$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: ZJXwAZu2Qb11N18Isz1baiQ4UogapAZX8qk6uQiE8Mw= Subject key identifier: 6E:AF:65:5F:66:5A:A1:2D:3A:26:F7:30:24:71:EA:A0:63:4C:A0:0F Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 259A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2563 Signing time: Wed 22 Jul 2026 15:04:29 +0000 Manifest this update: Wed 22 Jul 2026 15:04:28 +0000 Manifest next update: Wed 29 Jul 2026 15:04:28 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: 67EDVFur/84pLhP6r0K3DvcOhZVvPP+RnPIgC76zwq4=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: Z4Rm3AAC08xH1t9OYPaZB/yfoesNVGIoDscrROCpTs0=) 3: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: wltUxvT2gIrkk4cq9N351wOYzI5GH6/ywEsI+BXEuw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9626 (0x259a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jul 22 15:04:28 2026 GMT Not After : Jul 29 15:04:28 2026 GMT Subject: CN=6a60dbfc-0eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:82:27:b9:1c:5d:f9:d0:e2:3c:bb:4a:e3:b6: d9:f5:80:4a:68:28:4a:b1:8f:60:31:4f:19:24:2d: dd:80:60:2a:ca:43:26:d3:54:47:50:c2:87:47:08: 76:d7:2d:69:17:d5:9f:d8:d8:98:f3:d4:e8:b8:e2: 6b:6f:7b:94:4c:34:19:49:78:7f:9a:b2:ca:ba:a2: 58:10:79:b8:3d:70:c7:d6:87:c9:ff:11:d4:1c:22: 5d:69:d1:53:9f:be:04:1a:72:28:70:c2:63:69:1e: 21:b2:c1:31:76:94:bb:40:de:d5:e2:1e:d9:b2:4b: d7:89:7e:80:4e:cb:f5:c0:dc:22:15:62:9d:54:bf: ad:49:02:93:5b:a1:c5:c3:85:7e:17:7d:90:ca:b6: c8:e3:53:1d:0d:7d:55:10:04:32:51:1e:7d:84:2a: dc:59:bc:60:70:41:6e:a3:d4:7d:8f:d7:bc:e2:19: 8f:68:5f:81:1e:53:45:bd:c7:e5:fc:8c:02:9b:46: ff:6c:d2:35:b4:9b:d4:89:6f:04:32:20:b2:e1:f6: 75:9d:b3:ce:29:62:cb:ad:65:e0:06:4f:38:c0:21: 5f:dd:d5:ba:bf:0a:9b:9d:4a:ea:b1:1f:a8:71:34: 97:0a:f3:36:16:b7:a4:75:52:90:52:e3:5f:6c:e6: de:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:AF:65:5F:66:5A:A1:2D:3A:26:F7:30:24:71:EA:A0:63:4C:A0:0F X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:70:c6:e8:1a:e1:8d:71:92:27:54:50:7a:8b:53:f3:a6: 81:2f:91:e6:74:dd:85:ba:61:c2:b7:70:d7:30:0e:72:2c:58: ae:4f:3d:88:bf:ed:9b:66:de:a3:4b:7f:de:0f:8b:6c:f3:08: 98:d2:72:e6:07:24:a6:ef:d5:b4:81:94:af:f8:95:fc:36:0c: 9a:26:00:04:74:30:47:fd:6e:e3:3e:9c:c3:d9:e6:6c:a5:f8: e4:60:0c:72:8e:e8:33:2a:a0:4b:d5:92:f2:90:d9:94:30:4c: 3a:24:da:cf:e0:6b:f7:79:3b:a0:47:a9:45:30:fb:3e:15:a0: 39:9d:f3:91:ad:7d:44:44:7e:43:59:ba:d2:5a:c7:d5:8f:cf: 00:63:81:95:20:b9:a7:36:b8:f8:3b:34:da:df:a3:79:22:d1: 13:6c:53:f7:94:b8:84:db:20:95:38:94:17:19:d0:2e:1c:35: 8c:cf:91:27:93:6c:b7:69:71:a8:3f:1b:90:44:5d:47:c9:39: a7:ed:1a:18:4d:31:79:67:b6:6c:33:ae:99:90:ae:46:b2:67: 77:1e:3f:a6:7d:18:9e:6f:dc:f8:cc:72:e6:15:d7:c7:e2:4f: 1a:fd:27:1e:05:7a:8f:f0:bc:b6:93:7e:27:c2:8d:b4:bd:4b: 26:73:30:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwNzIyMTUwNDI4WhcNMjYwNzI5MTUwNDI4WjAYMRYwFAYD VQQDEw02YTYwZGJmYy0wZWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIInuRxd+dDiPLtK47bZ9YBKaChKsY9gMU8ZJC3dgGAqykMm01RHUMKHRwh2 1y1pF9Wf2NiY89TouOJrb3uUTDQZSXh/mrLKuqJYEHm4PXDH1ofJ/xHUHCJdadFT n74EGnIocMJjaR4hssExdpS7QN7V4h7ZskvXiX6ATsv1wNwiFWKdVL+tSQKTW6HF w4V+F32QyrbI41MdDX1VEAQyUR59hCrcWbxgcEFuo9R9j9e84hmPaF+BHlNFvcfl /IwCm0b/bNI1tJvUiW8EMiCy4fZ1nbPOKWLLrWXgBk84wCFf3dW6vwqbnUrqsR+o cTSXCvM2FrekdVKQUuNfbObeUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG6vZV9m WqEtOib3MCRx6qBjTKAPMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf3Vwxuga4Y1xkidUUHqLU/OmgS+R5nTdhbphwrdw1zAOcixYrk89iL/tm2be o0t/3g+LbPMImNJy5gckpu/VtIGUr/iV/DYMmiYABHQwR/1u4z6cw9nmbKX45GAM co7oMyqgS9WS8pDZlDBMOiTaz+Br93k7oEepRTD7PhWgOZ3zka19RER+Q1m60lrH 1Y/PAGOBlSC5pza4+Ds02t+jeSLRE2xT95S4hNsglTiUFxnQLhw1jM+RJ5Nst2lx qD8bkERdR8k5p+0aGE0xeWe2bDOumZCuRrJndx4/pn0Ynm/c+Mxy5hXXx+JPGv0n HgV6j/C8tpN+J8KNtL1LJnMwWQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:52:45 2026 by rpki-client