$ rpki-client -vvvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json) Hash identifier: xwvNIqUFEllSJ0Ayhmii4sJn+nfRYvjAKSciUKgk0o8= Subject key identifier: 2C:47:7A:5B:C5:C1:9F:90:C9:19:E0:DC:9A:DE:D4:1D:13:55:AE:AC Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft Manifest number: 93 Signing time: Sat 14 Nov 2026 23:34:33 +0000 Manifest this update: Sat 14 Nov 2026 23:34:33 +0000 Manifest next update: Sat 21 Nov 2026 23:34:33 +0000 Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: Qqmis36uSWk4eNSxzxUfc4aGc3OKdA8WO3nK5GFrPM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Validity Not Before: Nov 14 23:34:33 2026 GMT Not After : Nov 21 23:34:33 2026 GMT Subject: CN=6af8f009-6eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e3:96:57:4b:e4:da:40:88:9b:1d:53:cc:61: 54:2a:16:37:3f:43:34:ee:05:e3:f0:3e:21:29:22: 48:10:90:e1:34:18:d7:38:fa:b3:79:e6:0a:d8:52: 63:3b:40:bb:02:ac:6d:7d:14:67:e2:cf:4b:f0:ac: 91:07:c1:0e:d1:11:35:64:4f:c8:e7:c1:07:f4:a2: 70:5b:61:9f:0d:62:34:70:6f:76:77:07:79:25:82: 39:d0:54:4f:a7:bb:71:b9:0f:09:cd:f5:d4:6f:d2: 31:9a:cd:79:43:3f:a5:7d:29:cf:a8:93:a2:4a:1c: 43:ad:d7:58:07:3b:7b:ab:dd:ef:c7:32:50:1d:ae: 0c:db:80:ea:35:7c:e8:eb:23:6d:8e:76:2e:f4:c8: b4:07:06:ea:3b:9f:b3:89:08:5c:63:62:92:9c:70: 42:25:5d:77:3b:d9:74:02:18:18:9b:24:a8:a9:6a: 68:d9:b3:5f:28:e5:87:bd:c9:9c:eb:57:ba:2f:16: 7c:95:7e:32:6f:13:e5:e9:0c:cf:46:66:05:76:9c: 02:d9:49:81:13:75:60:0f:3e:80:56:97:0d:ba:50: c1:55:b9:85:72:62:ea:16:24:ca:e7:4d:21:5f:3f: fa:dd:8c:ff:c6:40:37:fc:d9:92:0d:39:86:8a:5d: 3d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:47:7A:5B:C5:C1:9F:90:C9:19:E0:DC:9A:DE:D4:1D:13:55:AE:AC X509v3 Authority Key Identifier: keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c1:04:e1:12:67:e1:68:a5:d4:45:62:c0:94:cd:8a:4c:21: 25:63:2d:35:d2:a6:74:13:41:26:3d:e6:7d:73:50:db:8a:20: 87:59:7e:d8:7f:20:a4:5d:f7:00:74:4c:c0:92:83:36:36:46: 63:51:9b:9d:8c:7f:75:6e:7a:08:f4:29:c0:6c:76:6f:4b:57: d2:6b:3b:85:b9:73:98:67:33:b8:f8:04:6b:a0:0c:0b:85:38: 5a:e3:e0:01:f5:34:40:bf:99:9a:d7:f7:b1:f9:f3:d1:ba:fd: 46:dd:39:55:84:5a:65:ea:82:f3:0d:cc:9a:8e:2f:5e:d7:28: 28:0b:71:be:2f:ac:ef:64:ad:62:cf:66:b8:fb:cc:a3:03:41: 2f:a2:4e:bd:6e:ed:7a:67:ca:56:fa:a2:f7:ad:26:a7:f4:b5: bc:d6:dc:03:59:db:f7:40:35:33:1f:fa:57:78:f6:d5:af:2d: dc:dc:00:26:d9:9b:54:69:14:44:f1:ae:87:94:b9:03:1f:f1: 73:e7:10:1e:46:a1:62:2f:81:c0:6e:52:f1:fc:c6:a6:5d:4b: 67:40:46:4b:a2:11:b4:36:c0:80:99:28:fe:49:f5:57:93:d6: 6f:eb:f4:3a:e3:03:03:72:8f:99:a3:9f:72:a2:70:54:db:67: 3c:05:89:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg5QTIxMTAvBgNVBAUTKDEyQjZFNUUxOEY3REMxMDAxQ0UwOEFGMTNERDA0RDcz QzYwRTlCOUMwHhcNMjYxMTE0MjMzNDMzWhcNMjYxMTIxMjMzNDMzWjAYMRYwFAYD VQQDEw02YWY4ZjAwOS02ZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOOWV0vk2kCImx1TzGFUKhY3P0M07gXj8D4hKSJIEJDhNBjXOPqzeeYK2FJj O0C7AqxtfRRn4s9L8KyRB8EO0RE1ZE/I58EH9KJwW2GfDWI0cG92dwd5JYI50FRP p7txuQ8JzfXUb9Ixms15Qz+lfSnPqJOiShxDrddYBzt7q93vxzJQHa4M24DqNXzo 6yNtjnYu9Mi0BwbqO5+ziQhcY2KSnHBCJV13O9l0AhgYmySoqWpo2bNfKOWHvcmc 61e6LxZ8lX4ybxPl6QzPRmYFdpwC2UmBE3VgDz6AVpcNulDBVbmFcmLqFiTK500h Xz/63Yz/xkA3/NmSDTmGil09kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxHelvF wZ+QyRng3Jre1B0TVa6sMB8GA1UdIwQYMBaAFBK25eGPfcEAHOCK8T3QTXPGDpuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODlBMi9COUNDRDM5RTA2 MkMxMUYxQkFDODkzRkMyNjNEOEM2Ny9FcmJsNFk5OXdRQWM0SXJ4UGRCTmM4WU9t NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODlBMi9COUNDRDM5RTA2MkMxMUYxQkFDODkzRkMyNjNEOEM2Ny9FcmJsNFk5OXdR QWM0SXJ4UGRCTmM4WU9tNXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIcEE4RJn4Wil1EViwJTNikwhJWMtNdKmdBNBJj3mfXNQ24ogh1l+2H8gpF33 AHRMwJKDNjZGY1GbnYx/dW56CPQpwGx2b0tX0ms7hblzmGczuPgEa6AMC4U4WuPg AfU0QL+Zmtf3sfnz0br9Rt05VYRaZeqC8w3Mmo4vXtcoKAtxvi+s72StYs9muPvM owNBL6JOvW7temfKVvqi960mp/S1vNbcA1nb90A1Mx/6V3j21a8t3NwAJtmbVGkU RPGuh5S5Ax/xc+cQHkahYi+BwG5S8fzGpl1LZ0BGS6IRtDbAgJko/kn1V5PWb+v0 OuMDA3KPmaOfcqJwVNtnPAWJXg== -----END CERTIFICATE-----Generated at Sun Nov 15 14:05:29 2026 by rpki-client