$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: qFz9NnDGZt6RIWf8rG3IlfNlDM0We8Ht0/lmiA1Kp6A= Subject key identifier: 5E:40:48:0F:43:76:65:A7:0A:9D:F8:1B:28:BA:02:52:7C:D4:25:FF Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 0731 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 0726 Signing time: Sat 26 Apr 2025 21:31:05 +0000 Manifest this update: Sat 26 Apr 2025 21:31:05 +0000 Manifest next update: Sat 03 May 2025 21:31:05 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: hEdsQZp4sYV/6QdFkub8Rx1qnDuq3WgKBZBoY5N0TBM=) 2: 539B27DEF87611EF8366B718C4F9AE02.roa (hash: 1nDM0peqDWmAV340563WsURkfernH1Bm63lk2+LpiqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1841 (0x731) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Apr 26 21:31:05 2025 GMT Not After : May 3 21:31:05 2025 GMT Subject: CN=680d5099-e971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:63:60:b5:5d:ef:f5:dc:aa:db:61:a7:a5:50: 86:00:d4:6f:da:3b:84:66:0d:09:66:a6:0d:15:12: ee:a1:54:16:98:b6:ab:80:e1:c5:dd:b3:6d:f1:c6: eb:21:5f:e2:7a:79:16:c1:ca:44:dd:12:6f:70:21: 9e:6f:a0:14:a2:74:24:f5:cc:38:af:97:63:ed:8b: 9c:40:49:80:96:89:ac:96:bb:b3:0f:b0:39:44:be: 05:f6:ac:fe:30:0f:23:03:4b:e7:e4:4f:6b:30:f9: 6e:d0:1f:7d:ef:53:93:4a:43:5c:77:04:b9:33:ab: 7b:1e:e8:49:a8:a7:ab:4e:56:31:9f:50:ca:c3:6f: 5f:ff:1b:ae:bf:c1:cd:27:64:cd:7c:8e:be:a5:97: b0:bf:0c:ee:c9:46:57:99:2b:40:96:96:20:4c:bb: 93:2b:ff:d9:41:0f:e6:c6:d2:be:08:93:bb:b9:ed: 56:ff:f2:65:b5:12:ee:90:f1:2f:0a:d8:01:71:56: 97:e6:e8:66:35:c8:94:dc:f5:4b:f3:d0:6b:17:09: 23:b2:4a:bb:39:d6:42:41:dc:77:e6:8b:04:2e:07: 86:18:90:c7:e6:33:1b:59:92:30:cf:11:0f:69:41: e7:32:6f:43:9c:d4:e7:69:0f:0a:32:cc:c8:f7:17: ba:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:40:48:0F:43:76:65:A7:0A:9D:F8:1B:28:BA:02:52:7C:D4:25:FF X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:7b:67:e2:01:1d:62:a2:6e:bf:6b:68:b3:1d:69:8e:f3:5b: 3e:8c:3f:6c:29:14:9b:06:97:17:b3:dc:1b:ed:df:a9:cc:d5: e8:45:61:35:2e:01:81:40:23:73:fb:31:ae:7b:00:0b:4b:5c: 13:a3:a1:f8:5b:05:f8:25:8a:a8:b4:78:3c:95:e3:56:ae:e9: 5c:d3:7f:bf:bd:1f:f6:ac:c0:0d:99:17:cb:bd:98:35:65:8b: 7c:65:2d:59:cf:e5:3e:f7:6c:93:48:21:ed:ba:58:4b:94:f0: 44:e0:40:ff:fd:ca:63:bd:3c:4e:10:c1:f8:1c:e4:a7:a4:e0: 40:5a:6f:58:df:d8:13:db:a8:9c:1a:36:19:ab:68:6d:0d:b6: d3:d7:3c:9c:e0:58:8a:af:26:e7:6a:5b:18:7e:47:c4:74:bf: 0e:ea:34:65:af:7d:49:fc:ad:65:c2:a2:61:ab:c8:f0:c5:a4: 9e:d4:b8:45:be:f5:d4:89:00:8c:b1:45:6d:31:6d:51:f8:f0: e6:a4:1c:c7:18:75:fa:37:c2:39:40:d8:8b:a8:5e:63:45:b6: 86:dd:00:1c:3a:00:f1:05:a7:33:03:ff:4f:53:ac:54:79:67: 0e:c6:da:4b:56:6e:d9:72:81:65:a3:40:01:5b:a9:49:73:a8: ac:05:08:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUwNDI2MjEzMTA1WhcNMjUwNTAzMjEzMTA1WjAYMRYwFAYD VQQDEw02ODBkNTA5OS1lOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42NgtV3v9dyq22GnpVCGANRv2juEZg0JZqYNFRLuoVQWmLargOHF3bNt8cbr IV/ienkWwcpE3RJvcCGeb6AUonQk9cw4r5dj7YucQEmAlomslruzD7A5RL4F9qz+ MA8jA0vn5E9rMPlu0B9971OTSkNcdwS5M6t7HuhJqKerTlYxn1DKw29f/xuuv8HN J2TNfI6+pZewvwzuyUZXmStAlpYgTLuTK//ZQQ/mxtK+CJO7ue1W//JltRLukPEv CtgBcVaX5uhmNciU3PVL89BrFwkjskq7OdZCQdx35osELgeGGJDH5jMbWZIwzxEP aUHnMm9DnNTnaQ8KMszI9xe6dwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5ASA9D dmWnCp34Gyi6AlJ81CX/MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCie2fiAR1iom6/a2izHWmO81s+jD9sKRSbBpcXs9wb7d+pzNXoRWE1 LgGBQCNz+zGuewALS1wTo6H4WwX4JYqotHg8leNWrulc03+/vR/2rMANmRfLvZg1 ZYt8ZS1Zz+U+92yTSCHtulhLlPBE4ED//cpjvTxOEMH4HOSnpOBAWm9Y39gT26ic GjYZq2htDbbT1zyc4FiKrybnalsYfkfEdL8O6jRlr31J/K1lwqJhq8jwxaSe1LhF vvXUiQCMsUVtMW1R+PDmpBzHGHX6N8I5QNiLqF5jRbaG3QAcOgDxBaczA/9PU6xU eWcOxtpLVm7ZcoFlo0ABW6lJc6isBQgM -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:10 2025 by rpki-client on console.sobornost.net