$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: AevTCHW1F2KqWiy5+UH+FeA7CoovRKXuknrmHWuSTUQ= Subject key identifier: 19:22:2E:1B:52:9A:3A:50:8A:C6:92:50:0E:02:E0:6E:FD:E6:DE:1B Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 0780 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 077A Signing time: Tue 04 Nov 2025 21:39:50 +0000 Manifest this update: Tue 04 Nov 2025 21:39:49 +0000 Manifest next update: Tue 11 Nov 2025 21:39:49 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: 5K9nM5XE4MYWf4a/nCt1AVecxY7V6xMLr36qcYHAEDE=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: 1oTkQQCTVWfVOHdZtNZH2BhFNuE/kcLMf9xIB/q3J40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Nov 4 21:39:49 2025 GMT Not After : Nov 11 21:39:49 2025 GMT Subject: CN=690a72a6-eaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:3d:22:de:22:6e:70:31:4b:c4:fa:3c:b2: 30:19:83:f2:3c:16:f3:98:d7:44:a6:8c:7c:4c:ca: 9c:66:01:95:8e:3a:d8:4a:cd:04:89:65:ea:bb:0e: 29:df:7e:e3:cd:00:b6:6e:29:d6:9b:e2:04:27:63: b4:63:04:61:65:29:17:d4:33:1b:de:23:e8:b1:73: d1:79:48:65:39:38:e8:d9:eb:9f:05:49:2c:f2:85: 5d:2f:20:d6:71:c9:de:f5:af:3e:59:c6:a2:ec:83: 88:90:a6:ed:31:22:d1:88:bf:5d:76:91:45:63:e0: 13:fa:9d:67:ca:d3:1d:36:2f:4e:b7:ed:8d:bf:f5: 07:94:4c:b0:ae:73:d7:56:b7:22:1d:90:73:65:65: 45:84:3f:a9:4d:95:48:95:67:c3:f4:7e:ae:e9:92: 60:5a:1e:4a:c0:59:a9:a6:b2:b4:d0:8c:c3:4b:d2: 9f:0f:fe:c1:af:26:b3:d0:a1:db:df:0b:e2:a2:08: dd:25:18:eb:4d:82:49:35:3f:89:96:39:b7:36:c4: 4d:af:c2:cb:a7:1c:fd:5a:ee:68:20:de:6c:e5:17: ac:90:a9:eb:f2:84:8f:ca:0a:bb:45:ce:a9:e1:f3: 3d:49:c3:e0:f1:41:ce:97:94:39:48:ab:6c:9a:02: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:22:2E:1B:52:9A:3A:50:8A:C6:92:50:0E:02:E0:6E:FD:E6:DE:1B X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c0:cb:1c:ad:6b:6c:4a:ef:bd:15:49:f3:54:1d:22:f2:0a: fe:d9:a9:a4:46:f2:e1:22:de:8c:a3:d2:c4:97:11:ce:f2:50: d7:3f:8c:ad:09:78:84:e0:e0:97:e2:c4:ef:33:c6:d4:a6:3b: 01:2d:90:9c:64:cd:09:8e:cd:f1:a7:ca:ce:fa:40:b8:99:e8: 48:e7:a7:a6:8a:e5:00:1b:7f:27:a1:55:f7:4e:79:d8:da:ca: 44:a5:84:5a:04:80:47:8e:f5:2d:7b:c0:bb:55:25:91:96:27: 72:9b:9c:e6:0d:a3:59:c3:c5:9d:8c:61:c4:39:da:f8:ad:92: e9:8c:9d:a2:88:c1:e0:b1:3c:f1:9e:aa:da:66:06:51:13:fa: c0:6f:73:dc:b8:2d:9f:04:e6:10:7f:25:a8:b4:8d:35:7b:90: 68:d5:b5:97:b8:e7:f9:b1:60:89:f9:50:85:09:41:12:73:ab: 99:96:9e:26:be:c0:de:78:22:9d:d4:f9:89:9a:62:c0:4e:7c: 54:62:33:2b:56:94:db:f8:1d:69:65:e6:d6:2b:ff:e5:91:76: a8:42:9b:cd:3e:d0:e8:e6:66:ab:d9:ec:b5:ea:76:3d:79:95: 16:2d:f9:ad:4e:8c:9c:36:72:09:49:8b:23:00:9e:5f:49:8c: 5a:f6:5d:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUxMTA0MjEzOTQ5WhcNMjUxMTExMjEzOTQ5WjAYMRYwFAYD VQQDEw02OTBhNzJhNi1lYWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDE9It4ibnAxS8T6PLIwGYPyPBbzmNdEpox8TMqcZgGVjjrYSs0EiWXquw4p 337jzQC2binWm+IEJ2O0YwRhZSkX1DMb3iPosXPReUhlOTjo2eufBUks8oVdLyDW ccne9a8+Wcai7IOIkKbtMSLRiL9ddpFFY+AT+p1nytMdNi9Ot+2Nv/UHlEywrnPX VrciHZBzZWVFhD+pTZVIlWfD9H6u6ZJgWh5KwFmpprK00IzDS9KfD/7Bryaz0KHb 3wviogjdJRjrTYJJNT+Jljm3NsRNr8LLpxz9Wu5oIN5s5ReskKnr8oSPygq7Rc6p 4fM9ScPg8UHOl5Q5SKtsmgJ2WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkiLhtS mjpQisaSUA4C4G795t4bMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFwMscrWtsSu+9FUnzVB0i8gr+2amkRvLhIt6Mo9LElxHO8lDXP4yt CXiE4OCX4sTvM8bUpjsBLZCcZM0Jjs3xp8rO+kC4mehI56emiuUAG38noVX3TnnY 2spEpYRaBIBHjvUte8C7VSWRlidym5zmDaNZw8WdjGHEOdr4rZLpjJ2iiMHgsTzx nqraZgZRE/rAb3PcuC2fBOYQfyWotI01e5Bo1bWXuOf5sWCJ+VCFCUESc6uZlp4m vsDeeCKd1PmJmmLATnxUYjMrVpTb+B1pZebWK//lkXaoQpvNPtDo5mar2ey16nY9 eZUWLfmtToycNnIJSYsjAJ5fSYxa9l2t -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:09 2025 by rpki-client