$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft File: coqCQJLldBJUu5LVl3IzYaBL8pI.mft (raw, json) Hash identifier: NBJrliMKHKA0UkWe13FzxvjpkZhqvfHHZxPynvSYZ7c= Subject key identifier: 05:B5:2B:BB:2A:EE:40:25:AA:D7:34:E9:7C:CB:46:E0:75:3A:92:21 Authority key identifier: 72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 Certificate issuer: /CN=A91F1B61/serialNumber=728A824092E5741254BB92D597723361A04BF292 Certificate serial: 0CFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft Manifest number: 0CED Signing time: Sat 10 May 2025 17:56:36 +0000 Manifest this update: Sat 10 May 2025 17:56:35 +0000 Manifest next update: Sat 17 May 2025 17:56:35 +0000 Files and hashes: 1: coqCQJLldBJUu5LVl3IzYaBL8pI.crl (hash: 2LZ3esXyUfWC1tMHSQXDAT3SSC6fqksukjPPLmvssmw=) 2: 08CA5724E2B111E9A73CAB51C4F9AE02.roa (hash: hxOmPvPOn5zrLZ2ksvGMh7mEDCQIxMBDMGA2oTUGfDw=) 3: 9D85178EE2AF11E9919C1D4EC4F9AE02.roa (hash: tvGwHBxAQqNeN4uZum6IC7hhXyOo5oDfO91MYyuJgHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3322 (0xcfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1B61, serialNumber=728A824092E5741254BB92D597723361A04BF292 Validity Not Before: May 10 17:56:35 2025 GMT Not After : May 17 17:56:35 2025 GMT Subject: CN=681f9353-abb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:70:03:16:99:40:81:1e:4c:79:78:de:9f:9e: b2:8c:fd:77:62:2e:58:d9:27:d4:72:f4:5f:e9:19: af:76:71:ca:d5:d5:b0:8c:30:a9:a5:7e:ff:d7:58: 61:7a:72:37:36:f0:4b:bb:7b:48:ce:65:e3:47:58: 64:b4:25:a7:be:63:3d:31:b6:f4:df:30:7d:96:f0: 96:74:23:aa:a6:04:4c:5c:f3:27:86:d2:77:e5:db: c0:c0:02:8f:b6:5b:ae:4b:e6:65:03:88:e1:11:f6: 86:b5:12:91:60:a9:71:26:33:12:c7:99:a6:39:e1: ff:83:4d:4a:a5:a9:a4:cc:6c:e6:65:a6:47:e7:83: 5f:a5:40:82:89:63:50:3e:7c:30:4b:52:ec:da:59: b4:f8:d8:ef:b3:56:8e:80:2f:9e:f2:c9:a5:61:e0: 31:50:e1:4a:2b:b4:44:1f:9d:9a:49:6c:66:9e:0f: dc:b0:cf:a3:27:6c:8e:d4:83:1f:3c:fe:57:58:4d: 46:9e:84:fb:4a:11:76:1a:4f:29:1a:8c:6e:83:3d: 2a:8f:fb:70:e3:b6:23:d6:7e:1e:35:8e:9e:7b:7e: c0:91:44:56:7c:ec:52:91:b1:91:f7:fe:38:7d:5c: 2d:8b:2d:cb:0a:77:cf:bf:7f:36:16:dd:da:cd:b6: f5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B5:2B:BB:2A:EE:40:25:AA:D7:34:E9:7C:CB:46:E0:75:3A:92:21 X509v3 Authority Key Identifier: keyid:72:8A:82:40:92:E5:74:12:54:BB:92:D5:97:72:33:61:A0:4B:F2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/coqCQJLldBJUu5LVl3IzYaBL8pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1B61/3F00D75CE2AF11E9BB01FC4DC4F9AE02/coqCQJLldBJUu5LVl3IzYaBL8pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b6:f7:f6:56:ea:b5:51:5d:07:ac:58:13:c7:e3:46:ac:20: 