$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft File: CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json) Hash identifier: osvvVdva2LETPK7yrrPB4v8zKsN0tMpijsLHvBfVlHw= Subject key identifier: D5:7F:27:CD:DE:71:CD:DF:1F:66:1C:E3:39:03:79:6C:B0:72:B3:93 Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 Certificate issuer: /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft Manifest number: 01B2 Signing time: Sun 11 May 2025 02:07:14 +0000 Manifest this update: Sun 11 May 2025 02:07:14 +0000 Manifest next update: Sun 18 May 2025 02:07:14 +0000 Files and hashes: 1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: WElw4qlQkYOm9niN76uw8t0ufM1SIlJ4FqY8Vn7NFIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3 Validity Not Before: May 11 02:07:14 2025 GMT Not After : May 18 02:07:14 2025 GMT Subject: CN=68200652-8220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a9:3f:61:5d:c8:af:a4:1f:b9:c0:91:a4:8b: ea:f4:60:69:67:35:78:ea:46:05:cc:06:bb:2e:d1: 67:fc:de:9c:54:f2:53:e4:38:47:7b:89:71:a5:a8: 6d:aa:6f:62:a8:f0:22:7d:ef:45:4d:e5:7d:57:c4: c5:f7:d7:5a:7a:d1:db:f3:e3:cc:3a:94:7c:60:8d: 30:af:f2:ac:c8:6a:0f:24:c4:d2:be:49:5d:fa:fc: dc:69:ec:ee:0f:92:32:ad:39:54:8c:e2:a7:7c:b0: 1a:e3:cd:e3:ef:1f:c1:f5:ba:9b:c7:c7:72:3b:6a: f2:1a:97:94:96:d6:2a:bd:5a:dd:b3:f3:81:b4:78: 60:f8:d4:ad:60:c0:65:c5:f1:6e:ce:bd:12:61:45: 00:03:09:81:0f:40:0a:99:cd:fa:f3:19:4e:b0:a5: 6f:c2:ef:25:52:1f:6f:71:5e:f6:d9:01:40:b8:a8: e0:df:ff:aa:2d:86:aa:4d:3a:0c:b9:13:e1:0c:4f: 2f:b8:ed:2e:4e:e7:f6:80:f0:50:b2:ce:ca:75:63: 8c:d4:c5:20:ae:59:33:8d:d8:27:4e:9d:e9:e0:63: a8:36:b3:53:bf:dc:83:3c:10:cc:ed:64:2e:81:90: 79:80:57:18:fd:fe:47:c5:5a:5d:89:cd:b7:9b:7f: 85:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7F:27:CD:DE:71:CD:DF:1F:66:1C:E3:39:03:79:6C:B0:72:B3:93 X509v3 Authority Key Identifier: keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:e4:4a:f9:a6:d1:68:32:6d:ec:d4:c0:af:a9:e2:3e:02:1f: 04:e3:ea:22:9c:57:f9:a7:46:68:81:a6:61:ea:f8:28:00:6b: ea:6a:78:5b:43:e3:a4:f1:77:e5:97:54:66:91:cf:f1:9f:4d: 90:b7:11:7d:34:73:81:aa:45:2b:10:07:b7:ec:58:b2:a5:0a: 28:02:43:4d:9e:b8:2b:69:2d:6f:f5:b1:59:0b:39:73:99:96: a7:24:5e:f8:ec:8a:bc:65:4b:fc:e2:46:78:67:4c:a8:c0:c8: 6d:23:e3:bc:d1:2e:28:99:c9:ea:20:3a:26:92:a5:44:ab:aa: ee:c5:d5:9f:4b:56:e0:92:5d:6d:47:67:eb:32:b5:f3:a8:60: 09:84:5e:d1:a0:e6:f2:0a:a9:84:d1:c6:47:2a:b2:ea:c8:54: f3:31:45:c0:b2:aa:fc:18:7f:d5:94:d7:39:92:be:10:53:f0: d1:06:c9:a6:04:0e:de:20:23:21:86:d5:da:d2:18:dc:84:ca: 51:53:be:82:1d:3f:d9:f2:af:17:0f:99:52:d3:f5:ca:52:9e: 7b:41:05:6f:91:e0:24:7e:ca:35:ab:2e:62:54:a7:8e:ee:44: ca:05:62:4a:91:a8:46:63:fa:ed:cc:63:f7:4c:da:21:a0:f1: fd:d4:0c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhBRjIxMTAvBgNVBAUTKDA4RUZBNTQyNjY1RTkzQUQ2RkI5MjEzNUE1RkQ1OTI0 NUZENUZBRTMwHhcNMjUwNTExMDIwNzE0WhcNMjUwNTE4MDIwNzE0WjAYMRYwFAYD VQQDEw02ODIwMDY1Mi04MjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Kk/YV3Ir6QfucCRpIvq9GBpZzV46kYFzAa7LtFn/N6cVPJT5DhHe4lxpaht qm9iqPAife9FTeV9V8TF99daetHb8+PMOpR8YI0wr/KsyGoPJMTSvkld+vzcaezu D5IyrTlUjOKnfLAa483j7x/B9bqbx8dyO2ryGpeUltYqvVrds/OBtHhg+NStYMBl xfFuzr0SYUUAAwmBD0AKmc368xlOsKVvwu8lUh9vcV722QFAuKjg3/+qLYaqTToM uRPhDE8vuO0uTuf2gPBQss7KdWOM1MUgrlkzjdgnTp3p4GOoNrNTv9yDPBDM7WQu gZB5gFcY/f5HxVpdic23m3+FAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNV/J83e cc3fH2Yc4zkDeWywcrOTMB8GA1UdIwQYMBaAFAjvpUJmXpOtb7khNaX9WSRf1frj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEFGMi9DN0U5RjQzQTkx MjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2MXZ1U0UxcGYxWkpGX1Yt dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPLWxRbVplazYxdnVTRTFwZjFaSkZfVi11TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEFGMi9DN0U5RjQzQTkxMjYxMUVEOUFFNjUyNzdDNEY5QUUwMi9DTy1sUW1aZWs2 MXZ1U0UxcGYxWkpGX1YtdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk5Er5ptFoMm3s1MCvqeI+Ah8E4+oinFf5p0ZogaZh6vgoAGvqanhb Q+Ok8Xfll1Rmkc/xn02QtxF9NHOBqkUrEAe37FiypQooAkNNnrgraS1v9bFZCzlz mZanJF747Iq8ZUv84kZ4Z0yowMhtI+O80S4omcnqIDomkqVEq6ruxdWfS1bgkl1t R2frMrXzqGAJhF7RoObyCqmE0cZHKrLqyFTzMUXAsqr8GH/VlNc5kr4QU/DRBsmm BA7eICMhhtXa0hjchMpRU76CHT/Z8q8XD5lS0/XKUp57QQVvkeAkfso1qy5iVKeO 7kTKBWJKkahGY/rtzGP3TNohoPH91Az6 -----END CERTIFICATE-----Generated at Mon May 12 17:47:34 2025 by rpki-client