$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: bTsE+P6CiZgk6/Qg9UScL2IVi8dNxp3WpwjO4k2aTBo= Subject key identifier: 98:63:43:25:24:87:4D:E7:5D:D5:B1:49:2B:DB:F7:33:3D:0C:5F:80 Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01E4 Signing time: Fri 05 Sep 2025 02:56:01 +0000 Manifest this update: Fri 05 Sep 2025 02:56:00 +0000 Manifest next update: Fri 12 Sep 2025 02:56:00 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: 7pDDYC2AGCHq5sqzoUHpsfjA+E4LptlkSnH55JtZSkY=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:56:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: Sep 5 02:56:00 2025 GMT Not After : Sep 12 02:56:00 2025 GMT Subject: CN=68ba5141-6efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:61:da:d6:04:66:96:18:2a:f5:87:f9:22:65: 93:6b:d1:b5:10:fd:5b:47:0c:f0:c1:ab:99:15:93: bc:72:d9:aa:b3:0f:f8:ec:84:5f:d1:0c:fd:85:e6: 77:6f:01:d5:80:51:47:41:5a:10:5d:95:db:72:cd: 61:54:81:ce:5c:88:92:c3:51:15:d0:b7:23:d1:8b: 43:c9:95:97:cd:46:06:e4:86:3b:cd:c8:9d:32:04: de:08:ce:56:9b:25:44:f3:c9:5b:69:61:09:b2:12: d1:87:ce:8f:29:bc:3e:cc:c4:1f:14:22:78:d1:4f: 46:68:d5:a5:60:c6:ca:4d:4d:74:b7:d8:5d:44:8e: 85:aa:fc:59:af:5c:c8:8f:9a:eb:ad:34:48:37:c8: 81:7e:77:ee:ed:07:5f:27:dd:8b:6f:25:8f:d0:cd: 77:06:da:60:6b:92:89:7d:f6:15:8a:f0:48:69:57: 96:1a:ec:ad:52:4f:b3:cd:ae:36:c0:66:d1:a7:13: c0:0d:d9:ed:df:d4:67:2f:03:47:d7:23:c0:f7:73: 98:44:25:d6:09:a9:b8:d8:44:be:af:d5:05:4d:50: 84:f7:38:93:af:d7:1a:04:91:55:3f:dd:13:3d:2e: fb:d6:3e:66:04:21:5a:28:9a:5a:a1:d0:b7:4e:88: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:63:43:25:24:87:4D:E7:5D:D5:B1:49:2B:DB:F7:33:3D:0C:5F:80 X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:50:10:8b:d0:b4:d7:49:2d:69:40:f2:dc:4b:5b:0c:9a: 65:09:f2:61:dc:a3:20:42:2c:4e:47:24:0b:49:82:0b:33:93: 58:59:72:2c:14:97:ec:c9:1b:6a:c2:ca:00:13:a5:75:27:a6: 10:b6:5d:6b:0c:cb:7e:81:3f:2b:c1:d1:69:69:98:bc:b4:28: 95:f2:50:d2:10:0e:a1:5f:2a:8f:2f:4d:d5:ee:92:e8:6f:a3: 1f:7c:0d:b7:75:31:09:3c:98:1e:83:2f:2e:cd:8f:54:5f:ae: 1c:9c:2a:4c:6c:2e:b8:6b:fc:08:49:2c:d2:31:0f:aa:9a:ce: 0f:0e:81:32:db:73:1e:cf:bf:95:f9:fc:e2:17:15:a7:b4:cd: c5:a2:00:69:b1:0a:4f:91:2d:bd:2f:55:1c:ba:02:c6:87:e3: 11:3a:ac:02:23:0b:7b:a8:2a:f3:f5:85:0f:a0:09:ae:98:6c: 45:2a:4a:b8:21:c6:51:7a:b0:13:93:78:2f:f2:78:b4:4e:07: 38:83:05:cb:20:f5:aa:8a:65:8c:35:e9:e3:4d:5b:c1:f0:d2: eb:92:84:45:be:b9:f8:50:87:24:d8:35:30:2b:01:d7:17:93: 8f:6c:18:f6:45:d0:8d:fb:e8:87:1d:ac:1d:f3:eb:be:49:9a: a2:60:7f:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwOTA1MDI1NjAwWhcNMjUwOTEyMDI1NjAwWjAYMRYwFAYD VQQDEw02OGJhNTE0MS02ZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42Ha1gRmlhgq9Yf5ImWTa9G1EP1bRwzwwauZFZO8ctmqsw/47IRf0Qz9heZ3 bwHVgFFHQVoQXZXbcs1hVIHOXIiSw1EV0Lcj0YtDyZWXzUYG5IY7zcidMgTeCM5W myVE88lbaWEJshLRh86PKbw+zMQfFCJ40U9GaNWlYMbKTU10t9hdRI6FqvxZr1zI j5rrrTRIN8iBfnfu7QdfJ92LbyWP0M13Btpga5KJffYVivBIaVeWGuytUk+zza42 wGbRpxPADdnt39RnLwNH1yPA93OYRCXWCam42ES+r9UFTVCE9ziTr9caBJFVP90T PS771j5mBCFaKJpaodC3TohtwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhjQyUk h03nXdWxSSvb9zM9DF+AMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3J1AQi9C010ktaUDy3EtbDJplCfJh3KMgQixORyQLSYILM5NYWXIs FJfsyRtqwsoAE6V1J6YQtl1rDMt+gT8rwdFpaZi8tCiV8lDSEA6hXyqPL03V7pLo b6MffA23dTEJPJgegy8uzY9UX64cnCpMbC64a/wISSzSMQ+qms4PDoEy23Mez7+V +fziFxWntM3FogBpsQpPkS29L1UcugLGh+MROqwCIwt7qCrz9YUPoAmumGxFKkq4 IcZRerATk3gv8ni0Tgc4gwXLIPWqimWMNenjTVvB8NLrkoRFvrn4UIck2DUwKwHX F5OPbBj2RdCN++iHHawd8+u+SZqiYH8f -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:44 2025 by rpki-client