$ rpki-client -vvf rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft File: er7uZ6xhMToeH6izhl0_sfY090M.mft (raw, json) Hash identifier: Qv9oT49xUGZRx66E/l+Y1He5ZYTx6wyA7m6wfJBmYbM= Subject key identifier: C7:E3:A6:AC:F5:AD:FB:F2:29:02:58:73:D0:4B:F3:B7:18:C5:EF:BE Authority key identifier: 7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 Certificate issuer: /CN=A915DFBD/serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft Manifest number: 04E0 Signing time: Sun 19 Oct 2025 01:34:07 +0000 Manifest this update: Sun 19 Oct 2025 01:34:06 +0000 Manifest next update: Sun 26 Oct 2025 01:34:06 +0000 Files and hashes: 1: er7uZ6xhMToeH6izhl0_sfY090M.crl (hash: YCPlL3tRfzlwfiLlNhbLrGnWgqnmMB4/3u0+JFs1Q4k=) 2: 449009F2387C11ECAE655C13C4F9AE02.roa (hash: 4XKTIg0bVBrjQ4gKKV2hpe4LJ1uznZVmF62ttuEN2yA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 01:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DFBD, serialNumber=7ABEEE67AC61313A1E1FA8B3865D3FB1F634F743 Validity Not Before: Oct 19 01:34:06 2025 GMT Not After : Oct 26 01:34:06 2025 GMT Subject: CN=68f4400f-56c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:d0:c6:b9:e2:e2:88:ef:8c:ec:ac:19:ac: ef:d5:79:ac:f1:cb:ad:23:47:f3:37:9e:df:c8:2c: fc:9a:7f:2a:e8:63:72:86:f6:d7:d5:dc:1d:b7:95: 5d:71:8c:e7:e8:f6:0e:86:6c:cb:c0:20:31:e6:ff: e5:b7:fd:c7:5a:92:08:69:98:0d:c7:6a:74:55:2d: cd:bb:90:67:29:3a:c1:f2:45:fe:52:e4:a7:60:9d: 84:f0:11:cd:41:8c:48:aa:73:7a:04:2f:df:9f:ea: a2:b5:94:4a:bc:63:ae:f2:10:46:19:a4:bc:75:07: a5:1b:50:5b:f1:7e:58:6a:28:66:ad:cd:1c:62:07: b6:c6:67:4e:4c:70:d4:08:db:60:2c:2a:3a:35:f3: 43:69:c1:66:71:9a:c9:df:56:99:ad:b0:84:f4:b1: 40:17:22:51:0c:34:7d:b3:11:c7:cf:88:84:a0:6d: 61:59:d4:dd:f3:8f:1c:a4:0d:3f:b7:3d:df:c8:89: 7c:64:1d:d4:d9:09:0b:56:91:3c:ee:ce:95:b6:74: 51:76:b4:43:05:11:53:c7:6c:f8:4b:c9:cd:31:38: 44:c4:9c:4f:94:e6:d3:b8:ff:83:f0:c7:3f:dc:d4: 84:34:ba:00:0f:cd:d5:ec:45:20:1b:59:0a:6b:bd: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E3:A6:AC:F5:AD:FB:F2:29:02:58:73:D0:4B:F3:B7:18:C5:EF:BE X509v3 Authority Key Identifier: keyid:7A:BE:EE:67:AC:61:31:3A:1E:1F:A8:B3:86:5D:3F:B1:F6:34:F7:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/er7uZ6xhMToeH6izhl0_sfY090M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DFBD/D34A6830387811EC8CB59B0EC4F9AE02/er7uZ6xhMToeH6izhl0_sfY090M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:da:ec:c8:ca:2b:1c:0b:7b:36:98:99:b4:8e:63:38:2d:ac: 