$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json) Hash identifier: FcKkTKgdJRP9ckCUlXYxhH5FqhNMDpwmuIQ8DDZXX8g= Subject key identifier: FC:BC:81:18:6C:72:11:28:C0:A1:52:EE:D8:B9:71:F0:ED:66:3A:4A Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft Manifest number: 27 Signing time: Fri 17 Apr 2026 00:02:50 +0000 Manifest this update: Fri 17 Apr 2026 00:02:50 +0000 Manifest next update: Fri 24 Apr 2026 00:02:50 +0000 Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: ztjt3QLl+xwnFd5x2mhIGz2s37W0SDN4+FIEwayW0Nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Validity Not Before: Apr 17 00:02:50 2026 GMT Not After : Apr 24 00:02:50 2026 GMT Subject: CN=69e178aa-5e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b5:bc:cb:5f:d1:80:0e:91:07:16:10:42:5b: 0f:70:73:e1:15:79:f9:bc:1c:b3:fe:d3:39:08:38: fa:1c:f3:4e:37:62:76:b0:f2:f8:73:b6:53:fc:e8: 6a:1a:85:13:b8:eb:62:47:c4:1e:c8:8e:a9:d5:bc: 82:32:a1:7b:a8:b9:30:a0:3a:84:01:bc:70:13:99: 00:a6:73:a6:18:c7:69:9f:3a:ad:3c:ca:90:a9:d6: 0a:36:f8:ed:54:2f:b2:0e:97:68:b5:52:9c:7a:fb: 38:fc:37:da:7c:75:08:76:03:01:18:de:47:62:92: bd:03:3d:33:97:7d:05:69:40:6e:6e:a9:0b:d8:30: 83:a3:bb:04:2f:63:84:52:ed:f5:2c:83:d3:3c:e5: b7:cc:e2:dc:37:29:31:4e:85:98:57:40:93:27:2d: 50:a6:a1:f9:74:95:34:7e:b8:bd:85:9c:ea:c1:2f: a4:c1:09:b4:52:6e:4f:3b:b8:f2:6f:2a:13:d3:74: 87:41:7e:f6:03:b1:5f:2d:58:67:38:22:e2:a9:ff: 6f:76:59:b7:5e:a5:84:a0:92:bd:fc:d7:e1:ac:43: 4f:41:7f:69:a5:c4:7f:5c:5e:3e:ef:0d:62:bc:9e: 69:fd:d9:5d:24:cb:a3:17:c8:f6:85:76:7d:af:32: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:81:18:6C:72:11:28:C0:A1:52:EE:D8:B9:71:F0:ED:66:3A:4A X509v3 Authority Key Identifier: keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d9:65:61:8b:17:2a:29:a3:44:ed:6a:17:dd:8f:ae:de:d1: 8c:6e:c7:09:51:f4:ba:84:6f:dd:f6:9e:cf:d1:7c:cc:d5:4f: a2:ed:35:4c:c7:07:a3:67:c5:d4:8f:70:78:c9:9f:c8:56:b8: d5:55:b7:21:ce:19:ea:64:c7:b2:f0:23:91:6c:80:18:4c:34: 8b:9c:bd:29:de:a5:2c:0f:41:bb:9e:a7:89:56:5c:ca:9d:d4: 8f:97:7d:61:c7:8d:5e:82:2e:d0:32:57:b1:f2:a7:f6:ef:d7: 99:65:db:60:8d:58:41:3f:9f:f7:74:23:92:4f:76:f3:64:86: 6d:45:b0:a9:75:c5:2f:7c:78:c5:64:56:bc:00:9e:26:b7:0c: 13:4f:e8:78:16:66:20:72:83:ac:9e:44:64:32:89:1a:50:33: 0e:b5:ed:97:51:32:00:82:f2:d8:14:6d:a4:f4:61:c9:6c:a5: 04:e3:f9:ef:4d:f8:a4:34:96:0f:cd:14:8f:32:c0:64:5b:75: b0:6e:fc:db:81:06:a8:ec:0d:c7:82:e0:02:7a:7a:64:41:9c: 9d:10:fd:e7:f8:04:34:2f:01:58:a9:ab:82:13:63:ce:b7:fb: 60:3f:44:98:df:d0:c1:39:6e:78:99:6e:de:a5:cf:27:d6:ea: 95:2e:19:e4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND NjBFOUI5QzAeFw0yNjA0MTcwMDAyNTBaFw0yNjA0MjQwMDAyNTBaMBgxFjAUBgNV BAMTDTY5ZTE3OGFhLTVlMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvtbzLX9GADpEHFhBCWw9wc+EVefm8HLP+0zkIOPoc8043Ynaw8vhztlP86Goa hRO462JHxB7IjqnVvIIyoXuouTCgOoQBvHATmQCmc6YYx2mfOq08ypCp1go2+O1U L7IOl2i1Upx6+zj8N9p8dQh2AwEY3kdikr0DPTOXfQVpQG5uqQvYMIOjuwQvY4RS 7fUsg9M85bfM4tw3KTFOhZhXQJMnLVCmofl0lTR+uL2FnOrBL6TBCbRSbk87uPJv KhPTdIdBfvYDsV8tWGc4IuKp/292WbdepYSgkr381+GsQ09Bf2mlxH9cXj7vDWK8 nmn92V0ky6MXyPaFdn2vMnmbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/LyBGGxy ESjAoVLu2Llx8O1mOkowHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBw2WVhixcqKaNE7WoX3Y+u3tGMbscJUfS6hG/d9p7P0XzM1U+i7TVMxwejZ8XU j3B4yZ/IVrjVVbchzhnqZMey8CORbIAYTDSLnL0p3qUsD0G7nqeJVlzKndSPl31h x41egi7QMlex8qf279eZZdtgjVhBP5/3dCOST3bzZIZtRbCpdcUvfHjFZFa8AJ4m twwTT+h4FmYgcoOsnkRkMokaUDMOte2XUTIAgvLYFG2k9GHJbKUE4/nvTfikNJYP zRSPMsBkW3WwbvzbgQao7A3HguACenpkQZydEP3n+AQ0LwFYqauCE2POt/tgP0SY 39DBOW54mW7epc8n1uqVLhnk -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:31 2026 by rpki-client