$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: Q2iu9/Vj/HTqnVxjKaoqjlF9YAPFve7UKt4+m/ELDGQ= Subject key identifier: 0E:EF:AB:52:01:8C:9B:12:66:D1:47:6C:F9:2C:E8:BD:6C:DD:A6:D8 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1C22 Signing time: Fri 30 May 2025 16:23:09 +0000 Manifest this update: Fri 30 May 2025 16:23:08 +0000 Manifest next update: Fri 06 Jun 2025 16:23:08 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: eG+omBkrDELvB5eSd0JqnJcrAFfahsfuGKMZsBGNcNI=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7227 (0x1c3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: May 30 16:23:08 2025 GMT Not After : Jun 6 16:23:08 2025 GMT Subject: CN=6839db6c-7df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b5:e3:84:c4:26:8d:53:5f:16:d3:ea:d9:8e: 32:60:69:a9:80:3c:0a:8b:5d:b3:89:9d:00:f8:2d: 47:5d:e5:3a:00:53:88:e4:77:44:7a:8f:30:17:60: a8:5b:eb:09:75:58:a8:00:4a:9c:b2:c0:14:39:3b: 77:94:f2:ff:49:61:7a:7e:9b:33:87:ee:37:20:cd: b0:0e:2f:c1:1e:00:ee:68:32:74:d1:78:53:7f:21: 7a:b1:fb:87:26:dd:01:1e:8b:16:2f:74:f5:59:ea: 7d:37:4b:43:a4:6e:17:5f:39:b7:67:91:a3:ac:62: 8f:df:a6:ab:17:65:b7:7f:9f:3e:b6:fa:32:a5:8f: 49:1d:9e:50:15:2a:72:0b:91:58:4f:95:60:af:af: 20:2f:54:b0:03:23:fd:6c:24:eb:db:5e:f2:0d:c5: f1:65:96:a2:f9:cd:e1:e4:77:29:32:08:b6:9f:ca: fb:a1:e3:54:60:9a:00:8a:e3:6b:fa:15:94:2a:0b: 7a:82:8d:03:48:99:6b:49:a4:20:12:91:ee:7f:70: b6:59:b5:a9:5c:3f:43:7e:99:73:01:c7:97:0a:47: 78:11:41:fb:8f:b6:54:60:f9:a3:66:8a:d3:30:f0: e1:4f:26:c7:34:96:38:cb:87:89:55:b5:0e:8e:a0: ea:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:EF:AB:52:01:8C:9B:12:66:D1:47:6C:F9:2C:E8:BD:6C:DD:A6:D8 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:03:cc:7a:64:b0:67:cd:e0:0f:2d:c8:0b:93:de:ff:81:8a: 07:93:2b:cd:20:05:f9:92:cf:a8:29:a2:92:0c:40:f5:69:d6: 82:f4:44:4d:18:d4:74:3d:05:6c:87:94:99:d6:a0:39:fa:07: d9:31:94:40:e3:30:66:1e:88:f2:48:17:48:c0:90:ac:35:3c: 63:02:cb:25:81:db:d1:f9:0d:b3:cb:1d:00:c6:df:44:2c:21: 17:f5:d5:16:3a:88:ad:5c:c2:7e:88:ab:22:15:a2:c1:f4:68: d7:3c:34:72:e8:50:66:d0:c1:f3:d7:fd:b3:60:58:ac:bd:ec: a7:6d:04:28:2c:ec:97:8c:f8:d2:26:3b:3d:27:ed:da:4a:c9: 06:1c:b8:0e:03:46:cd:8f:8a:cd:7f:a8:a8:20:b1:e2:34:ea: 6a:27:8c:3b:03:56:59:01:4b:75:4a:a6:c0:a9:5d:b9:d3:9b: 9f:06:50:f9:5f:41:50:d6:09:86:dc:e8:27:a1:c8:23:39:e6: 48:f5:5b:a4:5a:15:65:48:fa:df:50:91:b8:e5:0b:15:4a:bf: 55:a0:1e:5a:a4:88:3d:20:60:c9:d2:33:ab:33:57:ec:7a:f2: 02:aa:b2:5c:f0:7e:b4:de:bb:eb:70:0d:ed:ce:7b:81:15:00: 6d:7e:b9:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUwNTMwMTYyMzA4WhcNMjUwNjA2MTYyMzA4WjAYMRYwFAYD VQQDEw02ODM5ZGI2Yy03ZGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybXjhMQmjVNfFtPq2Y4yYGmpgDwKi12ziZ0A+C1HXeU6AFOI5HdEeo8wF2Co W+sJdVioAEqcssAUOTt3lPL/SWF6fpszh+43IM2wDi/BHgDuaDJ00XhTfyF6sfuH Jt0BHosWL3T1Wep9N0tDpG4XXzm3Z5GjrGKP36arF2W3f58+tvoypY9JHZ5QFSpy C5FYT5Vgr68gL1SwAyP9bCTr217yDcXxZZai+c3h5HcpMgi2n8r7oeNUYJoAiuNr +hWUKgt6go0DSJlrSaQgEpHuf3C2WbWpXD9DfplzAceXCkd4EUH7j7ZUYPmjZorT MPDhTybHNJY4y4eJVbUOjqDq3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7vq1IB jJsSZtFHbPks6L1s3abYMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2A8x6ZLBnzeAPLcgLk97/gYoHkyvNIAX5ks+oKaKSDED1adaC9ERN GNR0PQVsh5SZ1qA5+gfZMZRA4zBmHojySBdIwJCsNTxjAsslgdvR+Q2zyx0Axt9E LCEX9dUWOoitXMJ+iKsiFaLB9GjXPDRy6FBm0MHz1/2zYFisveynbQQoLOyXjPjS Jjs9J+3aSskGHLgOA0bNj4rNf6ioILHiNOpqJ4w7A1ZZAUt1SqbAqV2505ufBlD5 X0FQ1gmG3OgnocgjOeZI9VukWhVlSPrfUJG45QsVSr9VoB5apIg9IGDJ0jOrM1fs evICqrJc8H603rvrcA3tznuBFQBtfrmg -----END CERTIFICATE-----Generated at Sat May 31 16:38:00 2025 by rpki-client