$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft File: ER6YG60wGDD3weWQzBqotIImDtg.mft (raw, json) Hash identifier: bG4OTTkPbBB5im2Op5yOWzM+5O8+DPLHFqaNrnsbM8E= Subject key identifier: E4:7E:8D:94:44:20:CA:E0:6D:17:2C:9F:1B:47:D7:FB:4D:45:2A:79 Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft Manifest number: 1C73 Signing time: Tue 04 Nov 2025 16:16:55 +0000 Manifest this update: Tue 04 Nov 2025 16:16:54 +0000 Manifest next update: Tue 11 Nov 2025 16:16:54 +0000 Files and hashes: 1: ER6YG60wGDD3weWQzBqotIImDtg.crl (hash: m1w6qJgAPXIw53QdkITs95ndYXkugP04aJjiFb4LlVM=) 2: 14564AB0E83311E6A72DC543C4F9AE02.roa (hash: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU=) 3: 20C4803669A011EA9055BD0EC4F9AE02.roa (hash: nzh03mGpFuWBuJjX4zOpsk0cBliW2iPs211HjGanKnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7308 (0x1c8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Nov 4 16:16:54 2025 GMT Not After : Nov 11 16:16:54 2025 GMT Subject: CN=690a26f6-d0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:6d:a7:30:06:90:79:a0:9f:64:31:9b:ff: b7:96:d5:9c:c2:ea:37:ad:b1:a1:3e:62:35:e2:0f: 10:30:95:fa:97:64:a6:c7:a3:d9:b4:57:f0:e5:26: a6:11:91:63:21:35:93:fc:18:61:d2:d4:70:52:01: c2:c6:32:b8:b4:aa:02:65:1f:19:1a:c3:5a:24:e9: 17:9d:b5:a6:f7:66:e9:71:5a:86:b5:97:45:65:96: ce:2d:0f:8f:7f:51:4d:2a:f5:f7:c3:06:81:c9:e0: 58:15:4a:d6:8c:ca:b8:17:f4:48:19:e2:df:30:f5: 33:5d:b2:26:4b:de:49:0b:e6:5b:69:04:ab:60:bc: 6d:1a:46:b7:30:aa:3d:0d:80:c1:0e:57:98:51:9e: 49:60:07:91:18:c9:10:99:1a:c7:63:ea:59:d1:b6: e4:a3:6a:0c:3f:08:0c:42:b4:61:27:fd:f1:51:0c: 18:ee:38:39:73:83:18:8d:b4:6c:d2:0f:d8:79:aa: 43:fd:b1:c5:bd:cb:6d:b2:ad:27:1c:9f:98:37:fb: 45:c9:df:81:de:81:a3:e6:4b:0a:99:7f:59:4c:21: 70:bc:ec:30:05:c6:ab:44:24:67:c2:ff:15:86:27: c3:f9:45:b0:de:f6:ef:48:30:cf:5d:fb:fa:19:4c: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:7E:8D:94:44:20:CA:E0:6D:17:2C:9F:1B:47:D7:FB:4D:45:2A:79 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:81:14:ff:57:44:e7:a4:fa:6f:e9:e2:0f:dd:1b:45:32: fb:8e:85:34:53:f3:ec:2b:9c:ab:2f:79:14:08:0c:88:e9:13: 80:2c:19:e1:d9:80:14:16:d3:f3:df:f6:3f:84:31:bb:97:75: 2b:7a:72:6c:35:2d:5c:a0:80:d4:50:3e:f7:9b:13:04:a3:4a: 0b:2d:44:6e:76:b6:0e:5c:18:0a:bb:6a:f2:30:46:80:b1:dd: 91:78:40:6a:03:30:f2:48:d5:9c:b0:b2:f9:de:fd:4b:76:a5: 32:96:8c:d2:d4:87:2e:84:2d:e0:63:7c:c5:74:ae:17:5f:7d: fd:ea:17:dc:1e:b4:11:af:b5:e8:87:03:3f:67:44:d7:40:39: d6:ba:fe:03:2e:a2:dc:41:fc:9c:4f:f2:3e:fd:da:c4:c9:04: 82:ad:1a:45:12:44:5b:5a:d0:cb:cf:e1:9e:f9:7e:1b:76:6f: ce:6b:fe:50:5d:ae:0d:e8:f1:f5:53:72:f2:90:b9:76:9c:64: 85:1d:40:ba:88:c0:d0:c3:37:28:bc:15:be:5a:cf:0b:22:77: 56:c7:b8:e2:e8:4f:06:6d:b3:44:a0:4a:99:74:5f:0b:aa:09: 65:c5:06:44:01:8f:44:d1:35:c1:52:16:64:f5:72:47:5e:8f: f9:b3:82:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUxMTA0MTYxNjU0WhcNMjUxMTExMTYxNjU0WjAYMRYwFAYD VQQDEw02OTBhMjZmNi1kMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou5tpzAGkHmgn2Qxm/+3ltWcwuo3rbGhPmI14g8QMJX6l2Smx6PZtFfw5Sam EZFjITWT/Bhh0tRwUgHCxjK4tKoCZR8ZGsNaJOkXnbWm92bpcVqGtZdFZZbOLQ+P f1FNKvX3wwaByeBYFUrWjMq4F/RIGeLfMPUzXbImS95JC+ZbaQSrYLxtGka3MKo9 DYDBDleYUZ5JYAeRGMkQmRrHY+pZ0bbko2oMPwgMQrRhJ/3xUQwY7jg5c4MYjbRs 0g/YeapD/bHFvcttsq0nHJ+YN/tFyd+B3oGj5ksKmX9ZTCFwvOwwBcarRCRnwv8V hifD+UWw3vbvSDDPXfv6GUypXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOR+jZRE IMrgbRcsnxtH1/tNRSp5MB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZFMi8yRkY5QkIyMkU4MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dE RDN3ZVdRekJxb3RJSW1EdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjAYEU/1dE56T6b+niD90bRTL7joU0U/PsK5yrL3kUCAyI6ROALBnh 2YAUFtPz3/Y/hDG7l3UrenJsNS1coIDUUD73mxMEo0oLLURudrYOXBgKu2ryMEaA sd2ReEBqAzDySNWcsLL53v1LdqUylozS1IcuhC3gY3zFdK4XX3396hfcHrQRr7Xo hwM/Z0TXQDnWuv4DLqLcQfycT/I+/drEyQSCrRpFEkRbWtDLz+Ge+X4bdm/Oa/5Q Xa4N6PH1U3LykLl2nGSFHUC6iMDQwzcovBW+Ws8LIndWx7ji6E8GbbNEoEqZdF8L qgllxQZEAY9E0TXBUhZk9XJHXo/5s4LB -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:43 2025 by rpki-client