$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft File: 2cuKblTiS1D0r_v6oFlb_YECQ-4.mft (raw, json) Hash identifier: 894UVYLtgrfMckgm/YZKnf8odlMqS1ydfQL1HtGUeog= Subject key identifier: 77:86:2C:C6:C4:8C:34:0E:B8:17:E8:12:C5:CE:C5:29:1A:4F:70:B2 Authority key identifier: D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE Certificate issuer: /CN=A91AC4DB/serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft Manifest number: 0749 Signing time: Sat 02 Aug 2025 22:04:47 +0000 Manifest this update: Sat 02 Aug 2025 22:04:47 +0000 Manifest next update: Sat 09 Aug 2025 22:04:47 +0000 Files and hashes: 1: 2cuKblTiS1D0r_v6oFlb_YECQ-4.crl (hash: o8jUWiedpgCI1fRhzUdo6JJPYk3+TxHZcq1Hu0T6HzY=) 2: 4157856E347511EB84CD472CC4F9AE02.roa (hash: btH4SgDDR4khinDDe+n8XlFXLtg61OADsgnktzAiOJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC4DB, serialNumber=D9CB8A6E54E24B50F4AFFBFAA0595BFD810243EE Validity Not Before: Aug 2 22:04:47 2025 GMT Not After : Aug 9 22:04:47 2025 GMT Subject: CN=688e8b7f-b976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:39:1d:19:80:c0:12:d4:b0:b5:7e:41:53: a3:60:af:02:8d:cf:40:4f:bc:42:54:3c:61:da:bf: f8:88:62:d8:de:19:c8:93:a2:24:f8:a7:48:ce:62: da:a7:14:22:98:ee:cc:66:92:8b:11:87:32:1c:f3: 24:b9:9c:2c:04:7e:ae:05:06:d6:0b:b5:d7:64:49: 68:d1:29:1d:a7:7c:94:dc:be:87:f6:db:b0:bc:2a: f2:2b:32:50:6f:1f:b4:51:1b:88:96:e3:2c:38:33: fa:bb:69:57:80:7d:1e:ae:98:79:fa:5f:1d:13:84: b3:f2:eb:6c:ec:ea:0f:68:7f:79:f3:77:a2:8a:ef: 14:99:26:4b:2b:ab:44:49:02:cc:a3:13:f9:99:64: ed:c7:13:dc:65:1f:e6:e1:20:bc:10:df:fb:b5:68: 89:d4:09:cd:f8:de:62:e2:2b:26:21:b3:d2:38:64: 5e:e3:d7:be:eb:f8:8f:d7:c6:1c:47:ca:d9:b4:33: ca:47:89:16:a0:cf:85:5a:31:04:da:89:3a:51:d9: e0:3e:a2:ac:72:40:39:4f:74:fa:d1:d6:ee:9e:82: 36:0c:1a:ee:3c:a2:7a:05:11:e6:83:dc:08:ec:42: d1:50:2b:d2:0b:fd:e5:53:24:f7:e4:73:77:31:8a: 5d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:86:2C:C6:C4:8C:34:0E:B8:17:E8:12:C5:CE:C5:29:1A:4F:70:B2 X509v3 Authority Key Identifier: keyid:D9:CB:8A:6E:54:E2:4B:50:F4:AF:FB:FA:A0:59:5B:FD:81:02:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cuKblTiS1D0r_v6oFlb_YECQ-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4DB/3C07E2D6347311EB9794E226C4F9AE02/2cuKblTiS1D0r_v6oFlb_YECQ-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:82:07:d8:18:a6:80:e0:69:83:e3:57:17:a7:6e:35:ee:07: