$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: 5+LJLK9vYo/Fyemk6VUlv0n0vPnFL6UTJ5xJjG5fYpI= Subject key identifier: 7E:3B:8A:7B:C8:00:B8:15:BF:EB:2A:85:4A:01:80:43:94:61:56:F1 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 0778 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0772 Signing time: Sat 18 Oct 2025 22:57:09 +0000 Manifest this update: Sat 18 Oct 2025 22:57:09 +0000 Manifest next update: Sat 25 Oct 2025 22:57:09 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: MTc5cQnxTi86CgP9NbvX30b8Ekbi6A6L46Yt/EN4sKA=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: 1oTkQQCTVWfVOHdZtNZH2BhFNuE/kcLMf9xIB/q3J40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1912 (0x778) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Oct 18 22:57:09 2025 GMT Not After : Oct 25 22:57:09 2025 GMT Subject: CN=68f41b45-b443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:b0:1e:c4:30:f0:29:cf:f1:cd:d1:5c:9d:6d: 49:eb:18:1e:23:c0:65:da:64:56:6c:9a:d9:91:d3: 83:87:60:5f:c2:9f:94:65:c5:3f:6e:a5:62:45:08: 56:78:52:c5:92:72:76:27:84:51:54:6c:ef:6b:b9: e4:2d:c2:38:0a:8e:2d:8c:39:95:c6:2d:fe:ec:e2: 2b:4a:e4:a4:72:42:85:af:57:89:ad:4b:76:06:03: 51:02:38:b2:65:45:4c:88:04:b8:46:02:ca:31:69: 2e:f4:37:6f:97:80:97:05:52:9d:b9:1e:99:29:58: 1f:9f:07:f3:a3:43:9c:cf:68:ef:ba:be:75:7f:2a: b8:b5:72:80:e5:82:63:63:b9:3f:ef:d6:c7:78:1c: b9:72:09:2f:5d:27:52:6b:5a:aa:f2:90:76:3a:ce: d7:a1:c6:13:3d:b5:12:28:42:97:6f:89:df:db:29: 8b:6f:34:31:3c:af:72:98:0d:a2:84:a1:d3:81:76: 76:07:be:7e:db:71:b7:29:14:57:ba:87:42:4c:35: d1:7c:5f:30:70:f0:57:0c:83:1f:f5:4b:64:35:83: c4:16:54:5c:90:41:67:7d:6f:06:c7:80:e8:09:18: db:54:53:a1:08:c3:e4:0d:f8:5d:59:81:d4:aa:41: f0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3B:8A:7B:C8:00:B8:15:BF:EB:2A:85:4A:01:80:43:94:61:56:F1 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:80:f9:a2:be:80:5f:eb:1d:fc:67:7b:1f:49:af:c5:5c:95: 14:84:3e:4b:79:ad:5d:06:93:bc:be:f0:d3:0c:cb:dd:06:fb: 6e:5b:18:a8:b4:cf:16:d1:16:4c:6f:f1:ef:c9:6c:9a:8b:91: 08:1b:65:bd:17:cd:41:bc:55:30:00:1a:f8:b0:f9:84:d6:56: 38:20:1b:89:b5:3d:bf:12:9b:c1:af:25:1e:34:0c:3e:d2:d0: b3:7a:57:ee:71:52:ac:11:ca:ca:09:ef:06:31:55:36:53:7b: 07:3a:b9:03:aa:53:ba:14:cb:03:e8:01:59:55:80:45:d6:01: a4:c0:b6:24:fd:aa:6f:07:d6:1e:f2:5b:6b:18:0a:eb:b2:45: b0:1d:3c:9a:f0:c9:61:a7:ab:45:66:bf:ef:ed:3e:06:2e:ab: c9:47:fb:96:49:ae:a0:e8:3f:09:78:e4:56:70:92:00:fd:81: a8:b3:ef:42:40:c2:f6:d8:f2:ca:32:5e:c6:61:93:80:96:79: 32:7b:11:77:a6:c3:5d:df:ad:ce:1f:65:19:3f:e2:16:da:28: 62:df:08:f4:28:d8:8d:80:74:26:73:2f:bf:58:87:42:50:a4: f0:56:af:cd:ef:35:19:d0:12:81:19:8c:fe:57:89:f1:fb:ab: 5e:af:55:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUxMDE4MjI1NzA5WhcNMjUxMDI1MjI1NzA5WjAYMRYwFAYD VQQDEw02OGY0MWI0NS1iNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9bAexDDwKc/xzdFcnW1J6xgeI8Bl2mRWbJrZkdODh2Bfwp+UZcU/bqViRQhW eFLFknJ2J4RRVGzva7nkLcI4Co4tjDmVxi3+7OIrSuSkckKFr1eJrUt2BgNRAjiy ZUVMiAS4RgLKMWku9Ddvl4CXBVKduR6ZKVgfnwfzo0Ocz2jvur51fyq4tXKA5YJj Y7k/79bHeBy5cgkvXSdSa1qq8pB2Os7XocYTPbUSKEKXb4nf2ymLbzQxPK9ymA2i hKHTgXZ2B75+23G3KRRXuodCTDXRfF8wcPBXDIMf9UtkNYPEFlRckEFnfW8Gx4Do CRjbVFOhCMPkDfhdWYHUqkHwUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH47invI ALgVv+sqhUoBgEOUYVbxMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAgPmivoBf6x38Z3sfSa/FXJUUhD5Lea1dBpO8vvDTDMvdBvtuWxio tM8W0RZMb/HvyWyai5EIG2W9F81BvFUwABr4sPmE1lY4IBuJtT2/EpvBryUeNAw+ 0tCzelfucVKsEcrKCe8GMVU2U3sHOrkDqlO6FMsD6AFZVYBF1gGkwLYk/apvB9Ye 8ltrGArrskWwHTya8Mlhp6tFZr/v7T4GLqvJR/uWSa6g6D8JeORWcJIA/YGos+9C QML22PLKMl7GYZOAlnkyexF3psNd363OH2UZP+IW2ihi3wj0KNiNgHQmcy+/WIdC UKTwVq/N7zUZ0BKBGYz+V4nx+6ter1V/ -----END CERTIFICATE-----Generated at Mon Oct 20 14:37:12 2025 by rpki-client