$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: AtqrP6SGganntVAQNKNjlrIKJDmPMsK/kWlnugGm10Q= Subject key identifier: 35:04:E0:54:C1:57:DF:5E:34:1A:55:B4:DD:07:B5:54:E2:C2:E7:81 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01CB Signing time: Sat 19 Jul 2025 03:03:52 +0000 Manifest this update: Sat 19 Jul 2025 03:03:51 +0000 Manifest next update: Sat 26 Jul 2025 03:03:51 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: OC9Kp5O/Ul9yoZHjRU14smLBrAwmkMPDceaBh8XY4UA=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Jul 19 03:03:51 2025 GMT Not After : Jul 26 03:03:51 2025 GMT Subject: CN=687b0b18-6568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:79:df:82:2f:9c:2d:93:35:bc:60:f5:fa: 68:90:72:e7:d0:e0:02:89:f7:50:8e:67:7f:e4:2d: 9f:ce:f4:6b:55:ae:fd:b3:49:cd:ea:2b:97:3d:9d: 7f:89:f2:10:35:d1:01:97:86:34:76:36:16:74:4d: a2:6f:d6:32:97:36:6b:11:3e:e9:61:b6:85:a4:70: b3:c1:ae:4a:9d:b3:e0:a1:be:e9:8a:8a:62:0c:20: b8:b2:7f:b2:38:d8:b7:9d:fd:71:e1:8e:c8:fd:64: d8:62:06:de:b1:57:2c:da:16:45:73:bd:60:2d:ef: 5a:4c:ac:51:2b:4c:41:d9:62:8b:a8:67:fb:45:2b: 19:6b:78:7e:6d:fe:74:e6:04:18:9f:f5:e4:d7:0b: b8:a3:5a:26:20:27:08:1f:9f:24:ba:10:f5:70:cc: eb:00:ca:9c:04:55:51:41:e4:5c:65:ab:dc:98:4b: 8e:c2:58:72:04:62:e9:e5:e7:d7:5b:fb:4a:0a:82: 29:b4:74:b6:f1:12:c2:4d:14:ba:85:15:ac:bf:c3: 61:af:92:3a:d8:3d:95:4f:ad:59:c6:31:8d:a8:8e: 57:2a:ce:d9:2d:f1:39:e2:40:55:c2:98:56:a7:1c: b1:64:e8:ef:14:c3:09:fd:92:4e:f3:48:e4:5a:48: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:04:E0:54:C1:57:DF:5E:34:1A:55:B4:DD:07:B5:54:E2:C2:E7:81 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:3f:49:d2:6d:b5:fd:c8:22:83:69:46:d3:a1:5b:27:97:28: b6:bb:5d:30:82:73:f1:a6:45:d9:05:a3:63:1e:17:e4:36:79: 32:4d:c8:64:b2:e5:89:a3:49:f8:19:eb:70:90:34:7c:5b:2e: 5d:49:49:e0:2a:69:db:a1:ef:d3:1e:38:0d:33:3e:3d:9e:d6: 12:4c:9d:a9:5b:fd:c2:38:c0:68:45:36:39:10:c5:8b:c1:fe: 22:69:15:07:77:72:99:97:87:37:35:d6:46:6e:a9:fd:aa:b3: 05:43:1d:23:a7:06:c8:13:79:d5:78:5b:38:58:1b:07:14:44: 87:70:74:58:25:b0:86:06:af:9c:ad:2e:a4:6c:be:23:14:b5: 92:9c:50:95:43:56:a7:ed:46:54:93:e3:a8:8f:47:10:b2:9e: 76:ee:bc:35:89:4f:85:85:8a:09:93:bc:1a:2c:eb:a6:82:5c: 7e:b7:f8:70:23:6d:a6:60:96:4f:ed:8c:af:1d:8d:e6:d4:38: 7b:43:d5:2a:53:56:b9:3e:42:ea:66:cc:ca:5c:aa:01:91:42: 20:80:c6:2c:e7:ea:17:21:82:e2:cc:96:f7:e7:24:15:b7:6b: 73:40:21:94:3a:e8:3b:83:f3:9f:2c:0b:2c:af:44:45:cc:b3: bc:67:5c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwNzE5MDMwMzUxWhcNMjUwNzI2MDMwMzUxWjAYMRYwFAYD VQQDEw02ODdiMGIxOC02NTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01d534IvnC2TNbxg9fpokHLn0OACifdQjmd/5C2fzvRrVa79s0nN6iuXPZ1/ ifIQNdEBl4Y0djYWdE2ib9YylzZrET7pYbaFpHCzwa5KnbPgob7piopiDCC4sn+y ONi3nf1x4Y7I/WTYYgbesVcs2hZFc71gLe9aTKxRK0xB2WKLqGf7RSsZa3h+bf50 5gQYn/Xk1wu4o1omICcIH58kuhD1cMzrAMqcBFVRQeRcZavcmEuOwlhyBGLp5efX W/tKCoIptHS28RLCTRS6hRWsv8Nhr5I62D2VT61ZxjGNqI5XKs7ZLfE54kBVwphW pxyxZOjvFMMJ/ZJO80jkWkiLAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUE4FTB V99eNBpVtN0HtVTiwueBMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtP0nSbbX9yCKDaUbToVsnlyi2u10wgnPxpkXZBaNjHhfkNnkyTchk suWJo0n4GetwkDR8Wy5dSUngKmnboe/THjgNMz49ntYSTJ2pW/3COMBoRTY5EMWL wf4iaRUHd3KZl4c3NdZGbqn9qrMFQx0jpwbIE3nVeFs4WBsHFESHcHRYJbCGBq+c rS6kbL4jFLWSnFCVQ1an7UZUk+Ooj0cQsp527rw1iU+FhYoJk7waLOumglx+t/hw I22mYJZP7YyvHY3m1Dh7Q9UqU1a5PkLqZszKXKoBkUIggMYs5+oXIYLizJb35yQV t2tzQCGUOug7g/OfLAssr0RFzLO8Z1zY -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:37 2025 by rpki-client