$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: GT+/NqSfQSW7hY2mPPHyk00gu/tAP99sa8pjO8VsdOM= Subject key identifier: 2F:E9:AF:90:88:91:9B:4C:94:2E:2D:7F:6F:D6:B0:48:7D:3C:E6:0F Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1C6A Signing time: Sat 18 Oct 2025 16:30:16 +0000 Manifest this update: Sat 18 Oct 2025 16:30:16 +0000 Manifest next update: Sat 25 Oct 2025 16:30:16 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: l+0KeRwr3Uj6C0LFQl8y5sEg0tzUs+LQ9i/BRSi8bjw=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7299 (0x1c83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Oct 18 16:30:16 2025 GMT Not After : Oct 25 16:30:16 2025 GMT Subject: CN=68f3c098-420f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:8d:ff:b6:b8:67:55:b1:c9:16:c6:93:be: 31:60:25:c8:58:f2:09:87:55:92:2f:00:e0:29:55: ae:7e:38:f1:fd:f8:17:0c:47:e2:66:3b:5c:41:a0: 30:99:07:8f:cb:f8:a5:de:c5:13:df:fb:a6:56:b2: fd:f8:31:01:f8:42:89:ab:7e:e4:66:3a:f2:7f:01: d5:1e:79:de:08:58:c5:9d:69:f0:8b:f6:6f:47:d4: 9b:84:c6:f9:fb:3b:ef:20:11:d6:35:50:d4:ab:c3: df:30:ce:c9:4d:1d:b0:5d:1f:c2:c6:82:74:cc:fb: ad:d4:02:be:c1:8e:dc:ed:e7:6f:94:ad:8f:10:56: a4:c6:ad:2f:4b:1a:92:f7:4d:11:98:06:a5:a3:0e: 98:7b:e8:f6:81:e6:ec:9f:fd:ff:07:11:1d:d4:b9: 0f:c7:e4:bc:70:45:7d:1c:82:2f:84:d9:19:a4:e7: 12:c7:94:c3:da:1f:ee:ad:48:27:a2:01:7c:39:e1: af:74:38:cb:a0:f4:36:ff:c5:39:ca:8c:fb:92:90: 71:55:4d:6b:72:95:20:01:f7:69:15:9d:fc:78:2b: c7:ad:5e:a5:b6:eb:2c:78:81:3f:50:c6:db:eb:a2: cd:a0:1c:eb:58:27:12:a1:9a:c8:07:00:f3:81:1c: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E9:AF:90:88:91:9B:4C:94:2E:2D:7F:6F:D6:B0:48:7D:3C:E6:0F X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a8:43:f3:72:1d:75:56:3a:b1:d3:09:4e:dd:fc:4d:5f:d3: c4:a3:60:c7:d5:e4:8e:29:05:96:12:00:14:40:f6:05:e5:b5: 33:2f:9d:7f:25:8c:ee:67:16:4d:a9:a6:fe:18:00:ba:c3:99: 6e:fa:c7:30:84:8a:25:20:d3:ee:8a:c8:31:40:c5:f4:b4:2c: be:5e:9d:15:ea:c3:04:db:9f:d1:4b:fd:84:8c:63:a0:7f:00: a4:90:0f:eb:ad:7c:89:2b:da:37:9a:bb:64:15:c9:c7:5c:40: 71:5e:2f:c4:2d:f5:24:42:d7:b5:86:8e:82:55:4b:83:09:45: ba:de:77:58:a5:6c:45:1e:9c:10:7c:0f:ad:84:3e:b8:ac:0b: 26:c2:db:9c:16:13:6f:f5:31:aa:fd:cf:af:0b:9d:87:72:8d: 22:d4:88:19:ae:7d:ae:0a:a0:9a:bb:3f:4c:42:45:9d:53:e3: 48:bc:87:0b:e5:2f:92:34:62:5d:99:9c:90:9e:5f:b7:3c:64: d3:28:54:dc:b0:1a:8f:c3:c4:4a:b1:b2:b7:90:69:a6:19:cb: f2:f9:59:98:49:c5:54:c0:9c:ee:57:23:0a:d9:82:9c:ff:43: f8:0b:c9:2a:62:69:29:c9:a7:5a:38:a2:c6:b1:b8:d8:09:7e: 5f:5a:79:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUxMDE4MTYzMDE2WhcNMjUxMDI1MTYzMDE2WjAYMRYwFAYD VQQDEw02OGYzYzA5OC00MjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHKN/7a4Z1WxyRbGk74xYCXIWPIJh1WSLwDgKVWufjjx/fgXDEfiZjtcQaAw mQePy/il3sUT3/umVrL9+DEB+EKJq37kZjryfwHVHnneCFjFnWnwi/ZvR9SbhMb5 +zvvIBHWNVDUq8PfMM7JTR2wXR/CxoJ0zPut1AK+wY7c7edvlK2PEFakxq0vSxqS 900RmAalow6Ye+j2gebsn/3/BxEd1LkPx+S8cEV9HIIvhNkZpOcSx5TD2h/urUgn ogF8OeGvdDjLoPQ2/8U5yoz7kpBxVU1rcpUgAfdpFZ38eCvHrV6ltusseIE/UMbb 66LNoBzrWCcSoZrIBwDzgRyOMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/pr5CI kZtMlC4tf2/WsEh9POYPMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdqEPzch11Vjqx0wlO3fxNX9PEo2DH1eSOKQWWEgAUQPYF5bUzL51/ JYzuZxZNqab+GAC6w5lu+scwhIolINPuisgxQMX0tCy+Xp0V6sME25/RS/2EjGOg fwCkkA/rrXyJK9o3mrtkFcnHXEBxXi/ELfUkQte1ho6CVUuDCUW63ndYpWxFHpwQ fA+thD64rAsmwtucFhNv9TGq/c+vC52Hco0i1IgZrn2uCqCauz9MQkWdU+NIvIcL 5S+SNGJdmZyQnl+3PGTTKFTcsBqPw8RKsbK3kGmmGcvy+VmYScVUwJzuVyMK2YKc /0P4C8kqYmkpyadaOKLGsbjYCX5fWnmd -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:11 2025 by rpki-client