$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: K6WTq1Jxl4ZDfymqoxIWXX/ad47SS+TXwgstM/JNncw= Subject key identifier: 4E:D1:93:62:64:57:1C:25:DF:A3:C4:39:86:03:B9:80:99:04:8C:66 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 0758 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0753 Signing time: Fri 22 Aug 2025 21:49:32 +0000 Manifest this update: Fri 22 Aug 2025 21:49:31 +0000 Manifest next update: Fri 29 Aug 2025 21:49:31 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: 61OU3EkHoqLeEXVTl1hEVNRu8iRYdN848/5AhpaXK4E=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1880 (0x758) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Aug 22 21:49:31 2025 GMT Not After : Aug 29 21:49:31 2025 GMT Subject: CN=68a8e5ec-aa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:c5:bd:21:d0:df:5f:fd:b4:b4:dc:39:4d: 4f:22:42:bd:b3:b8:bb:df:c6:7f:42:1f:39:e9:9e: 49:e9:97:5f:cb:f8:1b:ca:0b:06:a2:e1:e3:ce:17: c1:db:af:41:9f:36:15:97:d8:6e:27:57:1d:e1:43: 4d:f2:a8:04:cc:bf:c3:e0:11:8a:44:fd:96:8b:3b: 38:f9:4b:e3:8b:7a:42:ce:d8:ac:9c:2d:b2:19:8d: 3f:ad:b0:bc:06:97:03:52:dd:85:1f:c5:8f:05:77: 42:e4:71:28:21:ae:b7:10:9d:fa:7d:2b:87:5f:19: f5:4e:e1:e9:69:8e:fb:f2:23:53:d5:d3:c3:20:3f: 95:9d:52:36:8b:5e:c1:db:fc:ab:00:12:fd:4d:73: a7:73:b4:8d:41:e5:a7:1f:a6:53:59:68:3b:41:2b: 3f:3e:8d:22:82:27:33:97:67:05:43:80:05:2e:1e: 14:89:42:c0:ad:58:16:4a:a7:72:db:54:8e:f1:51: d9:24:f4:c0:e5:a8:1f:d7:a6:48:93:6d:0c:fa:b7: 27:f3:71:cd:18:fb:3d:51:8f:2d:5f:77:b0:36:9c: 15:88:ac:b2:fb:b6:cd:2c:d9:ea:6a:b1:7f:67:85: 18:62:d2:47:66:89:76:f4:cd:fe:bd:8f:5e:98:ef: 10:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D1:93:62:64:57:1C:25:DF:A3:C4:39:86:03:B9:80:99:04:8C:66 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:04:04:e0:59:1e:fc:5f:0e:83:fc:7f:cd:77:e2:0e:3e:ae: f7:8b:ca:d8:43:db:99:a1:32:67:6a:1e:bd:94:34:4a:1f:9c: 4f:7d:77:19:7e:ff:8a:e8:de:c7:6f:b4:02:02:3b:bc:31:7a: 7c:7a:ab:4e:15:6b:89:7b:f5:26:b1:0e:0b:f4:b4:df:e5:e0: eb:20:8e:aa:8c:f7:43:8a:7b:46:23:c4:dd:ea:50:14:75:5c: 16:6e:d9:81:79:91:a5:4d:6c:e1:4c:89:62:93:ea:ca:e5:d0: cc:18:79:c2:26:1d:69:e2:31:37:21:c3:43:1c:18:27:2b:38: 03:8e:f8:13:f9:2c:f7:6d:f5:01:50:a0:9e:4a:54:e1:96:fa: f0:50:6c:06:4a:e7:49:f3:9b:7b:bf:21:12:0d:7f:6f:6e:f4: a3:c6:2e:35:9f:5a:4c:e8:92:e5:c9:b8:6b:a4:da:5e:32:73: 26:b5:d4:5d:f0:e0:c3:8b:85:e5:83:d1:1e:c9:55:6a:bd:25: 40:72:b0:9a:12:68:d0:c4:e2:fd:9f:c8:bc:6e:26:02:39:c0: cc:3c:86:c7:f2:76:6b:df:a5:a2:7f:8d:64:8c:55:5b:02:5b: b9:d8:82:b0:cd:c5:a2:86:0f:32:9b:cd:48:f1:e6:7a:76:10: cd:41:a6:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwODIyMjE0OTMxWhcNMjUwODI5MjE0OTMxWjAYMRYwFAYD VQQDEw02OGE4ZTVlYy1hYTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nzFvSHQ31/9tLTcOU1PIkK9s7i738Z/Qh856Z5J6Zdfy/gbygsGouHjzhfB 269BnzYVl9huJ1cd4UNN8qgEzL/D4BGKRP2Wizs4+Uvji3pCztisnC2yGY0/rbC8 BpcDUt2FH8WPBXdC5HEoIa63EJ36fSuHXxn1TuHpaY778iNT1dPDID+VnVI2i17B 2/yrABL9TXOnc7SNQeWnH6ZTWWg7QSs/Po0igiczl2cFQ4AFLh4UiULArVgWSqdy 21SO8VHZJPTA5agf16ZIk20M+rcn83HNGPs9UY8tX3ewNpwViKyy+7bNLNnqarF/ Z4UYYtJHZol29M3+vY9emO8QgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7Rk2Jk Vxwl36PEOYYDuYCZBIxmMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsBATgWR78Xw6D/H/Nd+IOPq73i8rYQ9uZoTJnah69lDRKH5xPfXcZ fv+K6N7Hb7QCAju8MXp8eqtOFWuJe/UmsQ4L9LTf5eDrII6qjPdDintGI8Td6lAU dVwWbtmBeZGlTWzhTIlik+rK5dDMGHnCJh1p4jE3IcNDHBgnKzgDjvgT+Sz3bfUB UKCeSlThlvrwUGwGSudJ85t7vyESDX9vbvSjxi41n1pM6JLlybhrpNpeMnMmtdRd 8ODDi4Xlg9EeyVVqvSVAcrCaEmjQxOL9n8i8biYCOcDMPIbH8nZr36Wif41kjFVb Alu52IKwzcWihg8ym81I8eZ6dhDNQabd -----END CERTIFICATE-----Generated at Sat Aug 23 15:33:13 2025 by rpki-client