$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: 24rDvXe7+eOexKis6SrzuYzjTc1gbJhED3wJ7zQohow= Subject key identifier: 56:BF:67:08:76:83:11:AD:C7:A4:FF:A1:0D:98:5E:00:94:7B:39:04 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1C4D Signing time: Fri 22 Aug 2025 16:16:25 +0000 Manifest this update: Fri 22 Aug 2025 16:16:25 +0000 Manifest next update: Fri 29 Aug 2025 16:16:25 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: EMzyuT1GRlgIMHvRt/2sfqwmPa2MiUCeRrkZipOQDxE=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7270 (0x1c66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Aug 22 16:16:25 2025 GMT Not After : Aug 29 16:16:25 2025 GMT Subject: CN=68a897d9-c659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:39:35:a0:5a:cc:a7:2b:97:0d:20:e2:de:ab: 72:94:c5:30:38:7e:cc:77:8a:9c:d1:c7:27:fe:76: b3:b6:4b:42:dc:74:26:68:39:e4:f1:9e:1e:56:b3: 67:73:4f:30:2e:da:55:e1:db:81:0a:c4:dc:1f:73: 59:e1:c7:2d:06:bb:46:5d:ab:d0:1c:d0:b9:f0:50: b6:4d:3f:6f:a0:41:6b:b5:77:bf:a5:95:58:63:5c: b6:a0:64:1f:41:d1:8e:20:23:95:3d:a2:72:bf:e0: 0a:72:40:3f:83:5d:1d:83:04:06:f5:ad:9b:e9:75: 17:ca:14:78:c5:3f:04:c4:42:9a:fe:12:d0:c5:99: 46:b5:46:81:d5:50:f0:66:d3:3c:d2:02:98:b1:70: 16:10:3e:97:9f:3b:9e:7d:58:70:d5:f0:46:2d:d7: 45:20:4a:d8:d6:34:7c:ef:c8:45:49:31:8d:3c:eb: 32:f4:c9:bb:9d:36:ee:fb:74:7a:ae:e6:2a:26:cc: 91:a4:3b:7f:01:25:bc:6a:0f:99:e2:59:30:24:ca: 31:5a:46:28:b1:9c:9e:82:00:3b:3d:f0:e1:fe:d8: 4c:c0:f3:22:41:b0:5f:19:f9:78:af:6e:65:ca:a9: d9:b9:86:7c:c3:eb:4f:3a:fa:32:8e:48:3b:11:fc: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BF:67:08:76:83:11:AD:C7:A4:FF:A1:0D:98:5E:00:94:7B:39:04 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:eb:af:f3:84:1c:c5:f9:05:81:dc:52:6f:d1:9c:4f:ad:7a: 5f:60:b2:c8:d1:0b:aa:74:39:c8:f4:67:3c:d5:17:e6:9c:ba: c3:44:6b:43:6c:d2:a1:ae:c9:cd:72:2b:99:0b:1c:35:45:05: 66:09:5f:b5:f1:12:09:eb:f4:26:d8:6d:0f:fb:dd:d1:ff:b1: 44:ef:31:42:92:af:2d:39:d4:19:fb:5c:e1:a3:83:2c:7d:26: 55:85:4a:32:f7:7f:48:78:15:24:b9:8b:93:4b:ce:a1:24:f9: 81:b8:91:8c:50:88:9f:bc:d7:07:e8:69:63:0e:8a:ca:e7:ba: d2:be:cc:ab:57:c4:bc:6f:db:5d:b4:1d:9e:89:2c:c8:6c:eb: fa:74:b4:60:bb:e6:81:39:db:25:b8:dd:21:eb:5d:c0:67:c9: 45:9d:34:63:e2:3f:2a:ed:c9:4a:8b:d2:b7:5c:c2:9d:79:6d: e1:ed:c7:10:f9:92:1b:39:c3:67:bc:28:71:25:6a:5f:b6:b1: 6d:b0:7a:e0:b9:64:60:e2:a0:da:30:01:1e:e5:97:dc:01:68: 49:aa:5f:68:7d:39:b2:8d:d0:43:54:2e:a9:92:19:0e:ea:30: 51:46:7a:59:9c:39:a4:c8:cc:ee:e6:00:c1:75:76:f4:da:58: cd:53:8e:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUwODIyMTYxNjI1WhcNMjUwODI5MTYxNjI1WjAYMRYwFAYD VQQDEw02OGE4OTdkOS1jNjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDk1oFrMpyuXDSDi3qtylMUwOH7Md4qc0ccn/naztktC3HQmaDnk8Z4eVrNn c08wLtpV4duBCsTcH3NZ4cctBrtGXavQHNC58FC2TT9voEFrtXe/pZVYY1y2oGQf QdGOICOVPaJyv+AKckA/g10dgwQG9a2b6XUXyhR4xT8ExEKa/hLQxZlGtUaB1VDw ZtM80gKYsXAWED6XnzuefVhw1fBGLddFIErY1jR878hFSTGNPOsy9Mm7nTbu+3R6 ruYqJsyRpDt/ASW8ag+Z4lkwJMoxWkYosZyeggA7PfDh/thMwPMiQbBfGfl4r25l yqnZuYZ8w+tPOvoyjkg7Efxz5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa/Zwh2 gxGtx6T/oQ2YXgCUezkEMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk66/zhBzF+QWB3FJv0ZxPrXpfYLLI0QuqdDnI9Gc81RfmnLrDRGtD bNKhrsnNciuZCxw1RQVmCV+18RIJ6/Qm2G0P+93R/7FE7zFCkq8tOdQZ+1zho4Ms fSZVhUoy939IeBUkuYuTS86hJPmBuJGMUIifvNcH6GljDorK57rSvsyrV8S8b9td tB2eiSzIbOv6dLRgu+aBOdsluN0h613AZ8lFnTRj4j8q7clKi9K3XMKdeW3h7ccQ +ZIbOcNnvChxJWpftrFtsHrguWRg4qDaMAEe5ZfcAWhJql9ofTmyjdBDVC6pkhkO 6jBRRnpZnDmkyMzu5gDBdXb02ljNU44d -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:48 2025 by rpki-client