$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: aW3khvMFdDaNFyvbGwdQ62T0CY0sP+9Pa8MoR8+Q3MA= Subject key identifier: A9:35:33:37:B4:72:6F:39:6F:23:36:64:18:8D:61:CF:57:A4:92:4A Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0D4D Signing time: Tue 22 Sep 2026 17:58:46 +0000 Manifest this update: Tue 22 Sep 2026 17:58:45 +0000 Manifest next update: Tue 29 Sep 2026 17:58:45 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: 6jyegH/K9VfE47rGGX2D5f6EvkguPelGu48fT8x2I+I=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Sep 22 17:58:45 2026 GMT Not After : Sep 29 17:58:45 2026 GMT Subject: CN=6ab2c1d5-29b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:fe:88:8c:9d:f7:8c:ec:d5:ce:d9:b1:38: b5:f4:90:30:01:6b:e8:05:8d:90:b2:50:7b:88:66: 56:1a:69:4b:2f:c4:94:cb:81:6f:7c:51:d9:10:06: 9c:a7:63:28:36:9b:53:e8:dc:11:96:cf:58:7c:44: 3b:eb:e9:5d:98:c1:ec:80:9b:67:70:e1:b4:0c:3a: 93:6c:9d:81:c1:d8:91:63:8a:5e:6d:d8:d3:d1:f6: cf:06:59:58:ce:56:16:9d:0e:83:7e:fb:9e:76:6a: ce:d0:84:af:5d:bf:bc:85:a9:f8:19:4e:6f:c5:a8: 9a:4f:62:be:8b:2d:a7:74:41:59:41:b9:94:8c:48: 15:c6:d2:2a:98:6d:30:89:33:12:49:6d:50:2f:a6: 00:b0:8f:b4:7b:a9:19:97:2c:8b:b9:5c:5f:16:57: 1a:d8:3d:1b:71:9f:fd:d6:9c:22:9c:6a:10:68:6d: a6:30:ca:12:63:7f:d8:7f:a1:19:de:b1:d0:cd:6e: 11:b6:3f:79:ad:95:38:54:0e:e5:b5:9d:b2:22:a8: 41:06:9d:3f:04:78:83:da:0a:a7:2d:4d:c4:85:53: 6b:54:78:31:60:f8:88:7a:e6:27:0f:ca:de:2f:e9: 4d:ff:72:b9:4e:50:05:fd:4e:67:8f:10:e2:0d:b4: fe:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:35:33:37:B4:72:6F:39:6F:23:36:64:18:8D:61:CF:57:A4:92:4A X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7c:2f:da:c7:f2:14:ac:65:c1:45:94:6a:df:88:90:76:dd: 7c:1a:97:2e:40:7e:4f:df:e9:2b:c2:e1:15:2a:99:04:a8:e4: 29:13:57:42:3f:0f:67:2c:d4:81:fb:72:26:d2:f2:87:7b:b6: 08:43:cc:3a:4c:6e:ca:96:8d:28:93:65:5a:15:fc:35:59:50: ad:71:3f:7c:79:19:f3:cc:7b:ef:24:b6:b9:44:49:95:29:6b: 6c:7c:9d:20:29:cd:23:55:fa:ae:31:b8:d0:2f:4f:87:6b:5c: d3:01:6c:9d:8b:b3:11:fb:3b:26:79:45:1f:26:61:bc:52:27: 7b:57:99:2e:66:ec:8e:6c:2a:5c:cd:c3:09:fb:68:c5:df:3b: 10:16:81:4b:a2:d6:08:2e:48:7b:44:85:b3:45:21:e0:b2:7c: 1f:90:6e:f9:a1:be:05:ce:c3:44:2b:61:83:87:49:47:0e:f5: 28:b3:a7:11:df:e6:9c:92:39:59:09:e9:68:4c:44:ba:95:db: 9c:e0:53:b3:65:62:e7:b4:12:3b:41:62:79:eb:f5:b1:84:0b: 38:f2:36:d4:56:4a:54:b4:cf:24:62:1c:da:4e:e3:dd:1f:7f: 53:08:9e:3e:5e:17:a7:cd:40:cc:f0:6a:f4:18:ba:3c:cd:f4: 30:66:96:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwOTIyMTc1ODQ1WhcNMjYwOTI5MTc1ODQ1WjAYMRYwFAYD VQQDEw02YWIyYzFkNS0yOWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Jb+iIyd94zs1c7ZsTi19JAwAWvoBY2QslB7iGZWGmlLL8SUy4FvfFHZEAac p2MoNptT6NwRls9YfEQ76+ldmMHsgJtncOG0DDqTbJ2BwdiRY4pebdjT0fbPBllY zlYWnQ6DfvuedmrO0ISvXb+8han4GU5vxaiaT2K+iy2ndEFZQbmUjEgVxtIqmG0w iTMSSW1QL6YAsI+0e6kZlyyLuVxfFlca2D0bcZ/91pwinGoQaG2mMMoSY3/Yf6EZ 3rHQzW4Rtj95rZU4VA7ltZ2yIqhBBp0/BHiD2gqnLU3EhVNrVHgxYPiIeuYnD8re L+lN/3K5TlAF/U5njxDiDbT+4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKk1Mze0 cm85byM2ZBiNYc9XpJJKMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJXwv2sfyFKxlwUWUat+IkHbdfBqXLkB+T9/pK8LhFSqZBKjkKRNXQj8PZyzU gftyJtLyh3u2CEPMOkxuypaNKJNlWhX8NVlQrXE/fHkZ88x77yS2uURJlSlrbHyd ICnNI1X6rjG40C9Ph2tc0wFsnYuzEfs7JnlFHyZhvFIne1eZLmbsjmwqXM3DCfto xd87EBaBS6LWCC5Ie0SFs0Uh4LJ8H5Bu+aG+Bc7DRCthg4dJRw71KLOnEd/mnJI5 WQnpaExEupXbnOBTs2Vi57QSO0Fieev1sYQLOPI21FZKVLTPJGIc2k7j3R9/Uwie Pl4Xp81AzPBq9Bi6PM30MGaWjw== -----END CERTIFICATE-----Generated at Wed Sep 23 19:52:11 2026 by rpki-client