$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: a9JVpB47rgF76zLzvy9Ajyg6Le5NziQBmScLOZ7b5mA= Subject key identifier: 16:F6:B1:AA:A5:F9:33:ED:0A:2C:9B:34:4F:65:5C:05:B0:85:15:23 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0765 Signing time: Fri 22 Aug 2025 21:48:19 +0000 Manifest this update: Fri 22 Aug 2025 21:48:19 +0000 Manifest next update: Fri 29 Aug 2025 21:48:19 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: g9X+sKIJKlphaIGsSU6AWb+kGnEDvahn9Mj7JD8VFRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Aug 22 21:48:19 2025 GMT Not After : Aug 29 21:48:19 2025 GMT Subject: CN=68a8e5a3-8cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f0:00:88:49:ed:3b:bc:8b:4c:64:5b:aa:08: 50:49:33:64:dd:4e:68:d2:4b:90:27:7f:5c:13:bc: 05:8e:58:88:16:c5:7b:af:c5:28:0e:fb:36:57:24: d1:82:1c:b7:bd:fb:8c:28:a8:5d:98:d1:c2:1d:97: ec:d1:a5:80:65:48:f9:1d:9c:c6:90:fa:f9:58:26: 6a:41:58:e7:6a:96:63:1b:4f:cf:65:73:f6:66:e3: 73:ec:85:13:31:a4:c3:c3:76:d0:1f:13:55:86:13: bc:3a:0b:33:a8:30:ae:15:46:55:91:f0:74:a2:14: c1:a3:e5:72:55:ee:10:c2:f1:47:a4:22:5f:10:ac: c2:3a:0e:67:92:fd:59:cb:b2:9a:c0:9d:61:4d:97: 85:80:19:bc:c0:62:75:a1:fc:82:bf:af:83:45:bc: 4f:46:ee:e9:76:80:e3:c1:0b:99:d9:8b:b3:2d:86: e3:24:56:b4:20:1d:a4:a0:3e:9a:92:9c:a6:87:e8: b0:55:fd:74:a6:25:29:80:59:3c:2b:71:82:36:7f: ff:2c:6f:88:df:da:50:cb:59:a1:eb:d3:82:64:75: 35:5a:44:d4:34:22:3a:e4:88:9d:a5:66:ac:d8:56: 72:19:c3:93:18:03:4f:93:bc:f4:c9:ef:30:55:f6: 98:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F6:B1:AA:A5:F9:33:ED:0A:2C:9B:34:4F:65:5C:05:B0:85:15:23 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:14:7b:6c:04:07:14:f0:59:c8:79:d9:7f:51:7a:5b:b7:c7: 1c:4e:50:c5:1d:0e:25:bd:b2:0a:50:85:76:2f:9f:39:73:65: 87:f7:cd:6b:6b:64:1a:00:f2:d6:46:bf:3c:af:e1:d0:8d:90: aa:77:01:c8:dd:2d:36:ae:e5:3e:b8:e1:c4:3b:06:e8:18:f5: d0:72:b2:65:28:a7:09:5d:b0:3c:85:95:fe:2d:5d:11:9a:0b: 99:2b:50:71:fa:2f:5d:45:e8:27:c5:fd:8b:39:5a:15:34:0a: b4:40:42:cf:2a:51:35:db:6a:a8:df:c2:33:16:43:99:a3:d8: 7b:81:9c:a8:86:10:a0:30:66:78:c7:f8:a7:c1:98:92:ac:19: bf:7c:1d:6b:c9:e5:30:72:08:d6:55:ba:22:40:9d:a2:d5:75: 44:dd:2e:97:68:9c:d9:d0:3c:64:af:7a:a3:4b:6d:3b:3b:cf: 41:ff:5e:7e:bc:72:85:4c:0c:b5:be:5e:85:a0:6f:fc:6f:1c: 49:58:b6:89:30:13:94:b4:08:7d:ff:0d:7d:f7:7a:3f:09:0f: 47:b4:ad:11:03:d2:80:83:4a:cd:f6:c9:02:18:c5:31:8e:21: 26:5d:fc:64:e6:f9:ae:c5:82:05:b1:72:ee:3e:6d:73:6c:c0: bb:12:76:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwODIyMjE0ODE5WhcNMjUwODI5MjE0ODE5WjAYMRYwFAYD VQQDEw02OGE4ZTVhMy04Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/AAiEntO7yLTGRbqghQSTNk3U5o0kuQJ39cE7wFjliIFsV7r8UoDvs2VyTR ghy3vfuMKKhdmNHCHZfs0aWAZUj5HZzGkPr5WCZqQVjnapZjG0/PZXP2ZuNz7IUT MaTDw3bQHxNVhhO8OgszqDCuFUZVkfB0ohTBo+VyVe4QwvFHpCJfEKzCOg5nkv1Z y7KawJ1hTZeFgBm8wGJ1ofyCv6+DRbxPRu7pdoDjwQuZ2YuzLYbjJFa0IB2koD6a kpymh+iwVf10piUpgFk8K3GCNn//LG+I39pQy1mh69OCZHU1WkTUNCI65IidpWas 2FZyGcOTGANPk7z0ye8wVfaYgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBb2saql +TPtCiybNE9lXAWwhRUjMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9FHtsBAcU8FnIedl/UXpbt8ccTlDFHQ4lvbIKUIV2L585c2WH981r a2QaAPLWRr88r+HQjZCqdwHI3S02ruU+uOHEOwboGPXQcrJlKKcJXbA8hZX+LV0R mguZK1Bx+i9dRegnxf2LOVoVNAq0QELPKlE122qo38IzFkOZo9h7gZyohhCgMGZ4 x/inwZiSrBm/fB1ryeUwcgjWVboiQJ2i1XVE3S6XaJzZ0Dxkr3qjS207O89B/15+ vHKFTAy1vl6FoG/8bxxJWLaJMBOUtAh9/w1993o/CQ9HtK0RA9KAg0rN9skCGMUx jiEmXfxk5vmuxYIFsXLuPm1zbMC7Enap -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:35 2025 by rpki-client