$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: CtHhXXJ56iU86Wfb7jqMFWUasA1xVrCT8SDBYLKDBPA= Subject key identifier: E3:4D:D2:00:92:32:F9:4C:74:88:F8:54:47:2A:0B:1B:B9:41:B9:3E Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0CEE Signing time: Tue 24 Mar 2026 18:02:45 +0000 Manifest this update: Tue 24 Mar 2026 18:02:44 +0000 Manifest next update: Tue 31 Mar 2026 18:02:44 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: VUopQ76RO+oMxfqPXn/GQ5P+ORKK7sSTzkrtHCR9gHQ=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 3nsdI0Nn7Mgh8t9RARDJXXmnzJJqNGE5v3N1Sor/rHI=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PO5NtRD87mrV7jcOB3vTKQ4iyi5S6EBAtu3hGqNnqRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Mar 24 18:02:44 2026 GMT Not After : Mar 31 18:02:44 2026 GMT Subject: CN=69c2d1c5-7282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:94:51:7e:fc:8a:f4:36:cf:ca:8d:e4:c3: b7:1d:32:f0:1e:9a:ee:7f:b6:2e:af:8f:5e:2a:d8: e8:5d:74:07:d4:fe:5f:c0:60:e8:70:05:f7:bc:2a: c0:96:7c:b0:7c:3f:01:7c:89:6d:53:70:fc:64:46: a8:00:b6:56:c6:ca:35:51:ad:45:50:a8:45:c5:d2: 49:6d:f1:0e:97:a7:93:fc:ac:d0:e8:29:b7:ed:b6: 83:30:f6:95:cc:48:74:02:51:2d:dc:3d:db:ab:0b: 64:b8:62:62:81:07:ba:5a:7f:e1:35:af:ef:45:8d: cc:90:b4:cd:31:de:59:a2:25:ca:ba:7d:84:d7:18: 7e:e2:71:3d:42:e5:4b:5d:31:67:f2:cd:f8:94:b9: 1a:e8:38:57:2e:90:10:c6:48:f5:70:58:d0:80:fc: 43:92:c7:0b:5b:04:80:85:a9:68:de:6a:2d:40:b7: e9:02:3a:44:21:34:68:7a:ac:f3:b2:46:f6:27:40: e2:0b:da:9a:8d:ba:83:ea:34:aa:70:c5:cc:58:88: f1:c7:22:7e:ff:de:2f:7b:9c:84:be:ea:24:84:d6: 5b:fb:1b:ed:d6:bc:3e:e8:98:9f:5a:1a:95:7f:b2: 38:04:33:b7:49:2a:22:05:a3:ec:09:19:f4:59:75: 69:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4D:D2:00:92:32:F9:4C:74:88:F8:54:47:2A:0B:1B:B9:41:B9:3E X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:7c:10:85:3d:40:10:c0:fb:bd:ec:39:8f:79:c7:64:99:32: ca:c6:dd:03:8c:82:ce:0b:a5:2f:f7:bb:d2:b3:88:42:e2:1a: 13:c0:2e:1a:83:10:40:5e:a1:e5:25:2a:48:46:37:59:8a:1a: 27:00:1d:fa:99:37:4c:a6:31:52:be:68:f1:c8:19:c2:d5:ae: 89:23:e4:04:df:83:b2:cf:04:f1:b3:65:61:93:75:46:42:1f: 7b:a7:d1:e1:b1:d6:a9:e6:ec:c9:62:38:2f:f2:3b:41:62:f4: 26:f3:0e:6b:5b:87:95:2e:85:73:81:32:4f:dc:89:a2:36:72: b5:74:ee:33:33:de:3f:55:fc:51:46:c5:40:54:7b:53:1e:89: 19:b9:0c:a1:c5:4f:9f:49:cc:f0:87:69:5d:cc:25:eb:8f:ec: 04:aa:35:5f:16:09:6f:40:d7:3a:09:b1:d8:4d:25:d9:4d:4a: 4f:1b:22:36:f0:4a:55:28:39:2a:cd:c0:9b:b0:fe:0e:ec:7f: c7:36:91:e8:28:05:06:f6:60:cc:1f:bb:59:f4:c7:44:37:a7: 20:e4:af:38:00:96:52:40:be:79:01:86:f8:16:4e:70:5a:ff: 54:3e:f5:1f:36:ef:ed:29:6c:02:9b:24:e8:73:0f:97:b2:43: 1e:0d:ff:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwMzI0MTgwMjQ0WhcNMjYwMzMxMTgwMjQ0WjAYMRYwFAYD VQQDEw02OWMyZDFjNS03MjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnf2UUX78ivQ2z8qN5MO3HTLwHpruf7Yur49eKtjoXXQH1P5fwGDocAX3vCrA lnywfD8BfIltU3D8ZEaoALZWxso1Ua1FUKhFxdJJbfEOl6eT/KzQ6Cm37baDMPaV zEh0AlEt3D3bqwtkuGJigQe6Wn/hNa/vRY3MkLTNMd5ZoiXKun2E1xh+4nE9QuVL XTFn8s34lLka6DhXLpAQxkj1cFjQgPxDkscLWwSAhalo3motQLfpAjpEITRoeqzz skb2J0DiC9qajbqD6jSqcMXMWIjxxyJ+/94ve5yEvuokhNZb+xvt1rw+6JifWhqV f7I4BDO3SSoiBaPsCRn0WXVpfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONN0gCS MvlMdIj4VEcqCxu5Qbk+MB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANHwQhT1AEMD7vew5j3nHZJkyysbdA4yCzgulL/e70rOIQuIaE8AuGoMQQF6h 5SUqSEY3WYoaJwAd+pk3TKYxUr5o8cgZwtWuiSPkBN+Dss8E8bNlYZN1RkIfe6fR 4bHWqebsyWI4L/I7QWL0JvMOa1uHlS6Fc4EyT9yJojZytXTuMzPeP1X8UUbFQFR7 Ux6JGbkMocVPn0nM8IdpXcwl64/sBKo1XxYJb0DXOgmx2E0l2U1KTxsiNvBKVSg5 Ks3Am7D+Dux/xzaR6CgFBvZgzB+7WfTHRDenIOSvOACWUkC+eQGG+BZOcFr/VD71 Hzbv7SlsApsk6HMPl7JDHg3/Fw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:02 2026 by rpki-client