$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: yLIYWuuCqp+cO0688RoMHpaleTrLOfiJ+ZZq1NfHBvA= Subject key identifier: 36:3D:0D:0D:FD:EC:46:2E:6C:C0:55:8C:2C:37:64:78:DB:C4:C6:B4 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 24F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 24CC Signing time: Mon 20 Oct 2025 15:08:29 +0000 Manifest this update: Mon 20 Oct 2025 15:08:28 +0000 Manifest next update: Mon 27 Oct 2025 15:08:28 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: kmnwQalf5RqI+Q4wHdV/29OU1EPgDpQc2sz7yTMta5I=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: dLyriiDFZY+L91uj7FQQhTvgEapioRORmYiJf8THHnc=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9465 (0x24f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Oct 20 15:08:28 2025 GMT Not After : Oct 27 15:08:28 2025 GMT Subject: CN=68f6506d-e41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9d:7d:ec:8a:9c:e9:e4:ab:36:25:c3:4f:ba: a3:2b:09:98:1d:56:70:74:84:cd:c9:ee:5d:4a:85: 5c:ba:2e:e9:0c:d1:5b:93:e4:5b:a4:b7:be:86:84: 57:8f:e3:99:30:6d:c0:e2:bd:08:50:03:86:14:da: 0f:66:f3:5c:2c:9d:9f:32:c2:8c:76:bc:2b:ba:0b: 4a:a0:33:1a:a9:3f:65:e3:41:6f:2c:1d:84:c1:59: 70:d7:68:fd:14:62:b3:c9:54:7f:ae:da:f4:19:ea: 0b:ad:79:de:0b:c1:05:c1:f3:54:46:fc:6e:4f:5c: 74:c0:f4:a3:be:c6:7f:44:5e:b2:3a:d3:68:9a:10: ee:c9:26:16:76:04:80:a3:ab:0e:fc:46:fa:e6:e8: 5e:c8:fe:d4:b1:31:a7:ec:1c:db:67:a2:cd:99:40: 6a:9f:72:b0:15:58:22:5d:0b:4f:32:61:28:76:fd: 9d:0d:c3:ba:44:d8:d5:94:1a:ae:4e:5e:77:50:e1: f9:5d:b0:11:0d:48:1f:fc:38:b6:ca:5b:89:db:52: eb:48:07:5e:00:15:58:c9:f1:2e:6f:c0:55:3f:90: 5c:05:2d:00:25:78:b0:81:1b:cd:4a:6e:5f:5b:4a: 01:40:02:85:6f:ae:7b:92:71:e6:2c:9c:fe:1a:95: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3D:0D:0D:FD:EC:46:2E:6C:C0:55:8C:2C:37:64:78:DB:C4:C6:B4 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:40:dc:a7:4f:50:1c:35:5b:20:36:ed:c2:30:23:01:d6:53: 53:5a:9c:3d:89:92:a5:6b:70:4e:6a:92:35:d3:dd:16:30:87: c2:f6:74:fe:fd:99:db:a7:9f:ec:9b:74:4b:5c:41:d7:62:64: f7:c3:b4:96:c5:c2:63:02:a4:71:97:2f:0f:d8:be:b3:6a:ca: ab:9f:60:8d:ec:c7:e6:59:08:3d:bc:5d:55:d6:e7:e7:b4:96: a7:1b:6c:0c:0a:8d:b2:40:85:ec:93:9b:86:b0:7f:ab:9e:5d: 4b:de:15:ef:0f:85:84:a5:de:69:5c:23:57:31:85:0f:41:1b: d3:35:48:ee:89:09:fe:9d:2c:71:d1:84:fa:a9:cb:60:3b:d0: e3:bc:c6:ff:0d:df:d1:e5:2f:f6:0b:f4:cd:80:10:12:22:14: 0f:65:8a:b8:25:54:0e:a5:11:80:55:bd:02:ef:cf:1b:c1:a2: 8f:84:36:1b:10:ca:b7:5a:c1:1c:28:67:0e:85:b9:b1:9e:74: f7:87:76:00:87:c1:19:b5:79:44:5a:42:d4:5e:95:0e:92:15: ba:7a:fe:a9:54:95:53:80:50:87:03:f7:6b:8d:b1:1a:9d:a9: cc:19:e7:7d:11:22:43:2d:6e:a6:60:d3:1f:0f:40:f4:12:e3: 68:22:13:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUxMDIwMTUwODI4WhcNMjUxMDI3MTUwODI4WjAYMRYwFAYD VQQDEw02OGY2NTA2ZC1lNDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoJ197Iqc6eSrNiXDT7qjKwmYHVZwdITNye5dSoVcui7pDNFbk+RbpLe+hoRX j+OZMG3A4r0IUAOGFNoPZvNcLJ2fMsKMdrwrugtKoDMaqT9l40FvLB2EwVlw12j9 FGKzyVR/rtr0GeoLrXneC8EFwfNURvxuT1x0wPSjvsZ/RF6yOtNomhDuySYWdgSA o6sO/Eb65uheyP7UsTGn7BzbZ6LNmUBqn3KwFVgiXQtPMmEodv2dDcO6RNjVlBqu Tl53UOH5XbARDUgf/Di2yluJ21LrSAdeABVYyfEub8BVP5BcBS0AJXiwgRvNSm5f W0oBQAKFb657knHmLJz+GpV+kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDY9DQ39 7EYubMBVjCw3ZHjbxMa0MB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQQNynT1AcNVsgNu3CMCMB1lNTWpw9iZKla3BOapI1090WMIfC9nT+ /Znbp5/sm3RLXEHXYmT3w7SWxcJjAqRxly8P2L6zasqrn2CN7MfmWQg9vF1V1ufn tJanG2wMCo2yQIXsk5uGsH+rnl1L3hXvD4WEpd5pXCNXMYUPQRvTNUjuiQn+nSxx 0YT6qctgO9DjvMb/Dd/R5S/2C/TNgBASIhQPZYq4JVQOpRGAVb0C788bwaKPhDYb EMq3WsEcKGcOhbmxnnT3h3YAh8EZtXlEWkLUXpUOkhW6ev6pVJVTgFCHA/drjbEa nanMGed9ESJDLW6mYNMfD0D0EuNoIhMg -----END CERTIFICATE-----Generated at Tue Oct 21 02:57:21 2025 by rpki-client