Ok/yvx/aTOlqP9IbIFyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1933 (0x78d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Oct 18 22:55:43 2025 GMT Not After : Oct 25 22:55:43 2025 GMT Subject: CN=68f41af0-32d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:ca:c4:78:0f:e9:3e:45:46:ae:cc:97:be: da:6a:31:91:3a:e4:20:bd:59:71:d9:eb:a2:d7:93: cd:f4:bb:4e:9b:cf:39:d1:1d:17:cd:1c:61:d0:c0: 19:5a:65:46:3d:4c:de:6a:e5:3f:5e:8d:86:ba:62: 13:d1:70:08:b1:a0:b4:36:6c:00:2c:12:41:75:58: 15:ec:5e:7d:e8:5e:8a:cb:ee:a0:39:bb:80:76:07: 59:ea:13:28:1e:df:ac:f7:80:38:c0:31:58:7e:70: df:19:c1:28:a5:49:69:3f:67:1c:de:30:26:a7:10: 27:41:96:37:4d:a0:20:fd:f0:20:be:24:46:ff:d6: bb:3d:52:d0:9b:f2:f6:38:f5:da:28:05:24:64:a4: 23:e4:18:0d:50:45:dc:c7:6c:1f:5c:ce:6f:26:6c: b0:3a:91:cb:66:43:bb:60:fe:1c:de:39:fa:04:a5: 8a:b4:27:f9:18:a0:3d:dd:2e:c3:be:c1:20:7f:67: 52:84:58:24:14:fb:4b:49:b2:7d:85:5f:c3:75:70: c9:bb:6a:03:f2:f3:12:40:b5:86:05:1b:1b:e6:1e: 0a:f8:c1:23:74:2e:b0:44:d9:80:8e:e1:c2:b1:e4: 1d:4d:d3:7d:da:ea:06:e4:f1:3c:ef:f0:c7:42:89: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:62:14:17:27:C6:10:97:78:65:1F:19:4B:29:6A:D9:3C:DC:7A X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:10:7f:37:cb:11:ea:df:dd:ce:d4:47:62:ac:f6:c8:63:83: 69:ca:11:54:89:13:b9:9b:74:f0:27:26:01:d8:7b:b2:b1:ea: cd:78:a2:74:81:98:f4:09:a4:66:8f:35:f2:fe:19:bd:38:4e: 42:7d:7e:a8:4a:2d:57:4b:73:3b:d3:53:e6:18:d6:45:c8:f0: 5e:e4:b2:f4:4a:4e:f4:1f:08:fd:5c:ec:df:b7:5f:74:45:1d: c8:ab:06:12:18:7f:ed:b5:5b:25:c4:9c:23:40:ea:ab:64:b3: 77:93:d5:cb:5f:12:fe:5b:53:dc:70:c2:06:a8:f7:aa:c4:ce: 40:4b:95:de:47:9f:2c:2c:dc:5e:50:ac:48:2c:c7:ce:84:4c: 67:ff:2e:e5:80:db:92:c8:6b:44:fe:ce:0e:64:fd:e4:d0:0b: 96:e5:f2:ea:16:eb:d1:08:00:3a:da:b2:48:38:cd:a5:4b:dc: dd:21:81:42:b6:20:50:1f:34:14:f2:38:49:85:38:97:bc:b1: 9f:e0:cf:98:82:c4:42:f9:c3:03:8f:c0:f9:f0:2e:26:9e:7c: dc:de:5e:86:85:48:ce:ad:38:81:b2:44:ab:f2:c8:11:bb:7f: 43:97:ab:d2:53:a4:e9:2f:54:6e:fd:e9:49:6f:40:0a:11:94: b9:26:5d:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUxMDE4MjI1NTQzWhcNMjUxMDI1MjI1NTQzWjAYMRYwFAYD VQQDEw02OGY0MWFmMC0zMmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4fKxHgP6T5FRq7Ml77aajGROuQgvVlx2eui15PN9LtOm8850R0XzRxh0MAZ WmVGPUzeauU/Xo2GumIT0XAIsaC0NmwALBJBdVgV7F596F6Ky+6gObuAdgdZ6hMo Ht+s94A4wDFYfnDfGcEopUlpP2cc3jAmpxAnQZY3TaAg/fAgviRG/9a7PVLQm/L2 OPXaKAUkZKQj5BgNUEXcx2wfXM5vJmywOpHLZkO7YP4c3jn6BKWKtCf5GKA93S7D vsEgf2dShFgkFPtLSbJ9hV/DdXDJu2oD8vMSQLWGBRsb5h4K+MEjdC6wRNmAjuHC seQdTdN92uoG5PE87/DHQokCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHssYhQX J8YQl3hlHxlLKWrZPNx6MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYEH83yxHq393O1EdirPbIY4NpyhFUiRO5m3TwJyYB2HuyserNeKJ0 gZj0CaRmjzXy/hm9OE5CfX6oSi1XS3M701PmGNZFyPBe5LL0Sk70Hwj9XOzft190 RR3IqwYSGH/ttVslxJwjQOqrZLN3k9XLXxL+W1PccMIGqPeqxM5AS5XeR58sLNxe UKxILMfOhExn/y7lgNuSyGtE/s4OZP3k0AuW5fLqFuvRCAA62rJIOM2lS9zdIYFC tiBQHzQU8jhJhTiXvLGf4M+YgsRC+cMDj8D58C4mnnzc3l6GhUjOrTiBskSr8sgR u39Dl6vSU6TpL1Ru/elJb0AKEZS5Jl33 -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:29 2025 by rpki-client