$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: oi5dOYFHD4VmoP5jyCktV/oOQmF0StHB2VJ9P8g0Eug= Subject key identifier: 7F:89:F3:3F:E9:C0:C7:F2:4B:CE:D4:1E:3C:53:20:A3:54:9A:21:AE Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 071C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0717 Signing time: Thu 24 Apr 2025 21:40:02 +0000 Manifest this update: Thu 24 Apr 2025 21:40:01 +0000 Manifest next update: Thu 01 May 2025 21:40:01 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: pHbOIgB1sBRhi5Xus+wTx/NDm+BFDjeeERv0NS7KYoc=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1820 (0x71c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Apr 24 21:40:01 2025 GMT Not After : May 1 21:40:01 2025 GMT Subject: CN=680aafb1-426f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:85:33:c7:02:ea:76:d5:00:d1:75:8a:a4:d5: 94:9f:81:58:63:4f:b5:d2:c8:2d:59:99:8e:0e:7b: d0:8d:25:a1:7f:f6:fa:9a:22:49:33:e9:cc:9e:64: 1f:11:12:84:4f:80:02:e6:a9:46:cb:85:00:10:07: e0:07:b9:0d:69:ba:25:b9:dc:d2:a4:e8:91:92:00: b5:4a:4f:65:78:cb:22:5d:cb:d7:bf:31:52:ba:1a: 59:8d:48:8f:da:b9:43:8d:1e:90:b1:b4:10:66:04: 29:6d:98:f0:aa:0f:6a:3a:29:47:93:bf:9d:7a:b7: 53:aa:5f:8a:c8:2b:af:4f:62:7f:ca:e1:2f:e6:1d: de:98:80:55:0a:d2:42:31:bb:a7:6d:fb:d3:85:a5: 93:56:b6:c5:b9:7e:e4:6f:61:79:25:9f:1e:55:ae: c7:21:f6:fc:b9:e8:b7:78:cf:59:49:d7:56:38:1c: 18:a1:79:9a:c8:0a:03:36:87:be:32:0e:ab:21:31: 24:ff:04:74:0a:2b:66:27:cf:6d:43:9a:ba:25:6e: c7:e2:02:89:ca:b0:f0:6f:29:4d:c6:2b:96:ff:3a: f2:c5:60:39:5d:80:0b:45:2c:dc:52:70:3a:c3:55: 85:fc:81:d4:bc:11:fc:fc:6b:a3:45:49:61:46:1e: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:89:F3:3F:E9:C0:C7:F2:4B:CE:D4:1E:3C:53:20:A3:54:9A:21:AE X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ae:5b:72:63:4f:a7:4c:2e:9e:17:54:c6:da:6b:4d:72:e1: 42:ca:ce:06:99:60:ea:13:75:da:5f:e9:27:f1:8f:5d:8c:f8: 23:c3:0a:dd:a8:56:a3:ca:97:9e:81:2c:15:26:03:71:c0:eb: a9:1e:fc:5d:d2:7f:61:87:90:c2:a9:91:24:4b:24:ac:cd:84: 5f:c2:77:40:01:fa:63:0f:74:c9:9f:8d:22:56:0b:ee:55:dc: 2d:97:ad:4e:35:c6:12:84:a4:3f:77:eb:db:91:7b:29:9a:1c: da:82:97:04:cb:6b:fb:3d:41:6f:0e:cc:be:f3:6d:e4:d5:f2: 56:4b:46:3e:8c:b3:d5:aa:9d:fa:75:00:4c:e2:cf:dc:57:c8: 75:d2:31:a8:2e:e3:92:3e:aa:e7:fc:16:5d:84:ae:ba:6a:14: 34:54:77:bb:2e:bb:32:aa:e6:11:22:f1:14:4b:6b:d5:88:0d: 02:e6:54:56:ee:ce:8f:1a:b1:10:2b:c0:74:b8:eb:6b:5e:8b: 9e:bd:10:97:f4:35:af:4a:14:5d:20:11:38:d5:e9:fd:75:4a: ce:a9:88:ea:d3:f6:be:87:b0:69:cf:b2:67:3f:1d:fc:35:33: e4:27:8f:93:79:23:2c:62:c3:4c:56:1e:d0:5f:94:6e:4a:98: b6:ff:7b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwNDI0MjE0MDAxWhcNMjUwNTAxMjE0MDAxWjAYMRYwFAYD VQQDEw02ODBhYWZiMS00MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YUzxwLqdtUA0XWKpNWUn4FYY0+10sgtWZmODnvQjSWhf/b6miJJM+nMnmQf ERKET4AC5qlGy4UAEAfgB7kNaboludzSpOiRkgC1Sk9leMsiXcvXvzFSuhpZjUiP 2rlDjR6QsbQQZgQpbZjwqg9qOilHk7+derdTql+KyCuvT2J/yuEv5h3emIBVCtJC MbunbfvThaWTVrbFuX7kb2F5JZ8eVa7HIfb8uei3eM9ZSddWOBwYoXmayAoDNoe+ Mg6rITEk/wR0CitmJ89tQ5q6JW7H4gKJyrDwbylNxiuW/zryxWA5XYALRSzcUnA6 w1WF/IHUvBH8/GujRUlhRh7BOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+J8z/p wMfyS87UHjxTIKNUmiGuMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbrltyY0+nTC6eF1TG2mtNcuFCys4GmWDqE3XaX+kn8Y9djPgjwwrd qFajypeegSwVJgNxwOupHvxd0n9hh5DCqZEkSySszYRfwndAAfpjD3TJn40iVgvu Vdwtl61ONcYShKQ/d+vbkXspmhzagpcEy2v7PUFvDsy+823k1fJWS0Y+jLPVqp36 dQBM4s/cV8h10jGoLuOSPqrn/BZdhK66ahQ0VHe7LrsyquYRIvEUS2vViA0C5lRW 7s6PGrEQK8B0uOtrXouevRCX9DWvShRdIBE41en9dUrOqYjq0/a+h7Bpz7JnPx38 NTPkJ4+TeSMsYsNMVh7QX5RuSpi2/3sl -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:56 2025 by rpki-client