$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json) Hash identifier: uiqske+hBAgLA1GkRTr2diBEsucy6MyDmmBb0h6IRNU= Subject key identifier: EA:24:B5:7A:3E:17:11:2B:7C:96:29:6D:1E:4D:17:1F:10:36:D5:DF Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Certificate serial: 04C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft Manifest number: 04C3 Signing time: Sat 23 Aug 2025 00:04:23 +0000 Manifest this update: Sat 23 Aug 2025 00:04:22 +0000 Manifest next update: Sat 30 Aug 2025 00:04:22 +0000 Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: uIcGRERj7su/SNJ7faimEFXVZtoLQbyXb2DqFDeoeHU=) 2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1224 (0x4c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Validity Not Before: Aug 23 00:04:22 2025 GMT Not After : Aug 30 00:04:22 2025 GMT Subject: CN=68a90586-10ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:74:ab:98:73:19:1b:ea:c6:8c:5b:ae:ea: 1f:29:44:ca:09:92:17:15:7f:d2:04:ca:9a:86:9f: 0c:50:e8:f8:fc:0d:7d:fe:ef:0e:6b:5e:49:c3:c0: 0f:74:fe:88:ac:d7:c4:b4:f7:bd:83:32:78:37:9c: 65:2e:cd:a1:16:cc:cd:de:d5:7e:39:7e:09:a6:22: 66:f6:ac:da:2d:cb:7b:72:8b:c2:d2:49:0e:64:7d: 63:ff:fd:49:62:94:9d:ee:eb:2c:3b:e1:00:e5:ce: 5d:bb:a2:9b:7b:40:98:81:38:63:ff:9e:a7:26:2c: 99:d8:d9:68:1a:d6:a4:c5:2e:12:25:72:85:7d:de: c0:d1:59:e6:f7:b8:61:b5:eb:06:89:ea:f7:b2:61: 1b:bf:4b:6e:1b:7f:3b:65:74:b5:ec:90:6f:b2:3e: 85:ea:88:41:ca:01:ef:e7:ee:f0:4f:c1:9b:72:c1: e1:a7:74:cf:1a:2a:3e:db:3e:b8:2d:e2:f6:8a:dc: a4:31:ac:71:9b:b9:06:eb:48:d4:21:77:a4:a9:e1: 01:93:d8:45:98:c8:a8:28:02:46:b7:3f:3c:e5:22: bb:62:e5:d9:6d:54:c7:a1:57:64:c6:c5:26:5a:98: fb:a4:16:fb:e6:d0:53:b8:eb:ce:5f:f3:71:9b:3c: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:24:B5:7A:3E:17:11:2B:7C:96:29:6D:1E:4D:17:1F:10:36:D5:DF X509v3 Authority Key Identifier: keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:05:93:e6:b1:65:84:35:5e:72:b8:3a:d7:f1:f3:7e:c7:d7: 8b:d5:c9:b5:2a:60:6c:4e:95:78:88:7e:6d:d5:cc:de:c7:3e: cc:ff:49:85:14:82:df:bf:37:ea:05:2c:43:ee:87:b9:47:7e: 75:9e:f4:de:e9:5b:16:2a:a2:ba:17:88:e0:c3:d6:80:fd:0e: ae:9c:cc:05:58:b2:85:98:a7:21:cc:83:cb:d1:ca:e6:26:66: 44:b4:f9:69:f2:a6:8a:23:45:5a:49:36:32:02:c3:69:0e:2e: 93:45:16:89:4c:31:f3:ff:50:de:cf:5a:a2:49:a7:f2:43:f5: 3a:75:7a:cd:d8:94:78:b5:d6:17:02:c6:8d:ca:56:fa:7e:da: 2a:f2:47:e4:94:c0:f1:89:47:1d:78:9b:6a:61:fc:ab:3d:f3: 04:ab:ea:34:00:3a:ff:7f:46:b5:07:9b:25:b5:7f:1a:db:7a: 24:a5:3c:00:76:d7:fd:2d:d4:b9:81:c2:2b:23:a5:02:9f:ec: 71:ed:ad:9a:d7:13:8e:ea:77:bb:f3:95:46:7a:89:44:e0:8a: bb:82:d9:e0:6e:58:41:5d:b1:66:30:d9:a3:5c:54:ca:33:ed: 37:2a:7b:fb:19:4e:d8:5d:a4:c1:43:39:70:12:06:f2:f1:e5: 25:15:04:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx RjYzNEY3NDMwHhcNMjUwODIzMDAwNDIyWhcNMjUwODMwMDAwNDIyWjAYMRYwFAYD VQQDEw02OGE5MDU4Ni0xMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArCR0q5hzGRvqxoxbruofKUTKCZIXFX/SBMqahp8MUOj4/A19/u8Oa15Jw8AP dP6IrNfEtPe9gzJ4N5xlLs2hFszN3tV+OX4JpiJm9qzaLct7covC0kkOZH1j//1J YpSd7ussO+EA5c5du6Kbe0CYgThj/56nJiyZ2NloGtakxS4SJXKFfd7A0Vnm97hh tesGier3smEbv0tuG387ZXS17JBvsj6F6ohBygHv5+7wT8GbcsHhp3TPGio+2z64 LeL2itykMaxxm7kG60jUIXekqeEBk9hFmMioKAJGtz885SK7YuXZbVTHoVdkxsUm Wpj7pBb75tBTuOvOX/NxmzwFTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOoktXo+ FxErfJYpbR5NFx8QNtXfMB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4 NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEBZPmsWWENV5yuDrX8fN+x9eL1cm1KmBsTpV4iH5t1czexz7M/0mF FILfvzfqBSxD7oe5R351nvTe6VsWKqK6F4jgw9aA/Q6unMwFWLKFmKchzIPL0crm JmZEtPlp8qaKI0VaSTYyAsNpDi6TRRaJTDHz/1Dez1qiSafyQ/U6dXrN2JR4tdYX AsaNylb6ftoq8kfklMDxiUcdeJtqYfyrPfMEq+o0ADr/f0a1B5sltX8a23okpTwA dtf9LdS5gcIrI6UCn+xx7a2a1xOO6ne785VGeolE4Iq7gtngblhBXbFmMNmjXFTK M+03Knv7GU7YXaTBQzlwEgby8eUlFQRS -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:50 2025 by rpki-client