$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: 2QnZ+CoIF+w8/MM5mUl/RNft6Qp0yOCRVM2ONb5mPNo= Subject key identifier: C1:13:E6:0D:F6:A3:15:BF:6B:FD:DA:C3:4F:49:75:8A:83:CA:83:A4 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0CFA Signing time: Thu 16 Apr 2026 18:06:32 +0000 Manifest this update: Thu 16 Apr 2026 18:06:32 +0000 Manifest next update: Thu 23 Apr 2026 18:06:32 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: oRRYq/UXcoNMiSx9u+mOzkWuftqoK8xSqteUfG7aYG0=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 3nsdI0Nn7Mgh8t9RARDJXXmnzJJqNGE5v3N1Sor/rHI=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PO5NtRD87mrV7jcOB3vTKQ4iyi5S6EBAtu3hGqNnqRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3344 (0xd10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Apr 16 18:06:32 2026 GMT Not After : Apr 23 18:06:32 2026 GMT Subject: CN=69e12528-b5a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:db:cb:1d:c2:59:7f:21:93:ae:42:3e:19:bb: 99:69:24:89:a4:ab:5c:2a:63:c2:95:50:10:d6:c7: 3f:c6:bd:8a:e3:76:83:3b:50:c3:41:58:b3:6a:ad: d8:37:be:b2:04:f9:82:c8:5a:b4:25:23:c5:b6:13: af:70:20:94:ea:ee:48:76:30:3c:6f:4d:a3:9f:83: 90:7f:ca:8c:d8:ab:71:10:53:25:92:de:b3:64:2c: 96:81:5e:3c:09:86:63:4e:19:85:67:cd:c5:24:2d: 79:38:e0:02:ee:8f:47:a7:49:33:09:16:52:23:05: 1c:2b:cf:55:ea:ae:ad:fd:6e:9e:26:35:7c:43:bd: c1:25:7f:4c:6c:58:34:22:c3:b9:23:7e:d7:33:bc: fd:b5:fc:b9:8e:f0:06:d1:24:de:91:c2:e3:dc:a6: 63:b8:87:3f:6a:5b:74:82:93:e2:9e:06:cb:4d:cf: 48:f0:68:75:25:c3:61:ad:df:e0:43:a9:4e:8d:cd: 97:27:9c:2c:a9:cc:9a:36:b2:13:fc:9f:6b:36:e4: 6a:b5:49:75:06:4f:8a:74:9f:29:ec:e4:ee:10:88: 78:aa:4c:2a:62:46:e4:57:ef:08:c9:2d:07:a3:69: 82:c6:93:19:74:69:af:86:fb:85:3e:5e:5e:52:a6: 78:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:13:E6:0D:F6:A3:15:BF:6B:FD:DA:C3:4F:49:75:8A:83:CA:83:A4 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:7e:93:6f:6b:df:19:b0:8c:5c:a6:77:8c:78:38:cc:d6:fb: 34:03:6f:fb:88:5e:b6:04:87:8c:23:79:eb:e6:9e:30:4c:ae: 94:02:88:cd:d1:69:18:11:55:c5:90:e5:e6:cf:e8:26:78:b7: e5:cf:12:58:68:bd:e3:f7:6f:92:76:c6:94:32:5a:e9:1d:2c: c5:7e:77:1b:96:7b:c1:98:21:9e:1e:11:5c:5d:6e:8d:a4:40: 4a:66:98:dd:07:0f:80:cb:a2:e8:00:55:dd:2f:17:6f:4d:29: 55:fc:75:84:cf:21:32:c1:3e:fd:49:43:d3:dd:28:1f:13:2b: 85:44:d8:de:32:a7:81:ba:8b:f2:de:d7:59:43:8f:4c:de:cc: bf:83:67:7d:d7:6d:2d:70:1b:02:5a:9b:74:1e:6a:6f:6e:ac: 27:2d:7a:d0:d7:b5:6b:bd:a4:e7:63:83:f9:ba:ca:99:dc:a2: 3d:74:72:2c:3a:86:fb:4b:ce:47:f9:3c:5a:12:3c:09:7e:3b: 2f:b9:02:56:dc:27:36:2a:98:3a:23:bc:a0:bd:fb:1d:c0:8b: aa:d6:64:5d:0b:94:4b:12:43:06:7d:b9:6b:9a:f2:a8:c3:f0: 82:4b:4e:e9:17:bb:b7:a8:39:7e:22:79:8e:12:a9:ac:51:a0: 17:90:79:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwNDE2MTgwNjMyWhcNMjYwNDIzMTgwNjMyWjAYMRYwFAYD VQQDEw02OWUxMjUyOC1iNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotvLHcJZfyGTrkI+GbuZaSSJpKtcKmPClVAQ1sc/xr2K43aDO1DDQVizaq3Y N76yBPmCyFq0JSPFthOvcCCU6u5IdjA8b02jn4OQf8qM2KtxEFMlkt6zZCyWgV48 CYZjThmFZ83FJC15OOAC7o9Hp0kzCRZSIwUcK89V6q6t/W6eJjV8Q73BJX9MbFg0 IsO5I37XM7z9tfy5jvAG0STekcLj3KZjuIc/alt0gpPingbLTc9I8Gh1JcNhrd/g Q6lOjc2XJ5wsqcyaNrIT/J9rNuRqtUl1Bk+KdJ8p7OTuEIh4qkwqYkbkV+8IyS0H o2mCxpMZdGmvhvuFPl5eUqZ4LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMET5g32 oxW/a/3aw09JdYqDyoOkMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARX6Tb2vfGbCMXKZ3jHg4zNb7NANv+4hetgSHjCN56+aeMEyulAKIzdFpGBFV xZDl5s/oJni35c8SWGi94/dvknbGlDJa6R0sxX53G5Z7wZghnh4RXF1ujaRASmaY 3QcPgMui6ABV3S8Xb00pVfx1hM8hMsE+/UlD090oHxMrhUTY3jKngbqL8t7XWUOP TN7Mv4NnfddtLXAbAlqbdB5qb26sJy160Ne1a72k52OD+brKmdyiPXRyLDqG+0vO R/k8WhI8CX47L7kCVtwnNiqYOiO8oL37HcCLqtZkXQuUSxJDBn25a5ryqMPwgktO 6Re7t6g5fiJ5jhKprFGgF5B53w== -----END CERTIFICATE-----Generated at Fri Apr 17 13:51:51 2026 by rpki-client