$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: 4Rud1T9VDcj9387GdE7XdKExXHRCQ0CHqk+ji0FqDok= Subject key identifier: 6D:17:35:1D:61:CF:96:96:64:04:42:2D:CE:B8:8E:12:B1:BE:55:73 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2555 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2521 Signing time: Tue 24 Mar 2026 15:00:23 +0000 Manifest this update: Tue 24 Mar 2026 15:00:22 +0000 Manifest next update: Tue 31 Mar 2026 15:00:22 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: Ss/cG9NeknDTgU/ypipWoARS0q1Vp91iOiWDxiQFXUc=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: d70t34kfzJ1P/tOrmndhA9sif675IHxnm4UIqWmVa9U=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: Q7LCJn4UOngJqKxFQBK5nVd5LUGaCgTS+cghyBmcZLM=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: aeyxqgM/Bum6LEnRbk9OqtNY1VCfNbofKFi7pc/FW5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9557 (0x2555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Mar 24 15:00:22 2026 GMT Not After : Mar 31 15:00:22 2026 GMT Subject: CN=69c2a707-5dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:21:1a:1d:66:dd:89:50:16:e5:09:1f:a0: 27:9b:51:9f:e9:ba:fe:2f:a8:07:bb:5d:86:f9:ee: fc:8a:9c:60:81:e5:50:7a:43:70:6e:6e:5f:22:56: 7e:e1:b9:86:cd:b1:1a:0a:0a:20:50:c1:41:99:31: e1:b6:1a:db:03:4b:f1:9e:eb:07:66:c6:15:0f:98: 3d:fb:f3:86:32:3e:11:a6:9d:23:25:ed:e6:29:6f: 0c:ad:01:4a:0a:2b:ca:1d:3d:99:13:03:8a:67:47: d7:1b:ff:e0:54:69:a2:da:49:98:8b:56:5d:ac:6f: f3:cf:92:a0:c5:0e:e4:a6:6a:4e:3d:fa:d0:cd:81: 95:dc:14:33:51:fe:d9:72:cd:36:c3:d6:4d:4e:56: 2b:b0:19:e2:7f:81:42:fd:5e:dd:be:e3:97:71:3f: 17:e0:b4:8f:3a:71:7f:48:1c:d7:68:d8:19:8c:99: d1:2e:25:81:01:ae:40:48:06:d1:05:d5:32:41:e5: 1b:0b:91:15:3f:58:8a:84:99:37:8f:0a:0a:68:7b: d8:b4:b1:cc:16:5b:da:04:2b:3f:d0:81:2d:ec:a0: cb:1a:81:f1:03:3f:37:28:aa:95:21:2f:5a:d2:c1: cc:15:b7:ee:8b:e3:81:ec:c4:b4:df:8a:d1:85:4e: 95:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:35:1D:61:CF:96:96:64:04:42:2D:CE:B8:8E:12:B1:BE:55:73 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a2:1e:85:9f:b4:89:44:ad:f2:0c:0e:4f:34:ea:5b:5b:f0: c4:ac:75:76:13:1c:a8:52:de:1e:53:b0:ad:54:6a:9a:39:17: d4:4b:6f:c7:da:eb:cc:77:0e:2c:41:e4:91:53:fc:c8:5d:af: 30:fc:83:20:4f:bf:7a:3a:b4:9a:47:3d:40:06:38:5d:15:f9: 88:46:6b:60:87:95:c5:32:56:e6:ef:ee:76:b2:9a:c7:1c:2f: c8:52:a6:f5:cd:d9:9b:a3:24:68:e9:6b:37:9b:de:9c:db:ac: 25:64:a3:fa:fa:fd:85:26:77:eb:0c:11:dc:69:98:c1:5a:74: 1d:7e:9a:3a:51:53:e2:dd:01:56:db:3c:eb:c7:2a:c8:7d:63: f4:e2:47:96:56:0a:41:f8:7b:71:96:fa:4c:10:49:24:7d:bc: 24:93:c2:d4:68:aa:93:9e:28:c0:f6:97:77:22:8e:56:3b:84: 21:1d:e1:5c:2d:2c:07:eb:2c:69:7f:9d:38:fb:02:34:6c:88: 0b:64:66:45:7a:54:4b:fd:4b:4f:f5:46:99:b8:4b:2d:79:03: 64:d2:fe:b9:7c:fb:eb:ab:14:28:09:ab:56:17:91:35:8f:15: b1:8d:1f:ef:e4:4b:7b:44:96:7f:87:fe:d2:ef:91:c3:d3:86: f3:18:c0:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwMzI0MTUwMDIyWhcNMjYwMzMxMTUwMDIyWjAYMRYwFAYD VQQDEw02OWMyYTcwNy01ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAUhGh1m3YlQFuUJH6Anm1Gf6br+L6gHu12G+e78ipxggeVQekNwbm5fIlZ+ 4bmGzbEaCgogUMFBmTHhthrbA0vxnusHZsYVD5g9+/OGMj4Rpp0jJe3mKW8MrQFK CivKHT2ZEwOKZ0fXG//gVGmi2kmYi1ZdrG/zz5KgxQ7kpmpOPfrQzYGV3BQzUf7Z cs02w9ZNTlYrsBnif4FC/V7dvuOXcT8X4LSPOnF/SBzXaNgZjJnRLiWBAa5ASAbR BdUyQeUbC5EVP1iKhJk3jwoKaHvYtLHMFlvaBCs/0IEt7KDLGoHxAz83KKqVIS9a 0sHMFbfui+OB7MS034rRhU6VdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0XNR1h z5aWZARCLc64jhKxvlVzMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJKIehZ+0iUSt8gwOTzTqW1vwxKx1dhMcqFLeHlOwrVRqmjkX1Etvx9rrzHcO LEHkkVP8yF2vMPyDIE+/ejq0mkc9QAY4XRX5iEZrYIeVxTJW5u/udrKaxxwvyFKm 9c3Zm6MkaOlrN5venNusJWSj+vr9hSZ36wwR3GmYwVp0HX6aOlFT4t0BVts868cq yH1j9OJHllYKQfh7cZb6TBBJJH28JJPC1Giqk54owPaXdyKOVjuEIR3hXC0sB+ss aX+dOPsCNGyIC2RmRXpUS/1LT/VGmbhLLXkDZNL+uXz766sUKAmrVheRNY8VsY0f 7+RLe0SWf4f+0u+Rw9OG8xjAhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:23 2026 by rpki-client