$ rpki-client -vvvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json) Hash identifier: p9YVRRnMwJVRYW0Jt/rsZ4EJ3uh3vKvwcBNer4Eu0fk= Subject key identifier: AF:38:B6:E8:35:BD:32:16:DE:5D:E4:B4:F4:4F:62:B8:73:81:94:C6 Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft Manifest number: 78 Signing time: Tue 22 Sep 2026 23:31:10 +0000 Manifest this update: Tue 22 Sep 2026 23:31:10 +0000 Manifest next update: Tue 29 Sep 2026 23:31:10 +0000 Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: Ma+wXZtnDM1N+6FJN3MAc4uBmyMrTY6muQZwOvSn7pA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:31:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Validity Not Before: Sep 22 23:31:10 2026 GMT Not After : Sep 29 23:31:10 2026 GMT Subject: CN=6ab30fbe-772a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:76:3e:a4:ec:9d:51:41:78:9c:5c:3d:b4:a3: ec:56:cc:7b:9c:0d:95:c9:f3:c2:b7:56:89:00:62: a2:d0:10:2d:2e:02:7b:21:be:40:b4:c4:61:38:af: 2e:08:6d:8e:43:44:50:b5:13:f9:de:0d:10:f5:22: 21:a6:aa:b0:07:e4:0d:66:19:25:a8:30:e8:eb:4d: c2:ce:fb:6f:53:64:3d:06:be:59:4e:d1:ac:14:01: 17:8f:2c:b2:f9:21:98:c6:3d:ae:ba:90:bf:ac:c6: 09:de:33:2f:c5:94:ef:37:ea:05:d3:b2:45:16:e7: 77:25:45:69:b6:90:3b:16:fc:04:f9:57:12:e4:a8: 87:c0:84:57:5e:7a:db:c4:5d:42:97:1b:53:3c:4f: a0:fb:b3:a7:9b:bb:eb:04:a9:97:ec:6d:3f:f1:d8: 1a:7f:cc:fd:d8:23:94:a1:95:d8:a4:77:c6:2f:95: 1e:1b:8f:1a:98:f3:53:29:1f:ad:ef:bd:25:05:a1: 93:b6:fa:c5:97:ee:18:2d:41:df:46:a8:86:dc:45: c6:9e:08:39:31:7b:9e:89:05:ee:a7:a0:65:c1:90: 07:34:af:0a:8b:5f:4e:61:d2:c8:51:ce:79:66:02: df:09:ff:30:79:18:e9:34:9a:d1:d0:1b:29:b0:89: 6e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:B6:E8:35:BD:32:16:DE:5D:E4:B4:F4:4F:62:B8:73:81:94:C6 X509v3 Authority Key Identifier: keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:db:1d:29:54:91:91:18:ff:27:7c:75:a9:be:ca:da:be:d3: fe:4a:9d:92:97:8a:9d:dd:d8:37:75:08:24:72:66:92:c4:a1: 0d:0f:0e:59:7f:d1:db:5d:8f:50:4b:31:4b:79:8f:31:cd:7d: b7:64:80:27:ae:9a:d2:14:e3:ae:38:65:07:ce:f1:15:1a:b3: 52:bd:b7:f7:a2:0e:9f:82:92:9e:94:eb:da:2d:4b:8c:f7:ad: 1c:bb:44:70:c1:c0:34:49:eb:72:ce:6b:5a:10:4f:a3:59:e2: 72:b5:ae:bb:33:7c:09:29:f0:c0:76:ba:92:e3:7f:3b:83:2c: fa:79:38:fe:b2:ec:1f:4a:0f:b0:b5:e0:52:2d:ad:a1:50:40: 7b:87:60:fe:c2:ec:03:b7:c4:00:1c:af:65:71:7a:a1:4a:a9: 69:8e:bf:ec:84:8f:55:a8:41:0c:53:75:c9:62:1b:5f:1c:5e: a7:85:8e:ea:48:be:02:06:08:0f:e3:b7:e6:77:5b:0d:be:04: 49:9f:ca:17:65:18:2f:bf:62:65:34:21:84:5f:cb:7d:d8:1f: 87:46:c3:36:e8:3b:86:79:ab:39:30:2c:c4:87:7d:db:ee:d2: 06:b3:f8:4c:8a:bc:10:c8:ce:bb:4c:56:3b:0b:e1:72:02:b3: 99:cd:a7:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND NjBFOUI5QzAeFw0yNjA5MjIyMzMxMTBaFw0yNjA5MjkyMzMxMTBaMBgxFjAUBgNV BAMTDTZhYjMwZmJlLTc3MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYdj6k7J1RQXicXD20o+xWzHucDZXJ88K3VokAYqLQEC0uAnshvkC0xGE4ry4I bY5DRFC1E/neDRD1IiGmqrAH5A1mGSWoMOjrTcLO+29TZD0GvllO0awUARePLLL5 IZjGPa66kL+sxgneMy/FlO836gXTskUW53clRWm2kDsW/AT5VxLkqIfAhFdeetvE XUKXG1M8T6D7s6ebu+sEqZfsbT/x2Bp/zP3YI5Shldikd8YvlR4bjxqY81MpH63v vSUFoZO2+sWX7hgtQd9GqIbcRcaeCDkxe56JBe6noGXBkAc0rwqLX05h0shRznlm At8J/zB5GOk0mtHQGymwiW6rAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrzi26DW9 MhbeXeS09E9iuHOBlMYwHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCc2x0pVJGRGP8nfHWpvsravtP+Sp2Sl4qd3dg3dQgkcmaSxKENDw5Zf9HbXY9Q SzFLeY8xzX23ZIAnrprSFOOuOGUHzvEVGrNSvbf3og6fgpKelOvaLUuM960cu0Rw wcA0SetyzmtaEE+jWeJyta67M3wJKfDAdrqS4387gyz6eTj+suwfSg+wteBSLa2h UEB7h2D+wuwDt8QAHK9lcXqhSqlpjr/shI9VqEEMU3XJYhtfHF6nhY7qSL4CBggP 47fmd1sNvgRJn8oXZRgvv2JlNCGEX8t92B+HRsM26DuGeas5MCzEh33b7tIGs/hM irwQyM67TFY7C+FyArOZzac7 -----END CERTIFICATE-----Generated at Wed Sep 23 12:36:19 2026 by rpki-client