$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft File: _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json) Hash identifier: yCCKogm0JxJ98zCE1E1AmU7Pp7xBhwxmIWO9jH1VSTA= Subject key identifier: 3C:05:13:A2:AE:9D:76:81:BF:43:01:D2:38:F7:00:CC:89:7A:24:5C Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 Certificate issuer: /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft Manifest number: 01B2 Signing time: Sat 31 May 2025 02:51:12 +0000 Manifest this update: Sat 31 May 2025 02:51:12 +0000 Manifest next update: Sat 07 Jun 2025 02:51:12 +0000 Files and hashes: 1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: ucv2COR8oRtScxyuekPVizTS2XarK/kWxoZUzS1clq0=) 2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: VYee2tDfZOJDgRSyvh9847Isyru0Slu6wYlhlW9JZCM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:51:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8 Validity Not Before: May 31 02:51:12 2025 GMT Not After : Jun 7 02:51:12 2025 GMT Subject: CN=683a6ea0-1825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0f:08:7c:c3:76:c1:f6:ff:13:f5:0e:62:ab: c9:71:70:7e:96:08:d2:c4:c1:75:99:bb:d9:0e:70: ff:78:7d:77:93:2f:c6:36:e5:f8:f5:e8:ac:6d:c0: 8e:ab:47:2a:ac:ca:e3:2e:89:0a:94:65:78:88:92: ef:03:1c:b6:4a:7c:0d:b1:d8:26:2b:b9:38:4c:18: bd:53:de:eb:f1:d9:39:3d:ee:16:03:8f:03:78:ae: 5e:51:60:86:4e:27:45:37:ed:d3:f3:03:16:4c:fb: e6:a2:22:50:92:17:b5:04:03:ab:4d:3f:39:d8:72: 34:ea:ef:78:f2:a3:17:49:d7:40:06:1c:d4:c6:2b: 1c:51:e6:a8:db:8f:f7:55:4d:4f:75:bf:09:60:34: 64:cc:25:f4:ce:7d:92:b1:7b:67:45:a7:fa:ee:c8: d3:c7:8b:c3:12:cf:f5:9f:f4:c3:d1:54:b6:12:3b: 6e:1a:9f:97:d5:fb:35:e0:ed:ed:7c:76:15:5f:87: aa:ee:de:7c:c7:76:83:de:ea:dc:81:3a:3a:79:19: 38:9e:5f:2c:f0:7c:24:35:1e:c3:63:52:2a:31:1f: 0c:05:78:c7:06:69:4f:73:07:31:a1:47:6b:92:d3: 72:28:06:80:1d:ac:ac:2c:3c:21:92:e7:4b:81:8f: ff:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:13:A2:AE:9D:76:81:BF:43:01:D2:38:F7:00:CC:89:7A:24:5C X509v3 Authority Key Identifier: keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:5c:b5:ac:2d:d3:58:8a:39:73:a9:3c:b6:b7:6a:77:94:ca: 91:d9:fa:07:4f:50:0d:d0:7e:d4:47:c7:e2:91:54:b6:fc:a8: 1e:df:2a:34:6b:4a:79:3f:c6:3e:5e:35:e3:64:de:93:93:8d: 42:ac:94:dd:bd:a6:37:63:a7:bf:79:9b:63:1a:92:74:17:d1: 3a:6d:b7:62:cf:d2:29:8a:45:21:5d:cb:90:2a:4c:0d:cb:5f: bc:8f:3d:08:c9:0a:73:fc:3a:ae:2b:c0:f0:9e:66:f3:69:3b: a0:c5:09:21:a6:5f:a4:14:bc:c6:52:de:ca:f0:3c:3d:f4:9f: 22:99:a6:22:aa:d8:25:6a:02:91:71:02:4f:9a:a1:4f:69:5b: e7:44:64:7e:33:cd:de:8f:08:80:fd:9d:8a:66:82:20:f5:26: 35:f1:b3:04:53:a1:0c:95:9c:d1:1b:7a:05:46:37:97:58:64: 4c:18:d4:fd:c7:14:64:ac:08:53:8e:2d:9b:14:02:77:3a:fb: bb:38:6f:68:8d:5f:31:b3:d0:f6:b4:d4:fa:bc:be:af:6a:d0: 53:da:d2:21:70:09:ca:30:4c:76:86:d7:21:1b:1a:e4:71:83: 9b:f8:36:9e:d3:f9:05:5c:60:98:aa:94:10:5e:65:a8:e5:d5: 8a:14:03:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyRjAxMTAvBgNVBAUTKEZDNEFFN0Q5RTNGNDE5QTdEMjA0QTU0Qzc5RDFGM0VG QTlBN0Q2QzgwHhcNMjUwNTMxMDI1MTEyWhcNMjUwNjA3MDI1MTEyWjAYMRYwFAYD VQQDEw02ODNhNmVhMC0xODI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3g8IfMN2wfb/E/UOYqvJcXB+lgjSxMF1mbvZDnD/eH13ky/GNuX49eisbcCO q0cqrMrjLokKlGV4iJLvAxy2SnwNsdgmK7k4TBi9U97r8dk5Pe4WA48DeK5eUWCG TidFN+3T8wMWTPvmoiJQkhe1BAOrTT852HI06u948qMXSddABhzUxiscUeao24/3 VU1Pdb8JYDRkzCX0zn2SsXtnRaf67sjTx4vDEs/1n/TD0VS2EjtuGp+X1fs14O3t fHYVX4eq7t58x3aD3urcgTo6eRk4nl8s8HwkNR7DY1IqMR8MBXjHBmlPcwcxoUdr ktNyKAaAHaysLDwhkudLgY//+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwFE6Ku nXaBv0MB0jj3AMyJeiRcMB8GA1UdIwQYMBaAFPxK59nj9Bmn0gSlTHnR8++pp9bI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJGMC8zM0FEMEE2MkEz MEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdhZlNCS1ZNZWRIejc2bW4x c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Fcm4yZVAwR2FmU0JLVk1lZEh6NzZtbjFzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjJGMC8zM0FEMEE2MkEzMEMxMUVEQjMzODhDMENDNEY5QUUwMi9fRXJuMmVQMEdh ZlNCS1ZNZWRIejc2bW4xc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmXLWsLdNYijlzqTy2t2p3lMqR2foHT1AN0H7UR8fikVS2/Kge3yo0 a0p5P8Y+XjXjZN6Tk41CrJTdvaY3Y6e/eZtjGpJ0F9E6bbdiz9IpikUhXcuQKkwN y1+8jz0IyQpz/DquK8DwnmbzaTugxQkhpl+kFLzGUt7K8Dw99J8imaYiqtglagKR cQJPmqFPaVvnRGR+M83ejwiA/Z2KZoIg9SY18bMEU6EMlZzRG3oFRjeXWGRMGNT9 xxRkrAhTji2bFAJ3Ovu7OG9ojV8xs9D2tNT6vL6vatBT2tIhcAnKMEx2htchGxrk cYOb+Dae0/kFXGCYqpQQXmWo5dWKFANC -----END CERTIFICATE-----Generated at Sat May 31 16:33:11 2025 by rpki-client