$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: QOfhYYcFMRfbKGGw6d09IMbqzlcqON6hnN5xylzaUYw= Subject key identifier: 38:61:DC:85:5C:7D:3A:AD:DA:8E:0B:84:BC:9D:E3:CB:D2:C9:B1:1F Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2502 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 24D5 Signing time: Tue 04 Nov 2025 15:05:28 +0000 Manifest this update: Tue 04 Nov 2025 15:05:28 +0000 Manifest next update: Tue 11 Nov 2025 15:05:28 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: V6AD3aX/kFA9MKRyfujZYZdfldnTc5/nwNKQXsg4Lmw=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: dLyriiDFZY+L91uj7FQQhTvgEapioRORmYiJf8THHnc=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9474 (0x2502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Nov 4 15:05:28 2025 GMT Not After : Nov 11 15:05:28 2025 GMT Subject: CN=690a1638-f64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:89:69:79:72:6e:0e:02:e2:11:c6:2e:8c: db:7b:3b:77:b1:83:af:38:d8:0c:f8:86:43:aa:07: 87:d9:36:5f:d1:ec:8e:8d:d2:81:92:be:7e:72:43: 00:e0:b2:72:88:89:6d:dd:bc:57:ca:3a:e2:ce:97: cb:a4:c7:b9:68:53:6b:43:0d:6f:6c:13:85:ea:76: 31:13:2d:98:8b:68:21:c2:c6:b9:d3:eb:de:a2:33: 53:39:8b:f2:dc:9d:2d:74:6f:95:b2:cb:2a:e9:ea: 65:3e:2a:19:13:70:03:ad:55:2a:08:c9:ed:ef:03: 5d:14:f7:a7:e2:11:a6:ec:88:8f:e8:e5:f0:f8:1d: be:98:8d:37:38:d9:14:bc:fa:4c:b5:28:70:4a:e4: 4d:1b:5c:25:09:7f:d2:18:1d:d7:05:c6:9c:af:48: 8d:42:08:9a:98:2a:63:c8:b8:fd:a1:08:aa:4e:c2: e8:e8:ba:82:98:53:2d:de:2f:55:eb:49:09:3b:6d: 14:2b:92:c0:49:35:8a:68:a3:e2:15:56:09:0c:0b: b7:06:3c:a9:7a:eb:82:57:39:2e:1b:d4:22:6a:79: 98:0b:41:2e:2d:b7:cc:96:4e:07:aa:12:dd:3d:f6: 98:62:06:56:e2:ba:f5:e5:ba:b9:13:1e:da:dd:93: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:61:DC:85:5C:7D:3A:AD:DA:8E:0B:84:BC:9D:E3:CB:D2:C9:B1:1F X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a5:29:13:fe:78:5c:d5:f6:29:b9:60:c6:d1:5b:de:56:db: 15:bf:d1:66:e1:8c:f6:10:99:14:2e:ee:cf:65:3a:67:23:61: 53:b8:7b:af:e0:bc:fd:33:04:4b:92:2c:ab:b3:fb:47:cd:36: cc:ee:66:eb:f4:89:3e:44:21:50:2e:85:e8:02:d0:33:f3:0c: bf:3b:76:01:01:45:99:02:3a:84:2f:e7:63:61:1b:31:2f:92: 8d:71:57:72:46:07:b0:39:c4:04:73:4b:f4:e0:7f:82:11:8f: c8:0a:c6:86:d5:01:e7:59:fe:d1:3e:12:97:54:ed:2b:c7:8b: ff:63:5d:1d:6a:bc:2f:11:bb:08:d1:53:bd:ad:25:64:31:ba: f5:ff:ef:b3:94:80:af:33:b5:6c:5c:34:f3:03:ef:14:8d:5d: 66:ac:64:88:7b:10:92:59:96:5f:b9:a5:d5:02:de:0a:99:8d: 06:ab:4a:c3:84:4f:ce:61:50:ee:45:37:aa:99:c6:95:a8:7c: fb:4d:f0:8b:f1:cf:b3:4c:cb:d6:b6:06:85:c8:ad:27:fe:10: 35:bc:f0:3f:e4:11:55:da:0b:c5:1c:71:04:55:05:b7:5b:64: 0d:27:b4:2d:77:ad:b2:3a:68:88:7b:21:b8:f1:2d:52:35:21: b9:76:79:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUxMTA0MTUwNTI4WhcNMjUxMTExMTUwNTI4WjAYMRYwFAYD VQQDEw02OTBhMTYzOC1mNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24SJaXlybg4C4hHGLozbezt3sYOvONgM+IZDqgeH2TZf0eyOjdKBkr5+ckMA 4LJyiIlt3bxXyjrizpfLpMe5aFNrQw1vbBOF6nYxEy2Yi2ghwsa50+veojNTOYvy 3J0tdG+Vsssq6eplPioZE3ADrVUqCMnt7wNdFPen4hGm7IiP6OXw+B2+mI03ONkU vPpMtShwSuRNG1wlCX/SGB3XBcacr0iNQgiamCpjyLj9oQiqTsLo6LqCmFMt3i9V 60kJO20UK5LASTWKaKPiFVYJDAu3BjypeuuCVzkuG9QianmYC0EuLbfMlk4HqhLd PfaYYgZW4rr15bq5Ex7a3ZPUBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhh3IVc fTqt2o4LhLyd48vSybEfMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOpSkT/nhc1fYpuWDG0VveVtsVv9Fm4Yz2EJkULu7PZTpnI2FTuHuv 4Lz9MwRLkiyrs/tHzTbM7mbr9Ik+RCFQLoXoAtAz8wy/O3YBAUWZAjqEL+djYRsx L5KNcVdyRgewOcQEc0v04H+CEY/ICsaG1QHnWf7RPhKXVO0rx4v/Y10darwvEbsI 0VO9rSVkMbr1/++zlICvM7VsXDTzA+8UjV1mrGSIexCSWZZfuaXVAt4KmY0Gq0rD hE/OYVDuRTeqmcaVqHz7TfCL8c+zTMvWtgaFyK0n/hA1vPA/5BFV2gvFHHEEVQW3 W2QNJ7Qtd62yOmiIeyG48S1SNSG5dnll -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:51 2025 by rpki-client