$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: JpGslFwsGJXNXgu6Bgu3XKmx6SmCy33r1v5CwNOkTMw= Subject key identifier: D2:D5:55:10:8C:67:9A:E3:2D:FE:43:5B:12:7E:93:0C:CA:8A:13:C5 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1C32 Signing time: Mon 30 Jun 2025 16:22:36 +0000 Manifest this update: Mon 30 Jun 2025 16:22:35 +0000 Manifest next update: Mon 07 Jul 2025 16:22:35 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: vESrpJlFtVrxjtmVD6aQi3eWxzQnEzzW7m3BfltxCyI=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7243 (0x1c4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Jun 30 16:22:35 2025 GMT Not After : Jul 7 16:22:35 2025 GMT Subject: CN=6862b9cb-38c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:91:cd:f9:1c:c0:55:2b:72:a0:09:11:43: 46:62:ed:34:10:4c:88:b8:0b:16:5d:08:b8:81:d7: de:0a:b1:ea:9f:d7:e6:58:05:81:28:37:8e:47:91: 8d:11:1c:f3:40:d3:97:8b:37:6a:b6:76:bc:d7:27: d2:87:58:5c:de:d4:50:07:65:2a:12:06:1d:26:18: 35:9e:6f:72:4a:c5:fc:58:30:6f:02:40:37:1d:8f: 38:09:3c:77:f9:ea:ac:1e:4e:16:9f:7d:6c:ac:9e: db:29:f4:5b:17:5a:d4:11:9d:64:2e:b5:1f:9e:e3: 94:30:00:aa:02:37:9b:12:40:d9:27:3b:57:33:ef: d9:74:d4:11:53:99:2c:80:0b:ce:bf:97:73:fa:6b: 76:aa:2f:ee:72:77:5b:a8:e3:0a:4b:c0:16:41:bc: 14:06:78:b3:1a:76:41:11:c1:e2:cb:b9:b3:19:42: 7a:60:e9:51:c7:b9:53:59:42:ea:7b:cb:29:0a:2c: d7:b6:c5:45:8a:f3:a1:0d:a2:4d:bd:92:e6:6b:b5: 66:e5:25:d3:69:d9:90:a9:3c:e6:0e:64:8a:68:36: 5b:8d:3d:a1:64:e2:28:e9:c0:b6:5c:39:ea:81:e2: 88:5e:ac:ee:d8:c0:70:6d:ef:7e:b9:58:95:d1:18: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D5:55:10:8C:67:9A:E3:2D:FE:43:5B:12:7E:93:0C:CA:8A:13:C5 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:c1:e8:36:99:20:b2:63:58:47:18:d9:ef:33:ef:aa:d5: be:04:9d:ae:c8:71:f0:ba:ca:9f:5d:81:90:46:d0:4d:27:d7: 2e:4a:e8:3c:b9:83:f4:8b:c2:2a:cc:3e:d5:ce:f3:0b:fa:9a: f8:2b:5e:20:78:39:63:d9:e9:e9:45:56:79:06:48:2d:3f:fc: 34:c0:16:3d:7f:d1:71:76:74:23:b7:23:6f:b4:3d:37:a8:be: ab:77:ea:5e:ad:05:b4:75:b3:7c:dc:58:29:1c:34:28:0b:14: c4:74:c8:8b:69:47:65:dc:7a:31:b8:b7:dd:29:14:9e:ae:3e: 24:aa:9c:85:5a:1a:b2:bc:40:53:4b:68:8d:9e:03:87:be:bb: 67:a5:c0:22:91:16:d5:a8:45:a9:25:00:77:63:36:12:4c:6f: 3f:d5:08:a4:47:d5:60:5e:0e:be:6f:ff:64:9c:fb:5e:d2:d6: df:4d:5e:82:58:8d:b9:6e:c8:3c:42:93:b9:94:e8:08:69:52: 3b:8a:31:aa:c1:6f:5d:26:e8:78:62:de:ea:a1:52:be:10:56: 07:3d:34:ac:2e:3a:3e:20:2f:9e:d4:44:e1:7c:4c:f9:f2:c2: 1a:7c:af:30:f2:41:fe:31:16:74:12:66:f2:d3:c2:aa:d6:41: b8:93:df:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUwNjMwMTYyMjM1WhcNMjUwNzA3MTYyMjM1WjAYMRYwFAYD VQQDEw02ODYyYjljYi0zOGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ORzfkcwFUrcqAJEUNGYu00EEyIuAsWXQi4gdfeCrHqn9fmWAWBKDeOR5GN ERzzQNOXizdqtna81yfSh1hc3tRQB2UqEgYdJhg1nm9ySsX8WDBvAkA3HY84CTx3 +eqsHk4Wn31srJ7bKfRbF1rUEZ1kLrUfnuOUMACqAjebEkDZJztXM+/ZdNQRU5ks gAvOv5dz+mt2qi/ucndbqOMKS8AWQbwUBnizGnZBEcHiy7mzGUJ6YOlRx7lTWULq e8spCizXtsVFivOhDaJNvZLma7Vm5SXTadmQqTzmDmSKaDZbjT2hZOIo6cC2XDnq geKIXqzu2MBwbe9+uViV0RgY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLVVRCM Z5rjLf5DWxJ+kwzKihPFMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEwsHoNpkgsmNYRxjZ7zPvqtW+BJ2uyHHwusqfXYGQRtBNJ9cuSug8 uYP0i8IqzD7VzvML+pr4K14geDlj2enpRVZ5BkgtP/w0wBY9f9FxdnQjtyNvtD03 qL6rd+perQW0dbN83FgpHDQoCxTEdMiLaUdl3HoxuLfdKRSerj4kqpyFWhqyvEBT S2iNngOHvrtnpcAikRbVqEWpJQB3YzYSTG8/1QikR9VgXg6+b/9knPte0tbfTV6C WI25bsg8QpO5lOgIaVI7ijGqwW9dJuh4Yt7qoVK+EFYHPTSsLjo+IC+e1EThfEz5 8sIafK8w8kH+MRZ0Emby08Kq1kG4k98h -----END CERTIFICATE-----Generated at Wed Jul 2 00:38:48 2025 by rpki-client