$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: fW8lrqRozIkSw+oOukxOX8Hkzv/1kyJR4TesefQOZgE= Subject key identifier: 84:81:27:83:40:B6:48:72:2D:B0:6A:B5:FB:E6:1C:AD:65:47:1A:9B Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01D6 Signing time: Sat 09 Aug 2025 03:07:28 +0000 Manifest this update: Sat 09 Aug 2025 03:07:27 +0000 Manifest next update: Sat 16 Aug 2025 03:07:27 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: dRDnsxfTptaarrTvNoOsGMF5j23BuI0Ikl5mh7Lnddg=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Aug 9 03:07:27 2025 GMT Not After : Aug 16 03:07:27 2025 GMT Subject: CN=6896bb70-8985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:64:4c:27:7e:d3:f9:df:c7:21:7c:d6:80: 62:cb:c6:3e:a7:bb:e2:46:c4:3f:a2:85:2c:63:3e: a8:1d:89:e4:e5:20:8d:db:6c:65:74:67:f2:5a:f5: 51:76:44:b1:7d:63:65:45:1f:33:2c:38:0e:92:85: 86:7a:ef:c4:7c:47:a1:2f:b6:c9:52:b4:95:2c:99: 0e:ce:97:cb:4f:72:9c:08:df:de:43:e5:1b:df:fc: 38:0b:d3:84:83:9d:69:8d:46:52:2b:46:43:dd:cf: 37:e3:28:68:f3:1d:c2:ae:ce:95:81:e9:d4:08:8a: de:21:38:8e:a3:73:10:84:3c:3b:c3:60:2b:b6:2e: d3:44:ff:e7:1c:e9:9e:bc:0d:2a:f0:b2:b3:19:ff: 79:73:7b:7e:2c:36:a8:57:14:ce:9c:32:fc:3a:09: c3:27:2b:be:79:89:e4:85:97:ea:be:30:98:5e:87: 25:34:46:fb:84:62:27:f1:06:30:88:cb:4f:01:5a: 9a:da:e1:36:a2:d3:43:a8:66:dc:9a:ce:2f:89:e6: 4c:83:42:11:aa:f1:bb:ac:98:34:5c:a6:2f:d2:da: 83:f9:8b:4d:6e:7e:79:b6:80:a2:35:45:b8:cc:1b: 80:48:78:b3:63:1e:a0:fd:ff:4a:01:53:96:02:d2: 92:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:81:27:83:40:B6:48:72:2D:B0:6A:B5:FB:E6:1C:AD:65:47:1A:9B X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:28:22:e1:11:32:f7:60:34:41:61:5c:d0:ea:57:98:8a:07: f7:71:2c:4a:07:03:4e:1f:d3:0e:2c:f3:db:19:cb:90:26:da: bc:fc:86:ba:2d:84:bf:26:de:c5:67:6a:68:7a:e7:27:22:1d: 54:4d:04:d1:1b:ce:c6:34:ee:f8:52:6f:31:d0:93:c6:04:f2: d4:ca:06:60:f6:bd:24:97:a9:cf:95:b3:61:c4:c8:82:92:9b: ef:88:15:0c:63:3c:e1:1d:06:9a:e1:64:af:5d:33:4f:43:34: 75:a6:2f:48:b0:c2:d6:12:40:2d:fe:9f:26:d1:3a:5d:a4:2b: 58:ba:24:a4:86:16:b1:63:db:5b:74:62:db:4d:bd:92:5c:17: 1a:b5:d6:88:7a:43:94:11:66:af:cc:8a:c0:6a:6d:3a:b2:29: c4:94:8a:58:4a:d5:0c:8f:26:8a:be:d5:81:c5:04:88:34:cb: 21:c5:30:d8:9f:e9:87:17:27:3d:bf:89:b5:6c:e2:04:96:9b: 2b:0d:13:69:68:34:66:bc:06:72:7b:11:61:12:c0:8d:f5:25: 02:4f:37:94:82:5f:e9:92:63:cf:77:a5:e8:56:e7:fd:73:28: e7:e2:43:8e:36:6f:a3:d0:bd:1f:a7:40:af:1c:8c:29:16:fd: 9a:99:eb:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwODA5MDMwNzI3WhcNMjUwODE2MDMwNzI3WjAYMRYwFAYD VQQDEw02ODk2YmI3MC04OTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLdkTCd+0/nfxyF81oBiy8Y+p7viRsQ/ooUsYz6oHYnk5SCN22xldGfyWvVR dkSxfWNlRR8zLDgOkoWGeu/EfEehL7bJUrSVLJkOzpfLT3KcCN/eQ+Ub3/w4C9OE g51pjUZSK0ZD3c834yho8x3Crs6VgenUCIreITiOo3MQhDw7w2Arti7TRP/nHOme vA0q8LKzGf95c3t+LDaoVxTOnDL8OgnDJyu+eYnkhZfqvjCYXoclNEb7hGIn8QYw iMtPAVqa2uE2otNDqGbcms4vieZMg0IRqvG7rJg0XKYv0tqD+YtNbn55toCiNUW4 zBuASHizYx6g/f9KAVOWAtKSHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISBJ4NA tkhyLbBqtfvmHK1lRxqbMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9KCLhETL3YDRBYVzQ6leYigf3cSxKBwNOH9MOLPPbGcuQJtq8/Ia6 LYS/Jt7FZ2poeucnIh1UTQTRG87GNO74Um8x0JPGBPLUygZg9r0kl6nPlbNhxMiC kpvviBUMYzzhHQaa4WSvXTNPQzR1pi9IsMLWEkAt/p8m0TpdpCtYuiSkhhaxY9tb dGLbTb2SXBcatdaIekOUEWavzIrAam06sinElIpYStUMjyaKvtWBxQSINMshxTDY n+mHFyc9v4m1bOIElpsrDRNpaDRmvAZyexFhEsCN9SUCTzeUgl/pkmPPd6XoVuf9 cyjn4kOONm+j0L0fp0CvHIwpFv2amevx -----END CERTIFICATE-----Generated at Sat Aug 9 20:41:02 2025 by rpki-client