$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: PWeRUEevKfMkgCD6uk0fx2RcEoc8dF3pPw5SYZENS7A= Subject key identifier: A2:46:75:B9:C6:A5:11:AD:44:D7:8A:23:02:35:0C:BE:73:A1:56:DB Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 24A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2477 Signing time: Sat 10 May 2025 15:00:44 +0000 Manifest this update: Sat 10 May 2025 15:00:44 +0000 Manifest next update: Sat 17 May 2025 15:00:44 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: syhIF/TJwI8sEgnlpvAsQgUc6KvwD+8dlcr3pWYwutI=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: 3kDcxjoJt+uLwNPAJETs74uGi0S+qOhaB4Kap466oyI=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: TvzuvljGMYe65nUWCoyGwWoTpT0hk8WJPlKCbHuFU80=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: nb4ekLYfMcmcZ6P490LxZTkaHaEPmz90vPJhXehdrTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9377 (0x24a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: May 10 15:00:44 2025 GMT Not After : May 17 15:00:44 2025 GMT Subject: CN=681f6a1c-8bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:63:84:f8:38:63:95:74:aa:45:98:ea:6f: 51:41:f1:fe:f5:3b:0f:55:9d:69:56:9c:29:e8:03: f5:f7:69:00:44:e0:c8:00:a8:6e:71:35:5e:9a:e4: 4c:9d:ed:7f:84:7f:b8:b3:a3:06:0d:e4:45:72:b7: 06:bd:b1:bd:5f:cc:be:15:da:de:b9:03:60:7f:e5: e1:39:23:06:88:bc:dc:af:be:0f:fe:77:36:7f:a3: df:90:05:e9:ca:40:ce:c8:19:32:78:a2:45:8a:89: 70:f0:31:19:f0:77:85:c6:16:da:3f:02:85:1f:61: f6:07:f5:d4:88:57:02:b4:14:a3:18:45:19:e7:ad: 04:33:22:bd:10:5d:6a:d3:89:ed:7f:88:41:13:be: fc:c5:fd:f9:cb:42:44:89:6f:bf:75:b2:ef:05:32: bc:73:e5:e8:a1:6d:5b:13:48:bd:b1:4b:86:97:5a: cc:3b:6f:21:98:9b:19:ff:13:6d:f6:4b:96:99:d2: 4f:2e:35:97:6e:1e:97:ff:5e:2e:a8:42:cb:b6:ca: 30:3d:f8:5f:93:5b:e7:81:49:7b:4b:6b:bb:4b:a7: 83:c4:78:f4:8d:51:d0:0c:29:d3:00:c9:be:c8:be: d8:25:30:0b:fb:91:44:9f:58:76:11:6e:e8:70:bf: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:46:75:B9:C6:A5:11:AD:44:D7:8A:23:02:35:0C:BE:73:A1:56:DB X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:25:9e:50:d5:c9:55:a9:e7:a5:9c:f4:90:01:a4:c5:96: 7d:a5:e9:3a:91:0a:f4:d3:c2:6b:67:d0:80:49:8d:c4:2c:05: 9d:cd:24:15:7c:b1:4b:8c:56:8e:f5:c7:96:a5:42:37:9c:64: e5:e4:9d:d5:97:ba:16:96:d6:c6:1d:a0:7f:58:74:e4:35:d4: b3:ac:28:b8:84:ad:22:3e:b5:51:40:1f:70:e8:df:71:1f:40: 47:bd:b7:5f:94:24:a4:20:0a:ca:c1:80:19:10:dc:aa:48:74: 01:0f:79:9c:e8:f1:21:fc:3a:0d:6e:dd:04:ff:ce:f3:26:8f: c8:03:98:85:58:8b:7a:72:75:29:97:54:38:58:49:c1:9d:30: f2:c1:44:34:e1:bc:b3:e9:66:62:41:5c:31:ad:a4:b2:d8:07: c8:1b:ce:f6:c1:f3:c1:01:6d:67:81:0e:e4:49:c6:79:4d:65: ff:53:96:82:0e:3e:3b:9c:ab:a4:91:38:17:36:ec:05:6d:8d: cb:ec:b8:32:81:2c:14:01:4e:8d:98:cf:ef:50:55:61:4b:68: 65:d7:e3:25:12:a9:2f:e6:90:ab:5b:d2:d6:0e:8e:f0:51:67: eb:41:35:18:e2:80:7a:45:05:a7:6c:6a:3c:07:51:23:a2:58: 11:1a:45:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwNTEwMTUwMDQ0WhcNMjUwNTE3MTUwMDQ0WjAYMRYwFAYD VQQDEw02ODFmNmExYy04YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshljhPg4Y5V0qkWY6m9RQfH+9TsPVZ1pVpwp6AP192kARODIAKhucTVemuRM ne1/hH+4s6MGDeRFcrcGvbG9X8y+FdreuQNgf+XhOSMGiLzcr74P/nc2f6PfkAXp ykDOyBkyeKJFiolw8DEZ8HeFxhbaPwKFH2H2B/XUiFcCtBSjGEUZ560EMyK9EF1q 04ntf4hBE778xf35y0JEiW+/dbLvBTK8c+XooW1bE0i9sUuGl1rMO28hmJsZ/xNt 9kuWmdJPLjWXbh6X/14uqELLtsowPfhfk1vngUl7S2u7S6eDxHj0jVHQDCnTAMm+ yL7YJTAL+5FEn1h2EW7ocL9yWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJGdbnG pRGtRNeKIwI1DL5zoVbbMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZSSWeUNXJVannpZz0kAGkxZZ9pek6kQr008JrZ9CASY3ELAWdzSQV fLFLjFaO9ceWpUI3nGTl5J3Vl7oWltbGHaB/WHTkNdSzrCi4hK0iPrVRQB9w6N9x H0BHvbdflCSkIArKwYAZENyqSHQBD3mc6PEh/DoNbt0E/87zJo/IA5iFWIt6cnUp l1Q4WEnBnTDywUQ04byz6WZiQVwxraSy2AfIG872wfPBAW1ngQ7kScZ5TWX/U5aC Dj47nKukkTgXNuwFbY3L7LgygSwUAU6NmM/vUFVhS2hl1+MlEqkv5pCrW9LWDo7w UWfrQTUY4oB6RQWnbGo8B1EjolgRGkUV -----END CERTIFICATE-----Generated at Sun May 11 16:54:58 2025 by rpki-client