$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: v4ntUZVlL6DpvKujrnLQWrFjM+crVeuZwDjaxVjFjlY= Subject key identifier: 5C:BC:DF:80:70:9A:D7:20:A1:02:B5:4E:EB:7F:91:F3:97:60:EC:19 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0D2D Signing time: Wed 22 Jul 2026 18:22:04 +0000 Manifest this update: Wed 22 Jul 2026 18:22:03 +0000 Manifest next update: Wed 29 Jul 2026 18:22:03 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: VrK+5LHZ6K8qi/oW+8cwD5LV+AKiKYMGhLFuW2sUguE=) 2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks=) 3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Jul 22 18:22:03 2026 GMT Not After : Jul 29 18:22:03 2026 GMT Subject: CN=6a610a4b-b871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:43:3b:53:a3:8c:4f:fb:84:32:3a:01:27: cc:bd:29:17:4d:55:7d:8d:ce:c3:59:8f:1c:77:d8: 31:0c:b8:e2:8d:c0:32:c5:82:49:7d:0b:81:bf:2f: b6:9b:53:50:d5:ba:b3:18:a7:db:05:20:8e:16:7a: bc:08:2a:d7:77:6b:a3:85:e0:ce:d2:73:53:23:ae: 13:50:ec:0a:4b:5f:66:9a:04:7a:7b:c7:03:db:01: d5:6e:66:95:30:a7:17:df:d4:ef:10:08:72:80:df: 16:c4:15:dd:80:ff:72:eb:0b:83:4e:1c:88:34:e9: 18:38:ed:74:7b:54:34:8f:c8:8a:42:74:74:c2:92: cb:6a:cb:86:49:71:36:00:fa:ca:1b:ae:25:9e:33: 33:d8:95:ca:7c:b3:97:d2:69:2d:90:8d:d0:49:25: c2:1e:3b:02:9e:1c:bf:0c:b0:96:bf:8a:9e:d4:19: 55:98:f8:1a:53:8c:30:e6:68:01:c2:ec:aa:8d:40: a0:27:16:42:54:82:46:0c:ea:74:4c:1d:8a:3a:94: 39:e5:e6:c7:59:6b:56:f2:e6:5c:dc:55:42:59:5e: 8d:3f:b8:14:90:0c:a9:be:ab:f5:6a:d7:fe:24:f8: 98:c2:b4:40:fe:3d:8b:f8:bf:c4:09:e6:88:b0:86: f5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BC:DF:80:70:9A:D7:20:A1:02:B5:4E:EB:7F:91:F3:97:60:EC:19 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2c:36:3d:54:35:02:dc:01:d1:32:a2:9e:ba:58:80:4f:71: 38:7c:03:5b:b1:d4:3b:b0:8c:3e:de:86:d6:ac:6c:5f:07:8b: b6:79:cd:ac:44:96:3d:54:85:1b:53:c9:2f:1b:9a:8d:85:12: e4:20:35:c7:60:8d:b3:35:26:01:aa:42:f2:ba:22:83:be:bd: 8a:e2:ae:2e:5c:54:df:c1:f4:13:10:b0:19:e4:dd:87:7f:8c: 99:7e:15:7f:55:59:9b:80:65:f4:f2:73:b4:1f:4b:35:61:2c: 5f:54:4c:1e:db:2d:80:e0:56:92:32:5a:69:13:59:47:62:ed: ee:ab:9e:c4:ea:7b:45:ee:9f:4b:20:f1:a3:8a:f5:d4:c5:1b: 8f:12:9d:08:44:01:af:0d:d9:e9:ea:1a:a3:af:41:78:07:fc: 05:74:64:d7:32:ee:ea:7a:9a:d5:21:4d:ad:fa:39:de:92:e2: 6e:69:2a:07:8a:02:ff:fa:57:02:18:65:d4:19:dc:f9:cd:03: c0:a1:63:34:38:95:48:05:fc:bc:ad:fa:86:86:14:95:18:91: 59:6a:3c:a4:db:16:ea:e1:05:be:be:eb:f5:f0:42:48:9a:72: ef:c1:d2:75:08:60:31:4e:66:cd:a3:b6:75:81:76:01:c6:2f: 5e:cf:11:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwNzIyMTgyMjAzWhcNMjYwNzI5MTgyMjAzWjAYMRYwFAYD VQQDEw02YTYxMGE0Yi1iODcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAim9DO1OjjE/7hDI6ASfMvSkXTVV9jc7DWY8cd9gxDLjijcAyxYJJfQuBvy+2 m1NQ1bqzGKfbBSCOFnq8CCrXd2ujheDO0nNTI64TUOwKS19mmgR6e8cD2wHVbmaV MKcX39TvEAhygN8WxBXdgP9y6wuDThyINOkYOO10e1Q0j8iKQnR0wpLLasuGSXE2 APrKG64lnjMz2JXKfLOX0mktkI3QSSXCHjsCnhy/DLCWv4qe1BlVmPgaU4ww5mgB wuyqjUCgJxZCVIJGDOp0TB2KOpQ55ebHWWtW8uZc3FVCWV6NP7gUkAypvqv1atf+ JPiYwrRA/j2L+L/ECeaIsIb1uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFy834Bw mtcgoQK1Tut/kfOXYOwZMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALyw2PVQ1AtwB0TKinrpYgE9xOHwDW7HUO7CMPt6G1qxsXweLtnnNrESWPVSF G1PJLxuajYUS5CA1x2CNszUmAapC8roig769iuKuLlxU38H0ExCwGeTdh3+MmX4V f1VZm4Bl9PJztB9LNWEsX1RMHtstgOBWkjJaaRNZR2Lt7quexOp7Re6fSyDxo4r1 1MUbjxKdCEQBrw3Z6eoao69BeAf8BXRk1zLu6nqa1SFNrfo53pLibmkqB4oC//pX Ahhl1Bnc+c0DwKFjNDiVSAX8vK36hoYUlRiRWWo8pNsW6uEFvr7r9fBCSJpy78HS dQhgMU5mzaO2dYF2AcYvXs8RUA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:10 2026 by rpki-client