$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: 4NLJKtQx6yp4iu5gHPQ93Cz5RwnGPnx//TqpqFkjkLQ= Subject key identifier: 0B:C7:3C:85:5C:B2:CE:09:24:FD:3B:A0:25:8A:E1:1A:D7:E0:FD:99 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 01CB Signing time: Tue 01 Jul 2025 03:16:00 +0000 Manifest this update: Tue 01 Jul 2025 03:16:00 +0000 Manifest next update: Tue 08 Jul 2025 03:15:59 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: RmrbObOltO8ipKqSpOsB6wLvxOzKZgNXUupoA1GtfC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:15:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: Jul 1 03:16:00 2025 GMT Not After : Jul 8 03:15:59 2025 GMT Subject: CN=686352f0-58d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9d:ca:ff:7d:f4:1e:04:d6:a4:bd:19:c0:17: b8:49:e7:01:14:5b:b5:01:13:be:b3:a8:fd:09:0b: 97:31:b6:02:45:b9:9e:3f:10:f1:7d:15:1e:79:e1: 43:32:a7:16:3b:85:ab:4e:a9:76:53:28:ae:06:51: 9b:58:9e:fb:b0:2c:fd:40:ab:61:01:4c:2d:6e:e4: 20:f6:1c:20:9b:25:87:48:58:f6:b3:73:a2:11:45: e5:a8:6f:09:f8:9a:e1:9e:f5:1c:75:13:b9:37:ca: f4:7a:6e:e0:8a:ab:b3:4b:2c:f8:5d:41:ef:bb:32: 50:86:82:e4:1a:49:79:db:19:b7:b0:c2:45:46:bb: 50:51:ad:17:bd:24:99:93:d0:4b:2c:df:37:0a:a8: 00:e9:46:b4:bf:d5:79:00:7b:38:04:47:1d:5c:ea: c9:e0:4e:d3:1d:c6:18:e3:ed:c4:72:8e:16:ed:fc: 7f:ec:da:35:3b:9b:35:6f:79:ee:fc:66:db:2d:bd: 44:fa:e5:63:7d:d1:fb:25:10:94:33:60:5c:2a:16: ab:f2:04:d0:73:34:d3:bc:e4:12:cb:bb:6c:61:57: 41:98:7b:e1:4b:c6:eb:f3:37:99:58:c0:85:00:c0: 60:70:0a:f5:72:56:a5:88:9a:65:fc:be:2c:dd:ba: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C7:3C:85:5C:B2:CE:09:24:FD:3B:A0:25:8A:E1:1A:D7:E0:FD:99 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:e7:bf:fc:1f:93:41:83:b5:c3:a4:e6:11:a4:ea:06:da:76: 27:bf:90:a1:f6:54:e9:29:29:f3:43:cc:62:8f:f4:db:d2:70: 65:87:92:1d:04:e3:bf:9f:8b:5f:e0:7e:1f:f4:e9:1d:16:cd: fe:43:9b:d4:cb:ef:9f:9a:c5:10:b3:f6:e7:00:c5:b9:f8:9a: 75:b1:c2:eb:dc:b9:44:37:dd:75:52:d8:7f:54:98:2b:5c:d3: ca:fd:a8:80:31:09:01:ce:1c:86:28:e9:10:50:32:f7:e0:34: 03:5a:a5:a0:28:2e:10:b0:a0:9d:dd:68:00:38:2b:ce:c5:91: f1:33:6f:d0:53:05:7b:6d:c3:a4:8c:56:71:f1:d0:70:ce:66: 5e:86:df:f2:b6:54:0b:eb:18:97:78:cd:8b:6d:9f:ff:b8:f7: 19:1c:8b:e3:34:24:fe:41:22:00:47:4d:33:cf:16:48:33:50: 93:75:5a:5b:fd:80:63:ae:c1:a1:0d:34:30:7d:64:10:0b:4f: bb:21:d3:60:8c:2c:64:f4:cc:69:9b:bf:65:8e:da:18:f7:e1: 05:63:cb:b7:9f:42:ea:2c:be:e7:15:06:5b:53:0c:5b:f4:65: f1:44:e6:56:fa:a0:75:ab:14:74:a9:82:ba:1e:a4:f7:77:19: 9d:7a:d3:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwNzAxMDMxNjAwWhcNMjUwNzA4MDMxNTU5WjAYMRYwFAYD VQQDEw02ODYzNTJmMC01OGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Z3K/330HgTWpL0ZwBe4SecBFFu1ARO+s6j9CQuXMbYCRbmePxDxfRUeeeFD MqcWO4WrTql2UyiuBlGbWJ77sCz9QKthAUwtbuQg9hwgmyWHSFj2s3OiEUXlqG8J +JrhnvUcdRO5N8r0em7giquzSyz4XUHvuzJQhoLkGkl52xm3sMJFRrtQUa0XvSSZ k9BLLN83CqgA6Ua0v9V5AHs4BEcdXOrJ4E7THcYY4+3Eco4W7fx/7No1O5s1b3nu /GbbLb1E+uVjfdH7JRCUM2BcKhar8gTQczTTvOQSy7tsYVdBmHvhS8br8zeZWMCF AMBgcAr1claliJpl/L4s3brqIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvHPIVc ss4JJP07oCWK4RrX4P2ZMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC657/8H5NBg7XDpOYRpOoG2nYnv5Ch9lTpKSnzQ8xij/Tb0nBlh5Id BOO/n4tf4H4f9OkdFs3+Q5vUy++fmsUQs/bnAMW5+Jp1scLr3LlEN911Uth/VJgr XNPK/aiAMQkBzhyGKOkQUDL34DQDWqWgKC4QsKCd3WgAOCvOxZHxM2/QUwV7bcOk jFZx8dBwzmZeht/ytlQL6xiXeM2LbZ//uPcZHIvjNCT+QSIAR00zzxZIM1CTdVpb /YBjrsGhDTQwfWQQC0+7IdNgjCxk9Mxpm79ljtoY9+EFY8u3n0LqLL7nFQZbUwxb 9GXxROZW+qB1qxR0qYK6HqT3dxmdetNg -----END CERTIFICATE-----Generated at Thu Jul 3 03:46:33 2025 by rpki-client