$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: B9a4/+AoEiTt5SHWkXvhrfcKOUHlOUJqZn9DghFlzF4= Subject key identifier: F8:BB:11:57:A5:ED:D4:02:7C:F6:B5:58:85:C5:F3:8E:57:41:C5:A5 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 25B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2582 Signing time: Sun 20 Sep 2026 14:59:57 +0000 Manifest this update: Sun 20 Sep 2026 14:59:56 +0000 Manifest next update: Sun 27 Sep 2026 14:59:56 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: Dk1PAf8i57o/24QynG6LTIxnvchbn5ZkRt+RCGsGuZ8=) 2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: wltUxvT2gIrkk4cq9N351wOYzI5GH6/ywEsI+BXEuw0=) 3: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: Z4Rm3AAC08xH1t9OYPaZB/yfoesNVGIoDscrROCpTs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 14:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9657 (0x25b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Sep 20 14:59:56 2026 GMT Not After : Sep 27 14:59:56 2026 GMT Subject: CN=6aaff4ec-500d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:be:a8:fc:1d:2d:de:05:a5:9d:67:d7:cc:1c: 3a:c5:5a:f2:db:9d:bd:8d:bb:4f:97:47:41:ef:a4: b9:8e:4b:22:86:7e:d1:eb:f9:8c:3e:cc:3a:c0:f3: dd:62:99:db:01:ed:87:b3:84:d5:dd:08:fc:c4:8c: af:3f:7d:3e:3f:c3:f2:21:c4:86:b4:5d:2b:a9:74: a6:b7:ea:df:f2:26:44:27:87:5c:00:cf:37:dd:87: f5:11:d6:52:3f:8b:33:df:d3:58:f0:5e:be:18:0d: cd:d0:50:19:a9:fc:53:4d:04:b3:98:ad:05:37:10: 20:2c:a6:8d:bb:10:3d:8e:64:03:95:54:fa:c1:f8: be:12:87:93:6b:1c:97:7b:4d:84:9f:33:a2:7a:21: cc:5d:b3:d5:fe:c9:92:d3:73:ed:36:95:2d:ef:42: 7a:60:70:e5:a4:f3:28:40:1b:b5:14:82:6a:b0:dc: 12:8b:70:08:a5:16:85:de:3b:26:3a:bc:7d:16:77: 73:22:27:a0:ba:4b:15:00:85:67:9a:c0:16:cf:c0: c5:b4:49:d1:4e:ca:17:79:6b:92:a9:41:7e:e0:8f: 52:ab:65:e0:30:d9:ac:8b:5f:be:46:3f:26:d1:e2: 98:10:88:29:6d:7b:1f:83:f7:29:33:e1:d1:b6:2c: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BB:11:57:A5:ED:D4:02:7C:F6:B5:58:85:C5:F3:8E:57:41:C5:A5 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:19:38:82:50:17:f5:c8:32:66:91:83:6f:94:5e:90:18:ea: 82:d8:57:bb:21:dc:ed:d0:ad:24:4e:08:6a:7c:e0:c6:87:40: fd:42:c6:fe:37:bc:29:33:7c:e2:84:6c:9f:ab:f7:41:b3:82: 41:a3:9c:48:04:83:6b:e7:ca:5f:d9:00:b9:4e:b5:71:08:5f: ca:fc:30:b2:b3:46:dd:04:4c:1d:b7:a3:9c:80:c1:e8:71:ba: 22:0b:e2:93:96:df:75:a2:b5:30:b7:ca:0e:49:4b:b8:89:d7: 80:0a:0f:1e:06:8b:03:e3:ed:eb:b0:ff:e9:e9:aa:09:3c:36: c3:8c:c8:0b:0c:0e:60:db:cc:41:bb:8e:75:ff:7f:f6:1f:c6: 2d:e7:1f:d8:8b:6a:80:42:1f:eb:04:22:c7:a7:9d:ae:e5:1f: b6:08:da:38:6c:a6:5b:5d:ff:99:95:cc:62:4d:5f:dc:ec:26: c1:34:e8:83:6a:0d:86:99:07:df:5a:1c:27:ab:b9:17:4e:99: e3:3c:10:f4:08:f2:9d:7e:ea:8a:20:b7:e3:fe:e0:8a:83:d3: 2e:c9:c0:9d:97:c8:72:e1:3c:81:80:bc:53:44:7f:7a:ad:b7: 17:43:14:50:e6:a0:b3:8a:5c:0f:e4:1c:7b:fb:14:b0:37:5a: 8a:80:36:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwOTIwMTQ1OTU2WhcNMjYwOTI3MTQ1OTU2WjAYMRYwFAYD VQQDEw02YWFmZjRlYy01MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp76o/B0t3gWlnWfXzBw6xVry2529jbtPl0dB76S5jksihn7R6/mMPsw6wPPd YpnbAe2Hs4TV3Qj8xIyvP30+P8PyIcSGtF0rqXSmt+rf8iZEJ4dcAM833Yf1EdZS P4sz39NY8F6+GA3N0FAZqfxTTQSzmK0FNxAgLKaNuxA9jmQDlVT6wfi+EoeTaxyX e02EnzOieiHMXbPV/smS03PtNpUt70J6YHDlpPMoQBu1FIJqsNwSi3AIpRaF3jsm Orx9FndzIieguksVAIVnmsAWz8DFtEnRTsoXeWuSqUF+4I9Sq2XgMNmsi1++Rj8m 0eKYEIgpbXsfg/cpM+HRtiy0nQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPi7EVel 7dQCfPa1WIXF845XQcWlMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0Bk4glAX9cgyZpGDb5RekBjqgthXuyHc7dCtJE4IanzgxodA/ULG/je8KTN8 4oRsn6v3QbOCQaOcSASDa+fKX9kAuU61cQhfyvwwsrNG3QRMHbejnIDB6HG6Igvi k5bfdaK1MLfKDklLuInXgAoPHgaLA+Pt67D/6emqCTw2w4zICwwOYNvMQbuOdf9/ 9h/GLecf2ItqgEIf6wQix6edruUftgjaOGymW13/mZXMYk1f3OwmwTTog2oNhpkH 31ocJ6u5F06Z4zwQ9AjynX7qiiC34/7gioPTLsnAnZfIcuE8gYC8U0R/eq23F0MU UOags4pcD+Qce/sUsDdaioA2Pw== -----END CERTIFICATE-----Generated at Mon Sep 21 18:13:16 2026 by rpki-client