
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: 605Yyy65XvceMHTR0xebVVnGe/CW8StY9XN8JXfv09c=
Subject key identifier: F7:14:A1:E0:1D:D2:90:F3:C4:E0:31:B5:B9:84:22:21:C0:0E:A8:76
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 44
Signing time: Sat 13 Jun 2026 00:05:05 +0000
Manifest this update: Sat 13 Jun 2026 00:05:05 +0000
Manifest next update: Sat 20 Jun 2026 00:05:05 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: TCBS83j4/8Qh6zwFxcY9qjuwZzTYAcuIlcOBHG6HoB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: Jun 13 00:05:05 2026 GMT
Not After : Jun 20 00:05:05 2026 GMT
Subject: CN=6a2c9eb1-cda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:69:b4:74:f6:18:f7:14:53:aa:a4:2f:22:
96:65:f9:98:f9:cd:43:02:c2:2c:ab:10:9b:79:d9:
2b:3d:a8:bc:8d:79:ed:4a:ab:2e:b2:0a:4f:b5:2a:
05:df:79:a3:4a:1d:d3:bc:d4:3a:88:ac:99:f9:0f:
77:aa:9d:02:31:87:04:a7:e7:01:b2:79:74:ef:1f:
2e:a7:f9:22:97:8c:16:6a:bd:09:ff:9a:b7:30:04:
6c:7b:8f:07:f8:11:f4:65:28:68:69:10:d9:21:7d:
ea:2c:58:0c:a5:91:85:64:23:bb:25:e8:78:19:f1:
f8:13:44:71:0b:57:a9:71:dd:00:0f:d8:70:fc:a3:
e9:01:f8:b1:3a:98:f0:df:7f:ab:81:36:95:b5:73:
56:31:3a:11:e6:b5:c7:be:84:37:42:7d:28:33:aa:
db:d9:b3:01:6f:59:d9:cf:bf:71:63:4a:ee:de:7a:
fb:4b:77:14:a2:b2:95:75:8a:9d:33:f1:3b:a4:4e:
d8:67:f6:13:4e:4b:fc:65:06:86:c8:a1:e6:a5:fb:
19:85:d4:07:6b:49:87:9f:96:4b:b5:74:93:16:ab:
e6:1a:1c:fa:41:89:9f:df:89:75:ff:27:61:66:a4:
b2:75:18:b2:b8:f3:84:65:6b:f4:1e:47:9f:80:44:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:14:A1:E0:1D:D2:90:F3:C4:E0:31:B5:B9:84:22:21:C0:0E:A8:76
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f5:37:b9:9c:b6:b6:36:48:3e:87:e3:97:4b:56:a1:b7:d7:
0b:2f:93:27:7b:75:df:3c:b8:ab:2f:00:78:25:e5:7a:43:93:
a7:af:c2:cb:00:12:d3:ca:5f:24:1a:fd:d9:4a:3b:2e:0c:8d:
44:75:2b:6f:b1:b6:c2:1e:b2:da:2e:c6:bb:6d:ce:76:4d:44:
7c:20:39:69:6c:4f:7d:70:db:be:c8:01:ce:8c:2e:a0:f9:f3:
48:87:f0:ab:de:ce:04:03:d7:bf:7b:17:8e:0a:f5:06:0e:0c:
e3:38:e6:c3:6a:44:df:5c:95:82:80:3e:07:a7:09:63:9e:ce:
05:c9:f9:97:76:e7:9f:75:ad:c9:6c:99:e8:e2:42:f7:f8:74:
7f:22:89:3c:a2:40:95:11:23:d6:ce:4c:f8:6d:e6:cc:45:75:
44:f0:7d:58:04:b4:40:97:1d:47:99:33:ba:53:29:a7:f5:f7:
84:bc:dd:27:2f:2a:d4:5c:cb:95:e8:9c:f6:07:99:1b:9e:c8:
c1:23:6d:f9:62:bb:8c:b4:3b:d4:86:0b:0f:de:37:07:ee:e4:
0f:94:a2:c0:42:7a:57:75:be:a2:82:ff:44:72:94:8d:e4:66:
81:c3:49:61:83:26:29:f1:14:9a:de:c3:74:67:2b:df:74:dd:
03:04:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:05:35 2026 by rpki-client