92:3f:27:45:24:60:89:c6:7e:7a:a3:81:55:cb:c3:a8:26:f0: a2:a1:65:2e:96:18:88:b2:f3:e6:e3:cc:0d:58:de:14:26:f5: 83:9d:cd:98:23:a3:db:f6:52:78:39:ce:53:b0:6d:49:ae:7d: 6d:0d:08:ea:50:e0:93:24:83:46:f5:c9:0a:ab:ad:16:a1:a4: c6:48:7f:f6:61:1b:cc:6f:bb:dd:9e:f8:b5:f7:f4:18:a0:9b: 98:5c:1f:e7:9d:8e:f8:d8:c8:67:88:7e:0d:c9:2c:ce:e0:59: a5:78:4d:10:ee:7c:34:9e:9b:8e:ba:22:e0:a1:fc:22:b1:c5: 61:37:16:00:fa:a3:9e:31:34:8f:24:ee:6d:1b:be:0a:ce:db: c1:af:39:bf:5f:62:2e:f7:c3:06:5b:db:3a:a1:df:cf:8e:9f: 95:db:05:28:f0:4a:a3:c7:cf:71:63:93:0b:18:da:1a:77:f9: ed:81:f5:14:99:12:ac:cc:84:78:92:01:56:71:e7:87:3b:0b: ef:ec:83:b9:60:e2:63:43:1f:23:2a:81:a2:d8:67:50:df:ce: ed:4b:99:92:23:b7:b6:61:ca:73:73:e7:b8:a1:ae:f0:fd:ec: fe:1d:c6:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURGQkQxMTAvBgNVBAUTKDdBQkVFRTY3QUM2MTMxM0ExRTFGQThCMzg2NUQzRkIx RjYzNEY3NDMwHhcNMjUxMDE5MDEzNDA2WhcNMjUxMDI2MDEzNDA2WjAYMRYwFAYD VQQDEw02OGY0NDAwZi01NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArvvQxrni4ojvjOysGazv1Xms8cutI0fzN57fyCz8mn8q6GNyhvbX1dwdt5Vd cYzn6PYOhmzLwCAx5v/lt/3HWpIIaZgNx2p0VS3Nu5BnKTrB8kX+UuSnYJ2E8BHN QYxIqnN6BC/fn+qitZRKvGOu8hBGGaS8dQelG1Bb8X5Yaihmrc0cYge2xmdOTHDU CNtgLCo6NfNDacFmcZrJ31aZrbCE9LFAFyJRDDR9sxHHz4iEoG1hWdTd848cpA0/ tz3fyIl8ZB3U2QkLVpE87s6VtnRRdrRDBRFTx2z4S8nNMThExJxPlObTuP+D8Mc/ 3NSENLoAD83V7EUgG1kKa72MbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfjpqz1 rfvyKQJYc9BL87cYxe++MB8GA1UdIwQYMBaAFHq+7mesYTE6Hh+os4ZdP7H2NPdD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REZCRC9EMzRBNjgzMDM4 NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1Ub2VINml6aGwwX3NmWTA5 ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyN3VaNnhoTVRvZUg2aXpobDBfc2ZZMDkwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REZCRC9EMzRBNjgzMDM4NzgxMUVDOENCNTlCMEVDNEY5QUUwMi9lcjd1WjZ4aE1U b2VINml6aGwwX3NmWTA5ME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu2uzIyiscC3s2mJm0jmM4LaySPydFJGCJxn56o4FVy8OoJvCioWUu lhiIsvPm48wNWN4UJvWDnc2YI6Pb9lJ4Oc5TsG1Jrn1tDQjqUOCTJING9ckKq60W oaTGSH/2YRvMb7vdnvi19/QYoJuYXB/nnY742MhniH4NySzO4FmleE0Q7nw0npuO uiLgofwiscVhNxYA+qOeMTSPJO5tG74KztvBrzm/X2Iu98MGW9s6od/Pjp+V2wUo 8Eqjx89xY5MLGNoad/ntgfUUmRKszIR4kgFWceeHOwvv7IO5YOJjQx8jKoGi2GdQ 387tS5mSI7e2Ycpzc+e4oa7w/ez+HcbP -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:24 2025 by rpki-client