$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: HeaL/6xl/qZl9vRqIKRNVPID29GI7r/v/7B7AoRqa0c= Subject key identifier: 87:23:FB:F9:E2:E8:93:A0:B1:1E:35:47:C5:48:07:0A:23:99:D7:92 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0CAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C9A Signing time: Sat 18 Oct 2025 19:00:35 +0000 Manifest this update: Sat 18 Oct 2025 19:00:34 +0000 Manifest next update: Sat 25 Oct 2025 19:00:34 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: mH9zG+4WSxMD5ikM5O9r1oIA0PKzx0WxNB45YBxWvC0=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Oct 18 19:00:34 2025 GMT Not After : Oct 25 19:00:34 2025 GMT Subject: CN=68f3e3d2-4469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:de:34:b9:1b:1a:9e:d4:f7:6f:db:58:71: 1a:78:a1:07:d1:0f:e7:44:c0:0a:ae:7e:eb:bf:13: 32:e4:5b:58:36:09:05:88:de:78:95:09:63:38:2b: 82:be:86:00:fc:de:48:b2:4b:49:49:b8:bd:eb:2c: a5:1c:26:72:d1:d8:ba:29:e2:f4:9e:e9:08:af:08: 93:8c:12:91:06:21:40:56:11:a6:ea:13:e6:c7:ea: 27:ae:22:d2:2c:c5:06:e5:55:dd:e9:e7:01:4e:41: c5:c8:3e:04:9c:7a:10:6b:88:a4:eb:23:e2:95:39: fe:a4:82:48:4f:c6:a9:04:ea:6b:d7:4a:ac:cd:c9: f1:eb:3e:43:0e:fb:83:5a:2a:4c:ea:8f:8f:f8:db: 16:61:3b:6a:71:eb:20:d5:04:39:ac:6b:57:a4:72: 3f:07:16:c0:e2:75:41:59:c3:59:65:cb:f3:bb:d9: 3d:37:19:d4:0d:c4:f3:22:f2:f7:92:88:2d:25:ba: df:81:e2:1f:f3:c3:8b:60:80:1e:f1:8b:65:02:16: 1f:09:43:26:7a:c2:ec:01:92:62:c5:fe:ba:2b:6d: 24:d1:f7:37:9d:96:bb:99:ab:fc:cd:10:d5:15:54: cc:5b:46:2f:bb:7f:dd:2e:01:da:74:df:2b:5a:a3: 76:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:23:FB:F9:E2:E8:93:A0:B1:1E:35:47:C5:48:07:0A:23:99:D7:92 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:82:2f:58:e6:6a:eb:0a:b7:f8:37:9b:71:15:53:4c:9b: d7:1c:04:69:9f:0f:6e:df:d1:1a:63:f1:33:36:6d:b4:30:35: b2:3b:81:c6:16:71:83:7b:7b:25:24:12:d4:5f:e3:39:27:35: 22:ff:98:ee:5a:9c:6d:d6:c3:0e:f1:a8:f6:6b:c8:37:21:c3: 08:5b:76:af:ba:71:ff:51:87:f5:5a:4b:d6:9d:4d:c5:32:68: 4c:9e:d8:f4:34:a8:f5:8b:c0:bf:6a:8d:d8:2d:eb:c2:e1:9f: 0b:05:e5:3b:4d:a8:28:5d:39:7a:19:95:b1:f9:87:a9:0a:41: 5d:d1:9d:1b:5d:e6:de:c6:58:a7:85:59:40:0f:b2:6f:25:97: cf:6e:9e:76:b3:bc:75:bb:8f:07:94:fb:35:6f:ae:c2:90:13: ef:29:18:0d:25:87:ca:c5:a3:6b:98:b9:13:17:01:3c:bc:90: 46:58:51:80:fb:34:e8:26:c8:db:60:02:04:3b:38:df:7a:a5: f7:1a:52:f3:79:44:66:45:e3:19:71:95:9e:65:28:67:e5:3e: 18:9d:14:10:3e:d5:57:4c:6c:57:06:4d:17:a5:1c:fa:d5:4f: 28:28:4f:f6:97:22:6c:4d:07:7a:26:c6:2a:c3:4a:a6:62:c8: 53:80:8c:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUxMDE4MTkwMDM0WhcNMjUxMDI1MTkwMDM0WjAYMRYwFAYD VQQDEw02OGYzZTNkMi00NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyG7eNLkbGp7U92/bWHEaeKEH0Q/nRMAKrn7rvxMy5FtYNgkFiN54lQljOCuC voYA/N5IsktJSbi96yylHCZy0di6KeL0nukIrwiTjBKRBiFAVhGm6hPmx+onriLS LMUG5VXd6ecBTkHFyD4EnHoQa4ik6yPilTn+pIJIT8apBOpr10qszcnx6z5DDvuD WipM6o+P+NsWYTtqcesg1QQ5rGtXpHI/BxbA4nVBWcNZZcvzu9k9NxnUDcTzIvL3 kogtJbrfgeIf88OLYIAe8YtlAhYfCUMmesLsAZJixf66K20k0fc3nZa7mav8zRDV FVTMW0Yvu3/dLgHadN8rWqN2fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcj+/ni 6JOgsR41R8VIBwojmdeSMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcIIvWOZq6wq3+DebcRVTTJvXHARpnw9u39EaY/EzNm20MDWyO4HG FnGDe3slJBLUX+M5JzUi/5juWpxt1sMO8aj2a8g3IcMIW3avunH/UYf1WkvWnU3F MmhMntj0NKj1i8C/ao3YLevC4Z8LBeU7TagoXTl6GZWx+YepCkFd0Z0bXebexlin hVlAD7JvJZfPbp52s7x1u48HlPs1b67CkBPvKRgNJYfKxaNrmLkTFwE8vJBGWFGA +zToJsjbYAIEOzjfeqX3GlLzeURmReMZcZWeZShn5T4YnRQQPtVXTGxXBk0XpRz6 1U8oKE/2lyJsTQd6JsYqw0qmYshTgIx0 -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:54 2025 by rpki-client