
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: Tt8FcelodIIVREoxkwCt+lU+nTYLotH5dW9PvtXeiMc=
Subject key identifier: D2:97:75:47:F5:8E:E7:66:FF:FE:C4:6B:ED:4D:C8:C4:84:70:42:45
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 7D
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 7D
Signing time: Sat 03 Oct 2026 00:09:41 +0000
Manifest this update: Sat 03 Oct 2026 00:09:41 +0000
Manifest next update: Sat 10 Oct 2026 00:09:41 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: lxJqY4o9HQ0sg2/jCJ/tIIDF2xoZls9/G+iAd39ziFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: Oct 3 00:09:41 2026 GMT
Not After : Oct 10 00:09:41 2026 GMT
Subject: CN=6ac047c5-fdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:80:ac:ff:98:2c:08:e9:44:6a:88:77:35:
31:06:96:bb:60:de:c0:cc:a1:d6:53:e5:d4:fa:12:
ad:c7:7a:a0:96:8b:57:90:5e:dc:eb:b9:90:08:9d:
c2:e9:cf:fb:be:d2:ac:ce:f1:1e:45:0f:a9:a7:ce:
d9:1a:d6:cd:46:1e:b8:5a:52:cc:da:4a:21:19:32:
db:32:93:ee:9d:81:4a:a6:ac:bb:45:04:45:73:04:
64:10:3f:24:8b:09:a5:56:96:c0:5e:b7:4a:cf:fc:
4d:86:99:54:e2:aa:fc:a6:8a:61:2e:aa:c3:90:a1:
51:fb:0f:28:2e:b1:7c:2d:be:7f:67:75:fb:1e:33:
7e:a8:0b:70:41:cd:55:24:da:15:33:71:f8:b4:a6:
65:b5:32:c5:ab:82:3a:6d:44:9d:84:30:97:cc:13:
2e:06:23:05:a9:83:ea:9e:45:0e:66:0a:a8:14:fb:
6f:f9:f1:51:67:08:db:2a:5e:c1:e9:66:9d:00:94:
c0:4e:c4:7b:e7:a4:84:93:61:0a:71:03:13:8a:88:
4b:8c:6d:24:5d:89:fb:87:d5:ad:28:ee:72:f8:e4:
c4:4e:42:94:25:cb:44:92:70:36:60:3b:a2:38:21:
d7:df:aa:b5:11:25:74:11:83:8e:cd:a7:db:d3:72:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:97:75:47:F5:8E:E7:66:FF:FE:C4:6B:ED:4D:C8:C4:84:70:42:45
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e7:cc:2e:a1:97:14:fc:38:1e:ff:b3:3e:5a:47:22:6e:3b:
72:33:3d:eb:0f:0f:18:f4:1f:dd:ce:0a:0c:3e:68:9c:d6:82:
56:5c:10:33:05:d4:a5:ec:71:14:30:cb:39:ee:7f:4f:74:e9:
66:37:90:2b:b1:c4:46:9a:d1:2e:65:95:70:22:90:e3:be:bd:
1b:3d:ac:b3:40:6e:bc:34:6b:3a:c7:57:5e:1d:cd:de:14:03:
fd:bb:b4:89:9d:f0:47:e8:92:3f:41:6a:59:83:93:e0:9d:8e:
17:33:fb:1c:00:bb:91:4e:4d:32:35:44:ae:71:39:28:3f:35:
1f:5f:9c:c1:43:4b:59:10:69:6d:27:44:7d:52:12:91:4c:00:
c5:e3:16:d4:12:da:68:15:da:be:2c:7a:aa:d3:04:8f:9a:18:
9b:ce:af:bf:61:18:b6:0f:0a:e0:c3:97:fa:61:1a:7e:b1:e0:
ea:ef:37:1e:c2:87:53:b9:4e:8a:28:a6:68:7d:1e:08:47:69:
cb:06:05:84:ca:de:f0:dd:7a:69:b6:90:e2:5f:15:7e:31:64:
d1:da:65:01:35:c9:da:da:94:a2:a3:1b:91:d7:72:cd:69:52:
ac:79:29:2d:97:bb:7e:c5:fe:a6:12:72:f0:dd:45:d5:51:a6:
10:0c:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:50:06 2026 by rpki-client