$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: OwlcFn+dWiPnccMqvJU7DcI/WA6sk/MPh3WFbJCtCqo= Subject key identifier: 75:23:42:B8:60:77:39:53:70:68:5B:89:CE:FA:E8:9E:C4:96:D0:EE Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 0747 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0742 Signing time: Sun 20 Jul 2025 21:51:10 +0000 Manifest this update: Sun 20 Jul 2025 21:51:10 +0000 Manifest next update: Sun 27 Jul 2025 21:51:10 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: h8Z5mEWyxVsuzZNKmiYZkS7IHBFO1FyWMR8QB8EoLow=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1863 (0x747) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Jul 20 21:51:10 2025 GMT Not After : Jul 27 21:51:10 2025 GMT Subject: CN=687d64ce-d5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3b:12:9a:4b:51:09:c7:27:90:57:18:03:a6: c5:68:58:03:5d:b1:2c:06:34:c5:3d:2b:09:ce:9d: cf:bb:81:6d:fa:ba:95:0b:cf:92:c7:4f:d2:41:5a: 93:2e:2a:4a:af:aa:3d:9a:ae:45:1f:1c:83:6a:09: ca:d4:dd:45:13:a2:71:68:4a:93:b5:b4:28:a8:28: 55:be:af:06:ee:e2:d3:34:fe:71:e5:aa:15:1e:36: 82:6a:f5:45:33:42:15:e4:0f:43:03:bd:29:eb:9c: aa:b9:92:0d:93:58:e8:8a:7d:8c:12:4a:0e:d7:1f: f1:37:a2:e5:69:10:ab:6c:ac:a0:52:91:32:a1:6b: 4f:33:9b:91:07:62:58:4c:5c:2d:c6:02:1b:5a:53: 72:76:e5:bb:3d:9a:ed:cb:0f:30:f7:9c:30:86:84: 15:73:a7:78:42:5f:7e:db:60:d6:eb:f4:31:db:d6: 0a:c1:0f:02:13:84:a1:20:4d:b9:8f:ad:7f:f3:bd: 2c:c9:2c:50:6f:5a:50:a8:10:ab:e1:1b:a2:45:53: 2e:d5:f7:c7:eb:ad:f0:45:8c:f8:0a:4c:8d:b0:6a: 70:7c:b8:3f:b7:dc:be:29:05:29:45:ef:78:1e:d9: c2:77:10:86:2d:af:be:2f:34:a0:fc:1a:56:3a:1f: b5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:23:42:B8:60:77:39:53:70:68:5B:89:CE:FA:E8:9E:C4:96:D0:EE X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:82:64:59:ea:14:38:47:02:3f:bb:5f:a7:ae:0b:82:28: 2b:08:56:1e:8b:1b:aa:85:d5:f7:57:8c:93:cc:e5:bf:56:1c: 77:1d:ca:4d:9a:42:09:ae:21:dc:73:10:32:76:e2:54:ea:45: 8d:0c:8f:07:0c:40:0e:a8:33:f6:b3:6b:75:4c:26:14:82:b8: 90:b2:c9:40:89:24:0c:71:24:33:15:7d:5a:71:bc:1e:07:ab: 3e:c8:4c:09:27:3e:a5:31:44:ac:9b:9e:25:12:3f:16:29:e8: c2:1e:4e:23:c6:c3:8e:c4:6e:1f:9c:f0:08:57:5c:e8:52:b6: b5:62:28:e1:7d:f3:74:9c:1d:2d:12:a4:24:d6:c0:4b:dc:ea: 2b:ab:47:cc:73:46:4b:55:d6:a2:b9:c5:2d:c2:e9:98:b7:45: fe:c5:a7:96:7e:10:20:e7:18:c7:4c:74:c7:c3:18:9b:50:52: c6:30:b4:5d:26:72:97:f6:9b:2f:a9:8e:ea:39:f4:0f:2b:5f: 03:57:95:79:9c:ac:b8:f1:bd:cf:98:83:67:57:2b:85:ec:59: ef:00:1f:4c:e6:23:ee:4b:f1:14:a7:61:9f:42:b9:b6:a5:9c: ae:91:2e:35:74:8c:3f:6c:01:14:fe:49:5f:74:ff:b6:29:cd: 1b:b1:c6:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwNzIwMjE1MTEwWhcNMjUwNzI3MjE1MTEwWjAYMRYwFAYD VQQDEw02ODdkNjRjZS1kNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjsSmktRCccnkFcYA6bFaFgDXbEsBjTFPSsJzp3Pu4Ft+rqVC8+Sx0/SQVqT LipKr6o9mq5FHxyDagnK1N1FE6JxaEqTtbQoqChVvq8G7uLTNP5x5aoVHjaCavVF M0IV5A9DA70p65yquZINk1join2MEkoO1x/xN6LlaRCrbKygUpEyoWtPM5uRB2JY TFwtxgIbWlNyduW7PZrtyw8w95wwhoQVc6d4Ql9+22DW6/Qx29YKwQ8CE4ShIE25 j61/870sySxQb1pQqBCr4RuiRVMu1ffH663wRYz4CkyNsGpwfLg/t9y+KQUpRe94 HtnCdxCGLa++LzSg/BpWOh+1TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUjQrhg dzlTcGhbic766J7EltDuMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdeoJkWeoUOEcCP7tfp64LgigrCFYeixuqhdX3V4yTzOW/Vhx3HcpN mkIJriHccxAyduJU6kWNDI8HDEAOqDP2s2t1TCYUgriQsslAiSQMcSQzFX1acbwe B6s+yEwJJz6lMUSsm54lEj8WKejCHk4jxsOOxG4fnPAIV1zoUra1YijhffN0nB0t EqQk1sBL3Oorq0fMc0ZLVdaiucUtwumYt0X+xaeWfhAg5xjHTHTHwxibUFLGMLRd JnKX9psvqY7qOfQPK18DV5V5nKy48b3PmINnVyuF7FnvAB9M5iPuS/EUp2GfQrm2 pZyukS41dIw/bAEU/klfdP+2Kc0bscbe -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:58 2025 by rpki-client