
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: 3iPwkZ0eiqbiwn/GW37m/IeqrydbjosvQ9H8Ut55tA0=
Subject key identifier: 5F:31:AA:EF:BA:C9:41:5B:94:50:CD:70:DA:57:39:0D:CE:60:35:5F
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 34
Signing time: Wed 13 May 2026 00:12:30 +0000
Manifest this update: Wed 13 May 2026 00:12:29 +0000
Manifest next update: Wed 20 May 2026 00:12:29 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: OYP34SDFjBk9BAWmeryL0uotg0Zbq/QBBC1D8hOqHZ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: May 13 00:12:29 2026 GMT
Not After : May 20 00:12:29 2026 GMT
Subject: CN=6a03c1ee-2eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:f6:46:2e:b8:d8:b8:2a:91:a4:75:af:5d:
02:b9:78:03:d4:dc:74:53:84:14:ac:f4:8b:40:54:
fa:8f:05:dd:9c:f9:b4:68:42:02:36:24:b2:5a:b3:
11:3b:f2:7e:ff:6d:ac:68:a2:0c:a1:a1:fc:3b:c7:
b6:e4:26:3e:ac:15:cd:54:96:5c:94:ce:cf:d3:d5:
dc:a0:be:54:06:74:b9:88:09:43:e6:a0:22:6c:ea:
7e:3f:b5:54:e9:e3:f8:27:8c:6f:ac:f6:3c:34:14:
05:2c:9a:a5:0d:ca:10:d8:ed:51:56:70:9f:f9:02:
ba:f6:98:ae:8c:84:94:e2:fc:11:05:d7:3c:40:f1:
a0:79:f9:6d:3a:ff:0d:b5:bd:41:d5:e7:80:ab:9a:
fa:9c:63:8c:e2:a1:3c:b7:56:6f:dc:0c:30:da:ae:
f4:df:69:c4:1c:b3:ef:87:c7:75:73:e7:12:8b:1e:
9f:ed:71:7e:20:f9:18:5a:3c:9d:f9:c1:6b:9c:b8:
bb:ee:09:9b:f5:b6:39:d0:2b:8d:02:a2:ea:b6:07:
dd:6d:46:05:58:79:9e:63:6f:96:55:49:e3:f7:65:
04:90:c1:94:c1:2c:82:bd:f7:fd:40:85:ac:d6:2a:
70:1a:fd:8e:5c:f2:32:b9:27:26:59:22:2d:1d:63:
58:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:AA:EF:BA:C9:41:5B:94:50:CD:70:DA:57:39:0D:CE:60:35:5F
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:ff:20:a1:a2:83:d3:21:b6:b1:57:2a:54:a5:66:9c:5b:13:
e4:26:81:c8:a7:b4:04:ce:5e:d9:a8:58:5d:41:da:9e:b1:91:
94:ac:0c:aa:35:ca:61:2e:4c:21:1e:e9:d4:7e:8c:8b:d1:eb:
14:64:97:44:cf:3f:c2:af:c4:a4:83:72:08:42:96:98:89:55:
ae:97:90:95:37:9b:7b:1d:b2:de:7e:b4:93:78:52:80:bb:c0:
8c:22:55:36:b7:83:36:4c:b4:2d:76:ad:9e:66:8b:b2:ad:2b:
b8:ad:b3:b2:4a:2d:4e:a7:43:37:5f:5c:50:bc:92:be:f3:5a:
f7:f7:1e:b3:60:b0:bc:0b:1e:70:ed:d2:f8:37:00:91:31:0e:
8b:26:d6:de:13:58:59:9c:d9:cc:27:74:ca:2b:19:48:a7:a0:
25:61:8a:05:fc:bd:90:14:43:d8:93:d9:ec:c3:2f:63:d7:e0:
74:59:ea:39:6f:f4:dd:52:e1:a4:75:8e:cf:db:d4:3d:84:5d:
6b:66:f6:63:ef:98:1c:4c:6f:68:63:6f:9d:2e:e1:69:84:46:
39:1e:2f:7a:00:8f:46:5f:fc:4b:2c:99:b8:fe:65:ee:00:af:
45:75:cd:36:51:da:cf:b6:5d:51:41:9f:f8:0a:d6:de:1a:03:
b6:d3:0b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:34 2026 by rpki-client