$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: 5uerTQcicvXvstTdyxPRAqoXoEt7ZHF5R+dXbT5hrUM= Subject key identifier: 67:FE:05:AF:1E:69:EC:7E:5F:8A:B8:58:52:25:01:94:D7:A4:95:D9 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 257E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 254A Signing time: Fri 12 Jun 2026 15:01:19 +0000 Manifest this update: Fri 12 Jun 2026 15:01:19 +0000 Manifest next update: Fri 19 Jun 2026 15:01:19 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: Wjx0W14OsOgH1qcJDn6/b5E77Tbqp6IXOssfqJVe/fQ=) 2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: aeyxqgM/Bum6LEnRbk9OqtNY1VCfNbofKFi7pc/FW5U=) 3: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: d70t34kfzJ1P/tOrmndhA9sif675IHxnm4UIqWmVa9U=) 4: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: Q7LCJn4UOngJqKxFQBK5nVd5LUGaCgTS+cghyBmcZLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9598 (0x257e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jun 12 15:01:19 2026 GMT Not After : Jun 19 15:01:19 2026 GMT Subject: CN=6a2c1f3f-a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:33:46:3f:1d:a4:46:bc:09:3d:88:b0:61: dc:e1:7a:e5:4f:25:c8:64:12:65:85:74:b4:84:7e: 47:03:95:3c:e6:d5:87:d6:10:42:af:36:d7:10:ca: 9d:a8:f9:d5:dd:1d:c8:7b:b0:55:48:36:f1:ad:dd: e1:fc:8e:ba:a5:bf:d5:be:4c:1a:e8:ae:49:ec:1d: f6:ff:d0:fb:bc:a8:98:d9:81:9d:06:4b:86:65:ce: 61:cd:55:28:90:c7:ce:1e:15:4d:ea:b3:6f:2d:21: 78:56:93:01:69:76:34:b2:60:55:e4:9a:b8:8c:08: 94:ef:8f:2d:44:d8:09:87:60:6c:58:bb:40:37:fc: 82:81:c4:f9:94:d8:59:7f:9e:13:d9:21:31:7d:90: 6c:e5:a6:b2:d4:01:35:61:5e:14:66:86:ec:d0:2c: 59:17:be:92:d2:52:d3:18:86:6a:d6:b2:2a:a9:d9: 7f:98:ca:07:a5:13:9a:77:1f:2a:ac:ff:cf:1d:80: be:0e:a2:90:02:d4:69:89:8f:8a:4a:0f:47:a8:60: ac:48:aa:62:b3:dd:23:a7:1c:19:99:cf:e7:9f:6a: 8a:e3:fe:27:12:f5:b1:82:af:4b:ce:24:06:c3:ed: e1:65:ea:f1:eb:0b:0e:ae:b9:4d:cd:d0:cb:61:67: 98:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FE:05:AF:1E:69:EC:7E:5F:8A:B8:58:52:25:01:94:D7:A4:95:D9 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:17:49:8b:cd:a9:1f:c8:2d:74:52:da:51:06:63:5a:3f:8c: bb:bd:a0:76:51:cd:7c:41:ba:f0:a1:09:73:60:fc:54:02:88: 9b:e6:df:35:53:98:4c:7c:a5:4a:cd:41:f4:20:8f:06:9b:4f: 60:52:3e:89:00:b6:fc:f5:20:88:77:68:9c:ae:75:35:e5:a3: 70:a8:0d:50:1b:4c:04:0d:b4:3a:30:66:f1:e2:66:15:57:82: d7:3a:28:95:a0:ab:a2:c8:99:09:9b:06:3f:ac:42:a2:b6:cb: dd:1c:97:61:2c:c3:e2:c6:2a:a6:e5:49:ab:3b:65:e1:89:8c: bb:75:3d:f4:20:40:c7:de:77:c0:8a:8d:08:5f:ce:66:63:ec: f0:3e:7c:57:7f:7f:0c:44:90:da:ff:61:66:94:8c:bf:5c:2e: e7:30:b9:7a:11:9e:b8:68:95:30:31:e5:e9:4c:94:7a:2c:d3: 93:cb:65:6b:4d:9c:67:2a:33:f1:ee:7e:22:90:03:91:05:93: cb:ea:87:52:54:5d:df:d3:c5:50:2c:69:31:c4:6d:2f:e1:bf: a7:70:0d:a1:e9:ec:e0:9b:d9:23:a6:08:21:8f:f0:ee:d0:66: 73:94:f6:4a:8a:e9:7d:44:c0:28:6b:a6:e9:3b:48:59:08:72: 9a:b0:8f:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwNjEyMTUwMTE5WhcNMjYwNjE5MTUwMTE5WjAYMRYwFAYD VQQDEw02YTJjMWYzZi1hNWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbgzRj8dpEa8CT2IsGHc4XrlTyXIZBJlhXS0hH5HA5U85tWH1hBCrzbXEMqd qPnV3R3Ie7BVSDbxrd3h/I66pb/Vvkwa6K5J7B32/9D7vKiY2YGdBkuGZc5hzVUo kMfOHhVN6rNvLSF4VpMBaXY0smBV5Jq4jAiU748tRNgJh2BsWLtAN/yCgcT5lNhZ f54T2SExfZBs5aay1AE1YV4UZobs0CxZF76S0lLTGIZq1rIqqdl/mMoHpROadx8q rP/PHYC+DqKQAtRpiY+KSg9HqGCsSKpis90jpxwZmc/nn2qK4/4nEvWxgq9LziQG w+3hZerx6wsOrrlNzdDLYWeYVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGf+Ba8e aex+X4q4WFIlAZTXpJXZMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiRdJi82pH8gtdFLaUQZjWj+Mu72gdlHNfEG68KEJc2D8VAKIm+bfNVOYTHyl Ss1B9CCPBptPYFI+iQC2/PUgiHdonK51NeWjcKgNUBtMBA20OjBm8eJmFVeC1zoo laCrosiZCZsGP6xCorbL3RyXYSzD4sYqpuVJqztl4YmMu3U99CBAx953wIqNCF/O ZmPs8D58V39/DESQ2v9hZpSMv1wu5zC5ehGeuGiVMDHl6UyUeizTk8tla02cZyoz 8e5+IpADkQWTy+qHUlRd39PFUCxpMcRtL+G/p3ANoens4JvZI6YIIY/w7tBmc5T2 SorpfUTAKGum6TtIWQhymrCPJA== -----END CERTIFICATE-----Generated at Sun Jun 14 04:25:02 2026 by rpki-client