$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: LYAZqfru750uKwDztwM9DskMAK9kJIARJw6GcOGMFWA= Subject key identifier: AE:D2:53:40:16:9E:9B:80:DD:9B:11:50:4A:F7:CE:E4:F3:54:36:B3 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 24CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 249D Signing time: Sun 20 Jul 2025 15:04:12 +0000 Manifest this update: Sun 20 Jul 2025 15:04:11 +0000 Manifest next update: Sun 27 Jul 2025 15:04:11 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: s8UEwrt4hajuwyKQXJoPdi1A1pw1VNEpV5w2uUA6bDQ=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: dLyriiDFZY+L91uj7FQQhTvgEapioRORmYiJf8THHnc=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:04:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9418 (0x24ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jul 20 15:04:11 2025 GMT Not After : Jul 27 15:04:11 2025 GMT Subject: CN=687d056c-8e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:ca:ae:63:e8:c1:09:99:de:dd:0d:f2:35: 6b:c0:09:25:21:f0:01:2b:66:c8:4c:a2:c1:57:f4: 73:a7:f2:3a:c0:53:5a:ed:64:71:3f:f0:d5:68:23: 66:c7:aa:fb:12:6f:7c:4c:11:96:6f:a8:f8:e2:c2: 40:63:a9:8d:74:62:d0:26:67:c9:8f:7c:48:a8:da: 99:f9:eb:b9:8a:0e:6c:fd:2a:83:e6:db:32:ef:3e: be:a7:bc:c1:d4:9e:21:46:14:8f:80:73:1a:be:82: eb:78:ca:b9:d5:a7:24:3a:22:6a:a9:c9:94:a8:eb: 11:87:6f:00:f2:e7:c9:ae:df:3c:b0:fe:5c:86:77: 34:91:02:4f:2b:24:29:28:11:5f:5e:a3:00:fe:09: 04:ac:06:6e:a3:fa:b5:91:2c:4b:eb:73:b4:f1:c5: b6:59:ea:d5:28:4b:d3:13:1b:15:73:d2:a4:8b:5b: e2:58:04:7d:5d:dc:44:50:49:3a:a4:7e:c9:1f:ad: 0a:00:b0:e3:bf:d0:25:ce:82:55:de:8d:85:72:54: 13:ea:72:93:48:11:16:44:e6:57:2d:77:3d:0d:d0: 85:75:a8:ad:58:23:fd:c6:43:73:23:b5:72:fe:74: a7:2b:74:52:1b:14:aa:e2:e3:3a:5b:48:05:df:83: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D2:53:40:16:9E:9B:80:DD:9B:11:50:4A:F7:CE:E4:F3:54:36:B3 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:2c:92:ad:dc:0e:1d:61:e5:d8:24:b3:be:54:00:7e:41:9c: fc:4d:f3:a5:7c:59:30:8d:22:e8:a0:27:fe:c4:de:48:79:8c: fa:1e:ab:f1:1e:5a:b6:59:0f:a5:85:b4:ac:d4:7e:17:8d:4b: 08:9d:33:0f:c1:95:de:16:0f:00:eb:10:86:10:2b:28:82:0d: 7b:dd:1b:4d:d0:a5:67:0e:d4:89:4f:ab:4a:22:41:da:1e:eb: d6:02:df:21:de:38:6c:83:86:88:5e:02:ca:a1:64:2a:a8:15: 47:12:6d:d7:5a:2c:a0:4c:6b:16:88:db:c0:d9:0e:c8:2f:4b: 2b:07:a5:2a:94:ec:eb:72:31:62:7e:c4:0e:ff:ae:89:2c:26: fd:92:89:9b:ab:c5:ab:ac:bb:e2:64:36:d3:25:d6:5d:ea:c2: 0f:5f:d8:d8:93:ff:57:ba:8e:1a:c8:0f:b9:6a:c1:c9:27:53: 79:16:e0:20:98:78:73:82:61:d3:03:42:33:c0:67:09:6c:a3: 1e:5d:21:63:71:ad:e7:a2:b3:66:19:6b:5f:06:ab:51:6f:f7: 37:33:33:47:1a:df:8c:a7:aa:8a:a9:8c:48:eb:bb:41:82:e7: 72:ef:fa:ae:e7:01:ce:0c:7e:0d:fb:74:0d:66:48:f9:b7:e6: 68:82:9c:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwNzIwMTUwNDExWhcNMjUwNzI3MTUwNDExWjAYMRYwFAYD VQQDEw02ODdkMDU2Yy04ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXvKrmPowQmZ3t0N8jVrwAklIfABK2bITKLBV/Rzp/I6wFNa7WRxP/DVaCNm x6r7Em98TBGWb6j44sJAY6mNdGLQJmfJj3xIqNqZ+eu5ig5s/SqD5tsy7z6+p7zB 1J4hRhSPgHMavoLreMq51ackOiJqqcmUqOsRh28A8ufJrt88sP5chnc0kQJPKyQp KBFfXqMA/gkErAZuo/q1kSxL63O08cW2WerVKEvTExsVc9Kki1viWAR9XdxEUEk6 pH7JH60KALDjv9AlzoJV3o2FclQT6nKTSBEWROZXLXc9DdCFdaitWCP9xkNzI7Vy /nSnK3RSGxSq4uM6W0gF34MIeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7SU0AW npuA3ZsRUEr3zuTzVDazMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhLJKt3A4dYeXYJLO+VAB+QZz8TfOlfFkwjSLooCf+xN5IeYz6Hqvx Hlq2WQ+lhbSs1H4XjUsInTMPwZXeFg8A6xCGECsogg173RtN0KVnDtSJT6tKIkHa HuvWAt8h3jhsg4aIXgLKoWQqqBVHEm3XWiygTGsWiNvA2Q7IL0srB6UqlOzrcjFi fsQO/66JLCb9kombq8WrrLviZDbTJdZd6sIPX9jYk/9Xuo4ayA+5asHJJ1N5FuAg mHhzgmHTA0IzwGcJbKMeXSFjca3norNmGWtfBqtRb/c3MzNHGt+Mp6qKqYxI67tB gudy7/qu5wHODH4N+3QNZkj5t+Zogpxw -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:20 2025 by rpki-client