65:e3:2e:d4:fd:d6:e8:74:53:9a:1e:7b:6d:b1:36:8e:49:96: fa:11:69:ca:a6:25:85:15:19:3a:75:b6:9c:15:f7:8c:bf:33: 54:80:aa:f8:b9:a4:b0:33:14:5e:df:2a:fb:6d:a0:aa:59:22: f6:4f:9f:a9:57:18:ab:46:19:ce:c9:7a:2d:56:d7:e6:2d:f9: 35:01:01:9a:7c:6d:42:a0:84:c3:80:81:82:13:49:8e:eb:2c: d8:94:3f:f3:f4:3e:9a:77:81:46:84:3d:09:38:77:65:32:4b: fd:a3:79:13:16:30:a5:35:f4:05:42:d2:95:b3:f8:bf:e0:ea: 18:e6:e5:c2:76:cd:85:03:15:5e:b8:b6:a9:35:38:80:7e:fe: 88:c2:52:f6:71:c0:75:c7:56:88:c2:e6:ce:2a:9b:2a:a9:8b: ed:74:2c:c6:e4:2a:6f:15:02:3d:50:9c:1d:61:da:f6:d4:50: ba:40:0c:4b:8a:80:dc:ed:b6:11:b6:b3:cd:41:60:fb:aa:8e: 62:d5:f1:26:c7:a2:eb:95:66:5f:82:eb:eb:5c:09:b9:1d:18: 82:3e:59:ed:c8:8e:1e:ad:b7:ae:8c:47:29:ab:f6:64:de:a1: cd:bc:96:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFCNjExMTAvBgNVBAUTKDcyOEE4MjQwOTJFNTc0MTI1NEJCOTJENTk3NzIzMzYx QTA0QkYyOTIwHhcNMjUwNTEwMTc1NjM1WhcNMjUwNTE3MTc1NjM1WjAYMRYwFAYD VQQDEw02ODFmOTM1My1hYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13ADFplAgR5MeXjen56yjP13Yi5Y2SfUcvRf6RmvdnHK1dWwjDCppX7/11hh enI3NvBLu3tIzmXjR1hktCWnvmM9Mbb03zB9lvCWdCOqpgRMXPMnhtJ35dvAwAKP tluuS+ZlA4jhEfaGtRKRYKlxJjMSx5mmOeH/g01KpamkzGzmZaZH54NfpUCCiWNQ PnwwS1Ls2lm0+Njvs1aOgC+e8smlYeAxUOFKK7REH52aSWxmng/csM+jJ2yO1IMf PP5XWE1GnoT7ShF2Gk8pGoxugz0qj/tw47Yj1n4eNY6ee37AkURWfOxSkbGR9/44 fVwtiy3LCnfPv382Ft3azbb1aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAW1K7sq 7kAlqtc06XzLRuB1OpIhMB8GA1UdIwQYMBaAFHKKgkCS5XQSVLuS1ZdyM2GgS/KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUI2MS8zRjAwRDc1Q0Uy QUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRCSlV1NUxWbDNJellhQkw4 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NvcUNRSkxsZEJKVXU1TFZsM0l6WWFCTDhwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUI2MS8zRjAwRDc1Q0UyQUYxMUU5QkIwMUZDNERDNEY5QUUwMi9jb3FDUUpMbGRC SlV1NUxWbDNJellhQkw4cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAftvf2Vuq1UV0HrFgTx+NGrCBl4y7U/dbodFOaHnttsTaOSZb6EWnK piWFFRk6dbacFfeMvzNUgKr4uaSwMxRe3yr7baCqWSL2T5+pVxirRhnOyXotVtfm Lfk1AQGafG1CoITDgIGCE0mO6yzYlD/z9D6ad4FGhD0JOHdlMkv9o3kTFjClNfQF QtKVs/i/4OoY5uXCds2FAxVeuLapNTiAfv6IwlL2ccB1x1aIwubOKpsqqYvtdCzG 5CpvFQI9UJwdYdr21FC6QAxLioDc7bYRtrPNQWD7qo5i1fEmx6LrlWZfguvrXAm5 HRiCPlntyI4erbeujEcpq/Zk3qHNvJbl -----END CERTIFICATE-----Generated at Sun May 11 15:23:28 2025 by rpki-client