$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json) Hash identifier: iSrUUxYFD0mT/aE5O1DlJBllYbfv/WYgTrIuCUH8zzg= Subject key identifier: 8A:2C:4A:81:40:79:DF:16:D1:EC:21:C0:F8:1B:B3:32:05:88:A8:E9 Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft Manifest number: 1B Signing time: Tue 24 Mar 2026 23:50:58 +0000 Manifest this update: Tue 24 Mar 2026 23:50:58 +0000 Manifest next update: Tue 31 Mar 2026 23:50:58 +0000 Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: tqxlUamzTg6VmAEG5Cd7aKlfrl8x0cifGoMMhqs84I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C Validity Not Before: Mar 24 23:50:58 2026 GMT Not After : Mar 31 23:50:58 2026 GMT Subject: CN=69c32362-f6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:f0:59:67:79:ff:4d:84:a5:9f:72:30:b9: 2e:1c:9e:43:b6:ae:4b:e5:55:93:ca:da:1d:ba:96: 65:ce:ce:d6:2d:b1:5d:1c:65:5d:e9:f1:dc:eb:d2: dc:4b:9a:4c:5d:b7:5c:2f:5d:31:62:e9:3e:de:17: a5:cd:1b:e7:98:e4:a1:ea:64:81:f2:01:72:5e:c6: e4:81:8c:bb:00:73:91:88:83:92:dd:90:16:18:0f: 4e:07:49:dc:6c:b7:d0:55:2b:ed:88:92:8e:3e:98: e5:2a:bd:98:87:ce:09:7d:c0:5f:4b:37:5b:ac:71: c0:54:98:3a:16:31:0e:85:f9:3c:44:3a:be:ba:bb: dd:02:2d:60:a8:b3:e8:f7:a8:41:e0:77:2c:fe:00: 4b:18:a2:a5:fa:54:66:a4:85:05:bd:05:d6:af:93: 8f:3e:4d:fe:48:d9:29:c9:c2:e1:6a:80:cc:4e:f4: cd:40:8e:44:2f:a0:de:49:01:f9:71:0c:8a:c4:42: 95:4b:3f:d1:75:ac:78:d4:8b:50:26:04:b5:3e:09: a6:3b:66:29:52:b7:c4:6a:95:dc:bb:7b:66:36:b8: 60:bc:cc:a9:a6:1d:dc:4c:bc:86:76:c0:34:70:fa: 13:1f:62:fe:8c:18:69:2a:38:b5:33:a9:8c:ba:60: 4e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2C:4A:81:40:79:DF:16:D1:EC:21:C0:F8:1B:B3:32:05:88:A8:E9 X509v3 Authority Key Identifier: keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:20:a6:5d:2f:7e:2c:b4:54:c4:d9:51:6e:c6:60:9d:bb:4f: 11:b9:ee:ca:16:2d:66:f7:ce:8e:f6:e6:1e:bc:35:ff:5e:08: bf:53:fc:b3:49:25:a9:b3:15:80:bf:b2:19:82:e6:32:8a:13: 3e:f3:c6:06:32:af:73:4a:df:f3:61:7c:2a:3d:ca:48:e7:6f: 32:a6:52:05:18:40:3d:b5:77:90:e3:4d:e2:ed:c5:e9:26:06: af:d1:62:44:94:cb:49:5f:98:43:87:8f:c4:fe:e2:6e:ac:c9: b6:f5:32:65:0c:35:91:9d:4c:95:03:ef:ef:53:49:38:be:d0: fe:5d:cd:2e:f0:ef:b3:fc:05:05:f1:e2:e1:46:60:5f:97:7a: 9e:91:1e:7e:48:20:0f:f3:fc:60:23:ff:ca:96:5d:f0:95:d3: 94:4a:21:10:4c:d4:1d:db:e9:83:e5:26:ca:c7:85:db:2e:d1: 51:cf:21:6d:05:7d:bf:f2:1a:26:3b:03:3e:83:84:20:25:31: ae:74:c0:e1:7a:de:a0:a7:43:33:2f:07:c6:a7:6c:28:4b:b4: b2:dd:32:a0:19:ac:bd:51:3a:18:a5:c5:de:75:02:4c:c1:40: 12:22:ac:ee:1a:ec:ff:f2:ff:3a:d6:51:e2:d3:73:01:07:e6: 63:9f:53:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND NjBFOUI5QzAeFw0yNjAzMjQyMzUwNThaFw0yNjAzMzEyMzUwNThaMBgxFjAUBgNV BAMTDTY5YzMyMzYyLWY2YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBAPBZZ3n/TYSln3IwuS4cnkO2rkvlVZPK2h26lmXOztYtsV0cZV3p8dzr0txL mkxdt1wvXTFi6T7eF6XNG+eY5KHqZIHyAXJexuSBjLsAc5GIg5LdkBYYD04HSdxs t9BVK+2Iko4+mOUqvZiHzgl9wF9LN1usccBUmDoWMQ6F+TxEOr66u90CLWCos+j3 qEHgdyz+AEsYoqX6VGakhQW9Bdavk48+Tf5I2SnJwuFqgMxO9M1AjkQvoN5JAflx DIrEQpVLP9F1rHjUi1AmBLU+CaY7ZilSt8Rqldy7e2Y2uGC8zKmmHdxMvIZ2wDRw +hMfYv6MGGkqOLUzqYy6YE6xAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiixKgUB5 3xbR7CHA+BuzMgWIqOkwHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXIKZdL34stFTE2VFuxmCdu08Rue7KFi1m986O9uYevDX/Xgi/U/yzSSWpsxWA v7IZguYyihM+88YGMq9zSt/zYXwqPcpI528yplIFGEA9tXeQ403i7cXpJgav0WJE lMtJX5hDh4/E/uJurMm29TJlDDWRnUyVA+/vU0k4vtD+Xc0u8O+z/AUF8eLhRmBf l3qekR5+SCAP8/xgI//Kll3wldOUSiEQTNQd2+mD5SbKx4XbLtFRzyFtBX2/8hom OwM+g4QgJTGudMDhet6gp0MzLwfGp2woS7Sy3TKgGay9UToYpcXedQJMwUASIqzu Guz/8v861lHi03MBB+Zjn1Ot -----END CERTIFICATE-----Generated at Thu Mar 26 12:32:59 2026 by rpki-client