$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: o7bePcFA4PX+BTxyIFOK3S0TglWM5gLYf41m2S5i7VY= Subject key identifier: C1:19:02:0D:1B:CD:F8:17:B9:0D:ED:E7:E2:47:FD:4C:8D:0C:90:44 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0737 Signing time: Sat 28 Jun 2025 21:23:37 +0000 Manifest this update: Sat 28 Jun 2025 21:23:36 +0000 Manifest next update: Sat 05 Jul 2025 21:23:36 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: JtZyQ/DITCSkxnEVUVgXE2ewDp4O0PAABr82Mp5GyvY=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Jun 28 21:23:36 2025 GMT Not After : Jul 5 21:23:36 2025 GMT Subject: CN=68605d58-c387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:19:ef:6d:0f:21:9b:3e:62:52:59:53:51:ea: 6f:28:56:68:44:17:7c:4d:92:6a:c0:eb:f2:bd:0f: 00:35:36:4f:9b:12:fd:72:b1:6c:71:70:9d:e8:a3: 13:6a:db:50:60:c8:5f:db:ee:0f:3a:08:f0:22:c5: 83:f6:79:15:ea:3a:09:af:1b:0b:d3:09:36:cc:75: f6:92:fb:cc:2f:10:50:cd:8b:ff:93:bb:92:30:64: 34:1e:9b:01:56:7e:b2:8b:2a:50:40:05:a9:c8:d3: d5:16:b1:61:d1:76:d7:fc:58:e2:54:cd:93:e2:60: 68:e6:59:0a:25:fe:e9:7f:77:ce:97:d8:92:c8:e1: af:da:bf:08:ad:41:2c:57:cb:d1:59:92:62:61:30: fe:92:95:16:50:c2:b8:4c:42:16:e7:c8:86:60:21: 40:cf:fe:47:2e:af:5b:df:2e:00:35:bf:87:67:13: f4:83:58:b1:11:1a:db:f3:04:0b:69:c4:d0:68:bb: 15:7f:f3:fb:cb:c9:93:3e:12:ff:86:02:79:55:c7: 41:5d:af:2e:29:db:b8:80:68:ad:c0:e1:80:c3:f1: d3:74:27:1b:9d:c6:20:c4:09:ae:6e:97:02:c2:7f: ef:ba:56:ab:e4:90:75:90:d2:79:58:df:ec:9c:59: 72:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:19:02:0D:1B:CD:F8:17:B9:0D:ED:E7:E2:47:FD:4C:8D:0C:90:44 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7d:1e:42:8e:1b:94:82:00:41:e7:08:21:70:88:8f:76:a4: e0:2a:f3:76:fa:f1:c6:a0:ff:f4:62:41:92:b6:34:3a:53:91: 74:aa:1d:1f:aa:bb:7e:56:74:75:60:8d:1d:dd:f2:0c:0c:0d: b7:52:9a:b6:f1:ef:10:29:17:9a:bd:62:d2:ea:0e:e4:db:be: 22:b9:2e:a5:9f:08:3a:cd:54:e4:59:06:c2:02:36:64:de:78: 05:12:33:42:7c:89:4c:99:33:f8:ab:f9:4a:1f:0d:06:2e:77: 55:80:b7:03:6a:bb:c6:de:7d:a2:94:be:0b:80:63:34:d1:e2: b4:7a:4c:4d:e7:4e:d5:8c:87:bf:32:c8:a8:4d:b0:36:40:6c: 22:49:29:67:f6:b5:cb:97:2c:e5:ea:6b:fe:10:ae:ed:68:c3: ca:d9:8f:61:db:58:17:1d:7d:03:58:74:e4:bb:29:59:ad:ca: d5:52:8c:f4:e6:12:a3:c7:80:94:6c:31:a8:85:c8:5a:85:31: f6:d5:1b:16:13:d2:96:aa:36:f5:ed:01:90:46:c4:0f:5b:ab: 3e:87:18:c9:9c:4c:08:a4:ec:8b:32:67:32:e6:4d:1c:68:3e: 15:6f:c4:97:81:c2:43:ca:cb:9c:84:74:7e:07:e4:5e:7b:5f: 5f:12:fc:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwNjI4MjEyMzM2WhcNMjUwNzA1MjEyMzM2WjAYMRYwFAYD VQQDEw02ODYwNWQ1OC1jMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBnvbQ8hmz5iUllTUepvKFZoRBd8TZJqwOvyvQ8ANTZPmxL9crFscXCd6KMT attQYMhf2+4POgjwIsWD9nkV6joJrxsL0wk2zHX2kvvMLxBQzYv/k7uSMGQ0HpsB Vn6yiypQQAWpyNPVFrFh0XbX/FjiVM2T4mBo5lkKJf7pf3fOl9iSyOGv2r8IrUEs V8vRWZJiYTD+kpUWUMK4TEIW58iGYCFAz/5HLq9b3y4ANb+HZxP0g1ixERrb8wQL acTQaLsVf/P7y8mTPhL/hgJ5VcdBXa8uKdu4gGitwOGAw/HTdCcbncYgxAmubpcC wn/vular5JB1kNJ5WN/snFly6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMEZAg0b zfgXuQ3t5+JH/UyNDJBEMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjfR5CjhuUggBB5wghcIiPdqTgKvN2+vHGoP/0YkGStjQ6U5F0qh0f qrt+VnR1YI0d3fIMDA23Upq28e8QKReavWLS6g7k274iuS6lnwg6zVTkWQbCAjZk 3ngFEjNCfIlMmTP4q/lKHw0GLndVgLcDarvG3n2ilL4LgGM00eK0ekxN507VjIe/ MsioTbA2QGwiSSln9rXLlyzl6mv+EK7taMPK2Y9h21gXHX0DWHTkuylZrcrVUoz0 5hKjx4CUbDGohchahTH21RsWE9KWqjb17QGQRsQPW6s+hxjJnEwIpOyLMmcy5k0c aD4Vb8SXgcJDysuchHR+B+Ree19fEvwL -----END CERTIFICATE-----Generated at Sun Jun 29 15:54:09 2025 by rpki-client