$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: wM86v7n0slMeNbH+J3mbCmVsksh2+4WXurst+If5sJw= Subject key identifier: BF:21:59:9B:A0:3D:AC:C0:93:4A:C3:C1:F3:C8:BE:98:DE:EE:D0:3A Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 24E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 24B4 Signing time: Tue 02 Sep 2025 15:08:29 +0000 Manifest this update: Tue 02 Sep 2025 15:08:29 +0000 Manifest next update: Tue 09 Sep 2025 15:08:29 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: clxvMBs1ghGRC7zW1COi2FwT7Z0teUj2tzJ3xs4j2+Y=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: dLyriiDFZY+L91uj7FQQhTvgEapioRORmYiJf8THHnc=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: zj4FMoo2BFk+RmoPIRljJ9QowF2nkk9k+fxlmrrzCzE=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: /t91K13z6WAVt7TlFvUwr5tZKY0UNdGRc/y4NhFwh6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 15:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9441 (0x24e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Sep 2 15:08:29 2025 GMT Not After : Sep 9 15:08:29 2025 GMT Subject: CN=68b7086d-04eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5e:8a:27:f6:ae:17:c1:3b:b5:de:0d:ff:e6: 99:fe:d2:3c:d6:d3:ad:3a:56:cb:0f:e8:75:e6:f6: 86:61:22:03:da:cb:df:a8:37:4d:12:80:2c:53:43: 18:2b:ea:3c:cf:94:63:23:76:b0:5f:aa:75:fa:1c: e0:71:10:fd:d5:64:0d:20:7b:85:cf:1a:59:8d:01: f4:0e:5f:56:3d:bb:64:42:b8:0a:25:70:7f:9a:d3: c6:98:1c:4c:12:61:75:92:6d:89:1d:b7:e2:54:ca: d4:8f:a6:59:9f:91:4a:bd:b8:d0:a1:08:ee:7d:a8: 90:96:30:e5:04:f6:a8:73:81:74:d1:a2:24:21:b3: 26:58:58:54:8b:9e:4e:99:3f:51:bc:13:48:f8:ed: 6e:48:7b:c8:86:42:a1:e9:0e:01:b6:83:d9:7b:cc: 9d:7f:35:d7:ef:48:db:49:10:a5:e1:31:8a:26:2b: ad:83:6b:27:f2:86:57:1c:a0:0d:04:54:de:ef:05: 8f:a9:11:fa:a7:87:da:3d:09:93:20:44:21:75:30: de:4d:70:a1:fb:f7:02:e6:4f:d8:b5:5d:f6:d6:05: a7:da:8d:26:be:2a:c0:82:8d:f0:c4:90:7f:72:b9: 88:75:e6:5c:27:58:1f:b2:9b:15:d2:fc:bb:72:6a: 91:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:21:59:9B:A0:3D:AC:C0:93:4A:C3:C1:F3:C8:BE:98:DE:EE:D0:3A X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:be:5d:3c:9f:1a:50:90:9c:fb:f7:31:b5:44:54:3e:1e:2f: 6a:de:78:fd:c3:a3:b7:7d:61:c3:7d:b3:02:78:26:f2:e4:b2: 49:56:95:d1:4f:dd:a5:3e:cb:de:14:b7:09:d4:a0:62:9a:da: a6:35:56:8b:3b:9e:df:db:91:4b:a3:d8:4f:61:b2:20:8b:02: c7:22:c0:ac:7a:70:16:8c:e5:4b:ae:30:77:d8:75:e1:26:30: 0e:ab:23:51:49:9a:bd:4a:83:6e:60:d7:17:13:a9:44:b0:ff: 9a:d9:48:c9:20:ac:1f:1c:3d:4e:5c:0a:a7:5a:4e:b9:86:56: 4a:8d:e3:77:d7:92:55:76:bc:1a:44:be:19:62:98:92:45:82: b7:3d:ca:17:e6:0c:1a:bf:00:f9:cf:20:03:c6:71:40:d8:f8: 56:2b:8e:63:73:4c:f6:90:05:77:05:da:c1:24:c5:a7:e7:59: be:06:1e:94:92:1e:9f:e2:e9:86:b1:b6:73:03:4f:e4:7c:a3: f3:18:d7:b7:15:52:c0:e3:20:62:40:69:43:93:c3:9b:0e:40: b6:25:f3:76:77:1d:91:d9:ff:06:ad:16:6b:37:c3:68:13:d6: 84:8c:c4:12:99:48:44:41:22:97:ad:f9:01:ca:80:65:3b:e0: a0:7f:55:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwOTAyMTUwODI5WhcNMjUwOTA5MTUwODI5WjAYMRYwFAYD VQQDEw02OGI3MDg2ZC0wNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy16KJ/auF8E7td4N/+aZ/tI81tOtOlbLD+h15vaGYSID2svfqDdNEoAsU0MY K+o8z5RjI3awX6p1+hzgcRD91WQNIHuFzxpZjQH0Dl9WPbtkQrgKJXB/mtPGmBxM EmF1km2JHbfiVMrUj6ZZn5FKvbjQoQjufaiQljDlBPaoc4F00aIkIbMmWFhUi55O mT9RvBNI+O1uSHvIhkKh6Q4BtoPZe8ydfzXX70jbSRCl4TGKJiutg2sn8oZXHKAN BFTe7wWPqRH6p4faPQmTIEQhdTDeTXCh+/cC5k/YtV321gWn2o0mvirAgo3wxJB/ crmIdeZcJ1gfspsV0vy7cmqRkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8hWZug PazAk0rDwfPIvpje7tA6MB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOvl08nxpQkJz79zG1RFQ+Hi9q3nj9w6O3fWHDfbMCeCby5LJJVpXR T92lPsveFLcJ1KBimtqmNVaLO57f25FLo9hPYbIgiwLHIsCsenAWjOVLrjB32HXh JjAOqyNRSZq9SoNuYNcXE6lEsP+a2UjJIKwfHD1OXAqnWk65hlZKjeN315JVdrwa RL4ZYpiSRYK3PcoX5gwavwD5zyADxnFA2PhWK45jc0z2kAV3BdrBJMWn51m+Bh6U kh6f4umGsbZzA0/kfKPzGNe3FVLA4yBiQGlDk8ObDkC2JfN2dx2R2f8GrRZrN8No E9aEjMQSmUhEQSKXrfkByoBlO+Cgf1VI -----END CERTIFICATE-----Generated at Thu Sep 4 14:01:11 2025 by rpki-client