$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: lZ6hTYGM4bolKST4cF0e3QDSw2xwHAuFRBi2tZBH+AI= Subject key identifier: 25:47:19:F4:A0:F6:01:31:54:D4:EE:CD:57:87:61:44:9D:0A:6F:36 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0D09 Signing time: Tue 12 May 2026 18:22:49 +0000 Manifest this update: Tue 12 May 2026 18:22:49 +0000 Manifest next update: Tue 19 May 2026 18:22:49 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: OOpKYsKZ453bJoO3KGtjsYQ4pPt0dBfkraaVz27PwII=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 36cWWUlsjm/g+gszjb3Mn/XvCTbSn8VYsKkqBFvVpdM=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PoBDNCZFrGQzQ7+3sGgDnm+Nft1wV7A+I3RbGRaDZks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3361 (0xd21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: May 12 18:22:49 2026 GMT Not After : May 19 18:22:49 2026 GMT Subject: CN=6a036ff9-ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:48:e1:45:83:ac:eb:6e:5a:56:5b:9a:f9: 05:e9:8d:e8:f3:64:06:26:54:74:c1:f5:ee:b2:96: 58:1c:c8:47:9f:00:da:26:1e:fa:45:e0:c1:a6:c9: de:68:5b:22:28:0f:29:c4:c7:ea:a9:9d:f6:5b:79: a5:27:a5:d7:4d:5f:81:4b:9d:59:fd:4b:92:6d:b5: d5:f1:2c:9a:7b:f6:f7:62:a0:64:ee:72:c7:64:6f: 74:41:58:31:4e:cc:27:57:68:0f:e1:2a:de:b4:75: 2c:33:a9:b2:4e:30:d7:6d:1e:67:96:82:42:6e:0a: c9:e2:be:1a:e7:eb:a1:5c:14:46:c7:6b:46:54:dd: 7b:3b:86:94:c0:11:2c:6e:77:82:87:74:a4:ad:d3: 9d:df:8e:3c:af:c8:25:cf:c5:a2:b6:1f:42:e6:be: ba:7b:7a:ed:6a:0d:4f:ef:b9:8a:b8:7c:85:d0:ed: 3a:4a:1c:14:3e:17:62:fe:44:96:1b:10:47:98:fd: 3c:5e:cc:b8:04:56:76:e6:6b:81:91:c5:73:e8:2b: 13:00:a6:86:a1:62:8a:09:c9:0e:61:74:e2:bc:e9: 12:26:dd:65:b8:de:88:3a:d8:36:54:a1:04:5b:9b: 2b:1c:df:96:82:85:be:ef:04:b9:10:db:87:d9:2d: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:47:19:F4:A0:F6:01:31:54:D4:EE:CD:57:87:61:44:9D:0A:6F:36 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:03:c6:c4:b5:04:87:60:67:db:d0:60:67:6f:b5:36:48:fa: b0:2c:bc:56:64:19:66:35:98:92:80:ac:30:30:44:88:4c:d2: 70:2f:4e:71:d1:c0:7b:b5:28:59:bf:d9:00:00:89:f9:f9:fc: 2d:0e:91:c9:00:11:a7:ff:ba:20:5e:17:f7:28:c4:cf:99:32: 21:2a:77:1d:0f:69:10:53:c5:15:c6:3f:13:45:e4:fa:c6:24: 8e:55:1a:2b:97:e9:d6:41:a2:3e:3e:65:e8:32:fd:21:c5:9e: 74:98:33:07:ed:c5:ed:b4:62:4b:3c:63:c0:72:36:9f:6e:5c: 69:8f:43:1f:e2:c5:be:dd:74:5b:2e:c3:ee:30:73:13:99:b5: c5:64:d7:c1:97:4a:5c:54:a4:2d:e0:fb:0d:af:02:48:e3:7d: cb:0e:fc:39:72:4d:d4:38:5b:c7:1c:01:6e:4a:1b:9d:25:6f: 6d:0b:16:89:99:15:5b:4b:23:56:15:68:01:40:3e:2d:32:ca: c9:49:1d:56:30:f0:8f:e9:ca:f3:68:66:8b:9d:fa:b6:d5:63: 86:7c:88:6e:d3:54:f2:3b:9d:49:d0:f8:a7:33:9a:50:d7:33: 21:e0:06:ed:a1:19:6f:d3:67:e9:16:a9:80:18:96:ec:cf:5c: bb:79:da:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwNTEyMTgyMjQ5WhcNMjYwNTE5MTgyMjQ5WjAYMRYwFAYD VQQDEw02YTAzNmZmOS1hZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJtI4UWDrOtuWlZbmvkF6Y3o82QGJlR0wfXuspZYHMhHnwDaJh76ReDBpsne aFsiKA8pxMfqqZ32W3mlJ6XXTV+BS51Z/UuSbbXV8Syae/b3YqBk7nLHZG90QVgx TswnV2gP4SretHUsM6myTjDXbR5nloJCbgrJ4r4a5+uhXBRGx2tGVN17O4aUwBEs bneCh3SkrdOd3448r8glz8With9C5r66e3rtag1P77mKuHyF0O06ShwUPhdi/kSW GxBHmP08Xsy4BFZ25muBkcVz6CsTAKaGoWKKCckOYXTivOkSJt1luN6IOtg2VKEE W5srHN+WgoW+7wS5ENuH2S0Z6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVHGfSg 9gExVNTuzVeHYUSdCm82MB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOwPGxLUEh2Bn29BgZ2+1Nkj6sCy8VmQZZjWYkoCsMDBEiEzScC9OcdHAe7Uo Wb/ZAACJ+fn8LQ6RyQARp/+6IF4X9yjEz5kyISp3HQ9pEFPFFcY/E0Xk+sYkjlUa K5fp1kGiPj5l6DL9IcWedJgzB+3F7bRiSzxjwHI2n25caY9DH+LFvt10Wy7D7jBz E5m1xWTXwZdKXFSkLeD7Da8CSON9yw78OXJN1DhbxxwBbkobnSVvbQsWiZkVW0sj VhVoAUA+LTLKyUkdVjDwj+nK82hmi536ttVjhnyIbtNU8judSdD4pzOaUNczIeAG 7aEZb9Nn6RapgBiW7M9cu3nadw== -----END CERTIFICATE-----Generated at Wed May 13 11:07:14 2026 by rpki-client