$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: wzRCgL7T3+hscsnmotpdeLbHIxGCSoEC0q/RumZrXU8= Subject key identifier: 0A:72:77:40:16:F0:EB:40:20:C0:B4:3A:98:83:B2:B9:5F:47:0E:82 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 0204 Signing time: Wed 05 Nov 2025 02:28:21 +0000 Manifest this update: Wed 05 Nov 2025 02:28:20 +0000 Manifest next update: Wed 12 Nov 2025 02:28:20 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: wlOA9J42BCTeN0fBXCOekcxVPw/rH3pwHODVOYBCLHw=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 3fAULkE6ttb330SWu8NuIByl/YALdaeco2VwvKvVPGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Nov 5 02:28:20 2025 GMT Not After : Nov 12 02:28:20 2025 GMT Subject: CN=690ab644-ae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:42:03:b2:fe:f5:7d:6f:08:a9:1b:8d:ed: b6:dd:ee:a7:f9:9b:31:64:02:3a:f0:89:53:92:a2: de:0f:3d:22:9d:c0:fb:6d:12:b8:41:a8:77:bd:6d: 91:31:cc:23:d7:62:ac:76:bb:d1:9b:4b:ce:03:43: ca:23:9b:f2:27:88:8f:88:7c:bb:e3:04:10:00:88: 60:68:dd:48:37:a4:f6:61:da:81:27:60:c6:b2:78: 39:f9:bb:29:e7:b6:77:86:9e:08:76:b1:12:3a:ce: af:66:34:06:3b:60:8a:f4:e8:ec:82:97:d1:bf:4e: 13:30:e7:db:a6:26:bd:6e:ec:4b:ae:58:a9:cd:56: 16:f1:b9:41:e6:80:44:c2:48:a5:d1:f4:af:30:4a: 21:69:93:b0:74:2c:ca:ec:0c:62:9d:20:16:08:a3: a7:bf:25:c5:44:68:d6:2b:12:ee:2c:32:0b:71:43: 7a:46:58:84:52:71:d6:ee:a1:23:20:47:ac:f6:f4: 56:f0:cb:b8:c6:3c:ab:5b:8c:c5:db:cf:21:9b:1d: c0:1d:1e:3a:62:ce:58:46:ce:b9:fa:24:6d:ce:f1: f5:9e:3f:b1:6b:4a:82:1f:d8:14:81:2c:9a:66:a5: 2d:17:3b:96:da:66:7d:92:16:36:fe:d4:5c:b3:d4: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:72:77:40:16:F0:EB:40:20:C0:B4:3A:98:83:B2:B9:5F:47:0E:82 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6e:10:63:f8:81:76:1a:ac:fc:3c:7e:45:18:37:f3:2d:f5: 7a:21:a3:2c:a0:70:99:d9:1e:96:ad:c0:50:7a:c8:39:25:53: f3:d5:a2:68:4f:2e:d9:12:d3:b5:92:40:e3:9a:96:06:f7:9f: 7a:4e:2e:c4:63:23:53:0e:f8:85:3a:ef:0f:e9:8d:b2:34:75: ff:ea:dd:13:d5:63:3a:bd:16:a9:f1:e9:96:a6:49:65:fe:bf: 47:ba:a4:18:24:a2:af:a6:7e:b6:b8:ca:fe:ef:c4:15:2f:0c: 5e:ef:d2:2b:27:a7:2e:63:a7:3c:de:35:3d:d7:6b:44:53:19: c7:c7:16:df:5c:32:12:b8:7d:a5:62:fc:83:91:96:24:43:6a: f9:16:a0:b5:92:79:c0:72:93:e1:5e:c9:a0:70:25:a6:e1:5d: f4:91:87:72:9c:42:9c:56:24:80:f5:58:fc:3f:9b:df:df:3c: e6:ae:d2:b7:8a:90:f4:c7:7a:98:52:1f:0c:a1:87:2a:45:6b: 97:e0:67:a6:09:cd:2a:5d:58:a0:3d:fd:ca:f9:4e:41:e7:0a: c9:3a:74:10:a8:7d:5a:80:19:cd:1d:2b:88:a9:87:c5:51:a5: 1d:5c:4b:91:82:66:48:82:ff:44:22:26:90:eb:b0:05:ac:9e: ab:a7:cf:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUxMTA1MDIyODIwWhcNMjUxMTEyMDIyODIwWjAYMRYwFAYD VQQDEw02OTBhYjY0NC1hZTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PVCA7L+9X1vCKkbje223e6n+ZsxZAI68IlTkqLeDz0incD7bRK4Qah3vW2R Mcwj12KsdrvRm0vOA0PKI5vyJ4iPiHy74wQQAIhgaN1IN6T2YdqBJ2DGsng5+bsp 57Z3hp4IdrESOs6vZjQGO2CK9OjsgpfRv04TMOfbpia9buxLrlipzVYW8blB5oBE wkil0fSvMEohaZOwdCzK7AxinSAWCKOnvyXFRGjWKxLuLDILcUN6RliEUnHW7qEj IEes9vRW8Mu4xjyrW4zF288hmx3AHR46Ys5YRs65+iRtzvH1nj+xa0qCH9gUgSya ZqUtFzuW2mZ9khY2/tRcs9S4JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApyd0AW 8OtAIMC0OpiDsrlfRw6CMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKbhBj+IF2Gqz8PH5FGDfzLfV6IaMsoHCZ2R6WrcBQesg5JVPz1aJo Ty7ZEtO1kkDjmpYG9596Ti7EYyNTDviFOu8P6Y2yNHX/6t0T1WM6vRap8emWpkll /r9HuqQYJKKvpn62uMr+78QVLwxe79IrJ6cuY6c83jU912tEUxnHxxbfXDISuH2l YvyDkZYkQ2r5FqC1knnAcpPhXsmgcCWm4V30kYdynEKcViSA9Vj8P5vf3zzmrtK3 ipD0x3qYUh8MoYcqRWuX4GemCc0qXVigPf3K+U5B5wrJOnQQqH1agBnNHSuIqYfF UaUdXEuRgmZIgv9EIiaQ67AFrJ6rp8+7 -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:32 2025 by rpki-client