$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: QkfAAxFE0S96PLGMO050bGNR8BfV/ZbsIDkP8cRpieE= Subject key identifier: E8:DB:B9:6F:AE:50:B8:B7:1E:B5:9B:0B:71:CA:07:FC:1E:68:E3:39 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 256E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 253A Signing time: Tue 12 May 2026 15:02:34 +0000 Manifest this update: Tue 12 May 2026 15:02:33 +0000 Manifest next update: Tue 19 May 2026 15:02:33 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: Gl58USMLY+jTPhIIbGav0Raf4H4TkBsnpNTMosVsEcc=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: d70t34kfzJ1P/tOrmndhA9sif675IHxnm4UIqWmVa9U=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: Q7LCJn4UOngJqKxFQBK5nVd5LUGaCgTS+cghyBmcZLM=) 4: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: aeyxqgM/Bum6LEnRbk9OqtNY1VCfNbofKFi7pc/FW5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9582 (0x256e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: May 12 15:02:33 2026 GMT Not After : May 19 15:02:33 2026 GMT Subject: CN=6a03410a-161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fc:e2:be:19:3a:e7:86:a1:3f:65:94:12:76: 85:1c:c6:ea:d3:cc:07:2f:21:dc:1e:dd:ae:1d:3a: 21:04:f5:59:69:41:99:25:05:02:8e:ee:55:d0:39: 27:31:a9:14:2d:8d:5b:6e:e8:3f:38:b1:99:dc:c7: 68:b0:56:b0:ee:3f:c7:6e:21:8f:3c:d6:47:6a:ae: 0d:59:b2:6e:d7:7f:68:00:e8:f6:92:0c:2a:a3:a6: e2:d2:c3:66:b2:e4:7a:59:c1:3e:48:3b:da:be:8d: f5:58:78:84:83:bf:e4:fc:83:2f:50:37:13:14:3b: 9b:2e:c6:f4:59:c0:0c:28:a9:99:79:06:5f:34:be: b3:d1:82:93:b5:02:6f:13:d0:6c:bd:3d:ce:b2:a4: a4:e7:f8:94:d3:a7:08:14:17:15:ac:71:52:de:b9: 3e:ce:59:c7:ab:97:14:89:1b:ca:d6:07:11:c5:2b: c9:01:2c:1e:85:ae:c3:a2:0e:4f:59:05:cf:9f:36: e4:4f:e6:40:5e:17:36:1f:39:6c:cc:0a:3b:f3:ae: 30:a4:79:23:a2:89:9e:a9:84:44:3d:17:0d:ca:77: 2e:ba:e3:46:24:80:07:00:b1:df:ad:3b:7f:c1:dd: bf:1b:d3:92:b0:bd:c1:e3:e2:35:47:59:07:85:c6: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DB:B9:6F:AE:50:B8:B7:1E:B5:9B:0B:71:CA:07:FC:1E:68:E3:39 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:70:18:bd:2e:c7:6a:f8:60:88:bb:23:5a:a3:2a:d7:34:cc: b9:c8:e4:85:7e:ba:9f:f9:cd:d1:a6:7f:4b:64:f4:d5:a9:1e: 02:d0:65:93:4a:16:4a:df:66:22:9c:dc:12:e2:07:a5:66:4f: 30:a7:91:66:61:61:da:2a:52:79:f2:6f:e6:09:d8:b8:8e:51: 17:a5:be:38:0a:3b:a0:f4:55:e8:9a:b0:52:c8:95:d6:9d:5d: 5e:fa:3e:6e:88:b2:a7:6b:fc:9d:22:79:d7:c5:78:c7:f7:57: 8b:2b:39:cc:3e:28:84:ba:4b:c4:78:de:4a:11:dc:75:e0:56: 8c:bc:ab:cc:a7:e4:46:93:13:ff:94:7e:e9:2f:d1:b3:25:e9: cd:e7:14:6a:5a:9b:8d:e8:5c:dc:fa:3c:92:06:e1:c2:55:e0: a4:8d:d4:0f:1b:4e:af:6a:ab:ee:3f:42:47:ea:b6:62:af:89: 30:c4:69:d1:2b:9e:37:18:03:45:dd:df:7f:63:f5:c3:07:03: 26:6f:e9:2f:ec:4f:e6:70:a4:87:72:aa:d4:28:b9:77:e7:ca: ae:14:94:f1:16:e2:ba:1e:aa:da:8d:36:e9:3c:1f:9a:bb:cd: 65:7c:b1:4c:96:e8:1b:e0:02:24:7f:e5:ba:01:24:59:bc:7f: 26:ae:fb:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwNTEyMTUwMjMzWhcNMjYwNTE5MTUwMjMzWjAYMRYwFAYD VQQDEw02YTAzNDEwYS0xNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5/zivhk654ahP2WUEnaFHMbq08wHLyHcHt2uHTohBPVZaUGZJQUCju5V0Dkn MakULY1bbug/OLGZ3MdosFaw7j/HbiGPPNZHaq4NWbJu139oAOj2kgwqo6bi0sNm suR6WcE+SDvavo31WHiEg7/k/IMvUDcTFDubLsb0WcAMKKmZeQZfNL6z0YKTtQJv E9BsvT3OsqSk5/iU06cIFBcVrHFS3rk+zlnHq5cUiRvK1gcRxSvJASweha7Dog5P WQXPnzbkT+ZAXhc2HzlszAo7864wpHkjoomeqYREPRcNyncuuuNGJIAHALHfrTt/ wd2/G9OSsL3B4+I1R1kHhcZNuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjbuW+u ULi3HrWbC3HKB/weaOM5MB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXAYvS7HavhgiLsjWqMq1zTMucjkhX66n/nN0aZ/S2T01akeAtBlk0oWSt9m IpzcEuIHpWZPMKeRZmFh2ipSefJv5gnYuI5RF6W+OAo7oPRV6JqwUsiV1p1dXvo+ boiyp2v8nSJ518V4x/dXiys5zD4ohLpLxHjeShHcdeBWjLyrzKfkRpMT/5R+6S/R syXpzecUalqbjehc3Po8kgbhwlXgpI3UDxtOr2qr7j9CR+q2Yq+JMMRp0SueNxgD Rd3ff2P1wwcDJm/pL+xP5nCkh3Kq1Ci5d+fKrhSU8Rbiuh6q2o026TwfmrvNZXyx TJboG+ACJH/lugEkWbx/Jq77gw== -----END CERTIFICATE-----Generated at Wed May 13 16:13:06 2026 by rpki-client