$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: 4dpI5qbCR4alaDrC21Ny9ttz3ZKZrVHyrgMghTahJIc= Subject key identifier: 43:03:0D:EA:09:6B:F6:09:A5:DC:42:D4:20:AE:F7:00:02:14:57:D6 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 0715 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0710 Signing time: Thu 10 Apr 2025 21:48:46 +0000 Manifest this update: Thu 10 Apr 2025 21:48:45 +0000 Manifest next update: Thu 17 Apr 2025 21:48:45 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: SgxC1yh0LXC13vtk1USu/M2vjh0C8+GdiOWz7nIrUoo=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 21:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1813 (0x715) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Apr 10 21:48:45 2025 GMT Not After : Apr 17 21:48:45 2025 GMT Subject: CN=67f83cbd-a1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:21:ae:47:ee:11:ee:44:f7:e1:08:9c:38: 28:b8:a7:d6:98:fc:61:29:d9:12:08:da:ff:4b:44: 3c:d3:55:bb:74:c6:a6:af:80:08:7c:cd:4f:01:86: f3:f4:78:2b:0a:df:65:f4:fb:72:08:d1:4b:9f:2c: e6:af:78:f6:be:fe:b0:d3:10:10:be:10:ed:ad:73: aa:5a:0c:01:79:2d:ae:dd:09:79:21:77:3b:4c:23: 33:61:19:e0:0f:7e:f0:a1:02:32:08:34:99:1c:05: 49:18:ec:ea:f9:61:e5:95:f2:a8:64:2f:7e:90:c9: 7e:91:c9:cd:cb:f9:93:03:17:51:45:6b:86:67:ab: e2:0b:88:57:be:3e:fa:d4:08:fa:11:df:d0:10:6e: da:00:a2:70:51:5d:5c:18:05:49:d5:98:8a:50:8c: 67:55:81:53:4f:25:93:1e:65:20:08:42:2d:a8:4c: 07:98:4f:66:ed:1a:fe:be:89:36:92:5e:f3:f7:0b: 72:94:c7:35:c7:da:9b:4e:df:b8:bb:ad:d0:4a:bd: 97:95:0b:6c:42:2d:42:2c:77:7c:12:b9:2b:3f:78: ad:bc:d3:39:07:ec:60:52:e7:57:46:79:f4:3c:44: 6b:a4:b7:60:48:1d:bd:1b:e4:54:16:26:f3:9b:40: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:03:0D:EA:09:6B:F6:09:A5:DC:42:D4:20:AE:F7:00:02:14:57:D6 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6b:7a:2e:68:31:f3:36:66:75:28:ad:6c:57:30:fc:53:b4: fe:18:89:0c:13:46:13:b5:26:0b:7e:a6:20:96:48:8f:f5:ca: 1e:39:54:6b:b1:31:af:ad:8d:26:c7:97:e5:c8:dc:40:a3:ab: ea:00:ad:b2:72:9a:e8:d2:95:af:5d:49:3a:ca:f8:7b:9a:0e: 7e:b3:5f:48:02:3a:5a:05:68:0b:12:e1:de:79:59:2d:13:5d: b6:42:78:8f:35:5a:c3:11:34:7b:af:a4:b9:58:60:40:d0:bd: df:94:eb:1c:8b:3a:15:e8:c1:2c:b8:f4:f2:c3:02:99:c0:d4: c8:24:bf:8f:09:17:56:71:e4:c6:12:60:04:f2:95:a1:5c:d5: f0:b1:fe:af:f5:34:12:f1:ea:2c:df:f1:57:99:0b:d3:dc:0d: fc:4a:89:32:7c:87:16:f8:c7:85:e9:d1:1f:ee:33:e3:b1:a0: b2:31:10:b1:b5:92:23:66:23:0a:e0:4a:32:3b:f4:3c:e9:30: 7a:8e:e0:94:70:d0:7c:39:d0:af:ce:14:66:19:df:f3:15:8e: 6a:67:fc:ef:ca:9e:07:c2:03:c4:e6:d9:30:b2:0b:bc:bf:7f: cc:9b:43:77:14:ee:1f:4f:d8:fa:ba:d4:b5:f2:8f:94:4e:99: f8:19:83:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwNDEwMjE0ODQ1WhcNMjUwNDE3MjE0ODQ1WjAYMRYwFAYD VQQDEw02N2Y4M2NiZC1hMWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0khrkfuEe5E9+EInDgouKfWmPxhKdkSCNr/S0Q801W7dMamr4AIfM1PAYbz 9HgrCt9l9PtyCNFLnyzmr3j2vv6w0xAQvhDtrXOqWgwBeS2u3Ql5IXc7TCMzYRng D37woQIyCDSZHAVJGOzq+WHllfKoZC9+kMl+kcnNy/mTAxdRRWuGZ6viC4hXvj76 1Aj6Ed/QEG7aAKJwUV1cGAVJ1ZiKUIxnVYFTTyWTHmUgCEItqEwHmE9m7Rr+vok2 kl7z9wtylMc1x9qbTt+4u63QSr2XlQtsQi1CLHd8ErkrP3itvNM5B+xgUudXRnn0 PERrpLdgSB29G+RUFibzm0BcUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMDDeoJ a/YJpdxC1CCu9wACFFfWMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0a3ouaDHzNmZ1KK1sVzD8U7T+GIkME0YTtSYLfqYglkiP9coeOVRr sTGvrY0mx5flyNxAo6vqAK2ycpro0pWvXUk6yvh7mg5+s19IAjpaBWgLEuHeeVkt E122QniPNVrDETR7r6S5WGBA0L3flOscizoV6MEsuPTywwKZwNTIJL+PCRdWceTG EmAE8pWhXNXwsf6v9TQS8eos3/FXmQvT3A38SokyfIcW+MeF6dEf7jPjsaCyMRCx tZIjZiMK4EoyO/Q86TB6juCUcNB8OdCvzhRmGd/zFY5qZ/zvyp4HwgPE5tkwsgu8 v3/Mm0N3FO4fT9j6utS18o+UTpn4GYMu -----END CERTIFICATE-----Generated at Sat Apr 12 14:50:36 2025 by rpki-client