$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json) Hash identifier: 0TDMOj9fAnpD0a+qKLHnB9kqAO3c6k8irb0WEbBx9pY= Subject key identifier: 03:F8:4E:19:86:56:B0:A1:82:16:82:34:CD:EB:A4:90:0A:79:B4:98 Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft Manifest number: 5A Signing time: Mon 27 Jul 2026 00:59:31 +0000 Manifest this update: Mon 27 Jul 2026 00:59:30 +0000 Manifest next update: Mon 03 Aug 2026 00:59:30 +0000 Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: WzltctC2IDW1xSrs0vFHM4FkYfNT9z1weItiQ5uz/Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Validity Not Before: Jul 27 00:59:30 2026 GMT Not After : Aug 3 00:59:30 2026 GMT Subject: CN=6a66ad73-60a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:aa:85:58:9e:cf:e6:90:e8:75:16:7f:2b:cb: 81:a4:ac:e7:28:16:10:e0:e1:37:c2:1a:26:cd:f6: 48:a3:c7:ef:2b:97:6e:37:c3:c9:13:62:35:6d:db: fe:14:65:12:b9:d9:95:f8:d3:0b:ef:8a:ab:4e:88: de:65:a9:77:da:35:9d:b0:91:64:03:0c:f9:0b:df: 95:4d:99:ae:85:27:91:01:79:8c:22:24:a7:b7:ee: fb:2e:dd:ad:38:b5:7a:20:b8:ed:22:89:af:86:cc: 18:24:60:19:3a:71:1d:09:16:4a:2f:14:f2:81:29: b3:f4:60:8e:01:ab:bc:a1:34:ee:81:a8:d4:5d:e4: ab:06:37:99:2c:58:d2:35:69:95:92:41:79:bc:62: 79:3d:28:6a:6e:ee:3e:f5:44:f7:56:ac:ca:25:72: ae:f6:5e:e7:3f:f7:51:bb:3c:d4:2f:72:9b:be:bc: 8d:f7:fa:78:e4:45:83:18:62:09:2c:2c:c4:70:db: 29:73:ea:b3:77:ec:86:c4:96:5e:0d:71:42:c5:db: 6c:ac:c0:2c:02:f8:3c:9d:bc:d3:ba:c5:88:a1:68: 2e:72:c5:56:46:8c:38:ec:04:c3:9c:67:f3:0e:13: 15:ff:e5:92:c2:97:3b:67:23:41:1c:c1:38:46:57: 1a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F8:4E:19:86:56:B0:A1:82:16:82:34:CD:EB:A4:90:0A:79:B4:98 X509v3 Authority Key Identifier: keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:8b:25:65:a3:15:59:9b:4e:5b:3d:a6:ca:89:6b:9e:73:e6: ca:37:90:c1:e6:0f:37:c5:76:80:b5:68:cc:86:7c:83:84:a1: 66:4d:24:7c:d7:6e:9d:cf:60:8b:09:5e:ed:00:76:0a:2c:fe: 73:b5:fa:aa:19:b5:d0:3b:a9:9f:b8:96:ff:f5:f2:c7:b2:93: 2b:31:45:b7:14:d6:46:b6:52:67:3b:d7:05:1d:05:2c:2d:ae: 0d:f0:a0:d7:e9:af:44:cc:39:59:6b:d8:b7:63:ad:38:16:bb: 24:82:d1:e5:18:18:72:21:bf:be:1e:38:80:89:6a:47:e7:51: b9:46:5d:95:b2:af:8d:02:a0:3d:0f:4e:43:93:53:1e:9f:46: 09:e7:3f:23:38:35:c5:eb:d6:cb:1d:2e:2d:95:f1:0a:44:25: 6b:0a:0d:e6:84:12:52:23:49:83:c0:ed:7e:67:89:eb:a6:1f: 3b:12:39:97:06:34:3a:37:b7:34:96:b3:2a:59:61:30:7a:02: 53:56:9b:71:99:64:83:79:42:47:bc:40:99:b4:bc:d1:65:c2: 48:1d:e0:cf:23:cd:c6:2b:49:21:d6:70:4c:15:0f:c0:5f:2e: 11:4a:d1:83:e9:a8:2a:d2:cb:3a:41:da:b7:d8:7d:5f:b0:35: d8:a8:29:74 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND NjBFOUI5QzAeFw0yNjA3MjcwMDU5MzBaFw0yNjA4MDMwMDU5MzBaMBgxFjAUBgNV BAMTDTZhNjZhZDczLTYwYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQqoVYns/mkOh1Fn8ry4GkrOcoFhDg4TfCGibN9kijx+8rl243w8kTYjVt2/4U ZRK52ZX40wvviqtOiN5lqXfaNZ2wkWQDDPkL35VNma6FJ5EBeYwiJKe37vsu3a04 tXoguO0iia+GzBgkYBk6cR0JFkovFPKBKbP0YI4Bq7yhNO6BqNRd5KsGN5ksWNI1 aZWSQXm8Ynk9KGpu7j71RPdWrMolcq72Xuc/91G7PNQvcpu+vI33+njkRYMYYgks LMRw2ylz6rN37IbEll4NcULF22yswCwC+DydvNO6xYihaC5yxVZGjDjsBMOcZ/MO ExX/5ZLClztnI0EcwThGVxorAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA/hOGYZW sKGCFoI0zeukkAp5tJgwHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAEiyVloxVZm05bPabKiWuec+bKN5DB5g83xXaAtWjMhnyDhKFmTSR8126dz2CL CV7tAHYKLP5ztfqqGbXQO6mfuJb/9fLHspMrMUW3FNZGtlJnO9cFHQUsLa4N8KDX 6a9EzDlZa9i3Y604FrskgtHlGBhyIb++HjiAiWpH51G5Rl2Vsq+NAqA9D05Dk1Me n0YJ5z8jODXF69bLHS4tlfEKRCVrCg3mhBJSI0mDwO1+Z4nrph87EjmXBjQ6N7c0 lrMqWWEwegJTVptxmWSDeUJHvECZtLzRZcJIHeDPI83GK0kh1nBMFQ/AXy4RStGD 6agq0ss6Qdq32H1fsDXYqCl0 -----END CERTIFICATE-----Generated at Tue Jul 28 21:57:36 2026 by rpki-client