be:15:89:bc:55:bb:62:bf:1c:0d:2b:56:5d:f8:d1:b3:c9:d1: 61:86:c5:00:69:05:1d:d1:5c:40:ac:9b:f2:da:cd:16:1b:d7: 66:ed:c7:83:da:fa:8b:64:41:66:ff:e4:c4:aa:65:76:bf:05: 8f:61:f2:91:fa:4d:1e:ea:97:e2:91:78:f8:b0:c2:25:6d:fc: 59:69:7b:e7:22:88:a0:a7:e3:12:fe:b7:ee:24:97:79:1c:62: 7c:9c:42:4e:4b:00:05:d8:16:3e:bc:a5:a8:94:27:d6:24:82: 79:94:d7:4e:b5:58:7a:56:48:5f:b5:e2:ca:dc:a7:f5:1e:25: 69:39:e8:23:40:1f:c9:54:60:d1:c0:e4:b5:cb:6a:51:e1:58: 92:0c:1f:de:f6:cd:e4:a3:45:58:f1:b1:d3:5a:05:06:ac:b5: 03:1f:27:fd:bd:6c:d6:c9:ed:1e:0d:11:fe:6a:31:1d:3e:58: 42:62:39:26:8d:f5:bb:ca:5a:d7:fa:64:dc:83:68:e1:31:55: c5:41:40:fa:04:56:c4:29:90:bf:6a:3a:46:df:a3:da:96:1e: d5:55:62:d2:74:41:f3:b8:32:fb:44:9d:0f:ce:9b:a7:cf:9b: ff:ba:76:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0REIxMTAvBgNVBAUTKEQ5Q0I4QTZFNTRFMjRCNTBGNEFGRkJGQUEwNTk1QkZE ODEwMjQzRUUwHhcNMjUwODAyMjIwNDQ3WhcNMjUwODA5MjIwNDQ3WjAYMRYwFAYD VQQDEw02ODhlOGI3Zi1iOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysM5HRmAwBLUsLV+QVOjYK8Cjc9AT7xCVDxh2r/4iGLY3hnIk6Ik+KdIzmLa pxQimO7MZpKLEYcyHPMkuZwsBH6uBQbWC7XXZElo0Skdp3yU3L6H9tuwvCryKzJQ bx+0URuIluMsODP6u2lXgH0erph5+l8dE4Sz8uts7OoPaH9583eiiu8UmSZLK6tE SQLMoxP5mWTtxxPcZR/m4SC8EN/7tWiJ1AnN+N5i4ismIbPSOGRe49e+6/iP18Yc R8rZtDPKR4kWoM+FWjEE2ok6UdngPqKsckA5T3T60dbunoI2DBruPKJ6BRHmg9wI 7ELRUCvSC/3lUyT35HN3MYpdgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHeGLMbE jDQOuBfoEsXOxSkaT3CyMB8GA1UdIwQYMBaAFNnLim5U4ktQ9K/7+qBZW/2BAkPu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzREQi8zQzA3RTJENjM0 NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMxRDByX3Y2b0ZsYl9ZRUNR LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjdUtibFRpUzFEMHJfdjZvRmxiX1lFQ1EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzREQi8zQzA3RTJENjM0NzMxMUVCOTc5NEUyMjZDNEY5QUUwMi8yY3VLYmxUaVMx RDByX3Y2b0ZsYl9ZRUNRLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwggfYGKaA4GmD41cXp2417ge+FYm8VbtivxwNK1Zd+NGzydFhhsUA aQUd0VxArJvy2s0WG9dm7ceD2vqLZEFm/+TEqmV2vwWPYfKR+k0e6pfikXj4sMIl bfxZaXvnIoigp+MS/rfuJJd5HGJ8nEJOSwAF2BY+vKWolCfWJIJ5lNdOtVh6Vkhf teLK3Kf1HiVpOegjQB/JVGDRwOS1y2pR4ViSDB/e9s3ko0VY8bHTWgUGrLUDHyf9 vWzWye0eDRH+ajEdPlhCYjkmjfW7ylrX+mTcg2jhMVXFQUD6BFbEKZC/ajpG36Pa lh7VVWLSdEHzuDL7RJ0Pzpunz5v/unaG -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:23 2025 by rpki-client