
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: HrQ9CrXGUCPvcJ7m5MvTb/wtX3qLPlE8OJuTeXDLMZc=
Subject key identifier: 36:3A:3E:90:ED:31:D0:99:27:70:6E:52:5E:B8:F2:D8:3B:C6:17:89
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 63
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 63
Signing time: Wed 12 Aug 2026 23:30:59 +0000
Manifest this update: Wed 12 Aug 2026 23:30:58 +0000
Manifest next update: Wed 19 Aug 2026 23:30:58 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: wUZsAa+vWO3n2O5c1RK3HI49Ciyg7sAOvNBIqUyt9LE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 23:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: Aug 12 23:30:58 2026 GMT
Not After : Aug 19 23:30:58 2026 GMT
Subject: CN=6a7d0233-7c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:60:80:d5:3c:a9:3a:22:4b:5c:30:2f:90:
29:48:c1:79:27:7d:02:4f:ee:f8:a7:2a:c0:f1:bd:
1f:3d:f7:ac:71:54:60:1b:42:04:6f:9d:3c:47:c8:
cd:80:8f:aa:32:bd:39:bc:43:d4:a4:89:fb:69:f0:
80:a2:27:f5:9f:cb:5b:be:0f:36:0c:78:e3:39:8a:
c1:61:c8:21:11:7a:6d:bc:e6:6b:ca:9b:6d:68:af:
35:31:5b:4c:90:e3:ff:63:fb:c6:49:b3:d3:62:cb:
b3:9d:af:38:82:e6:aa:ef:1c:b2:b6:70:79:34:f6:
5b:e2:65:f7:7e:24:a2:65:02:85:52:f2:69:38:36:
63:2b:ba:b6:2c:6d:f0:b2:95:31:b0:59:85:6e:e9:
78:50:b0:0c:9c:f8:ff:68:ec:0b:51:f3:14:6c:81:
89:5b:20:eb:cd:ae:2f:52:f3:ae:de:fe:db:38:41:
14:9a:c9:66:29:c4:f3:bc:83:1c:b6:79:61:da:31:
37:6c:94:01:48:0a:51:54:c0:fa:d1:64:0f:4a:63:
67:08:70:7c:c5:fc:c1:85:7d:75:96:47:47:f2:82:
39:a0:ba:75:e4:c9:ef:db:d5:db:de:eb:94:f4:5c:
5e:d1:4b:fc:1a:e3:ed:4a:7d:22:91:df:b5:b9:8f:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:3E:90:ED:31:D0:99:27:70:6E:52:5E:B8:F2:D8:3B:C6:17:89
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:f2:8d:56:16:56:7b:65:1e:ea:5a:d4:05:fc:09:9b:d4:f1:
4a:c7:7c:44:4f:d4:22:10:30:bb:ea:47:c0:15:1b:03:21:0f:
20:fc:1a:8b:60:0c:60:96:d1:b6:38:f1:c9:9b:5b:f1:ce:5b:
b8:0f:77:25:d4:0e:06:3d:81:d7:fc:3b:d3:b8:56:3b:ea:75:
6a:68:6b:c3:26:4f:6c:ef:f9:14:04:c8:6e:c7:a0:12:0b:1a:
de:dd:e8:9d:06:31:57:4d:69:b7:90:85:06:ef:e5:e6:a2:6e:
60:81:8d:fa:61:e3:d4:38:41:09:66:43:5e:3f:df:31:1e:77:
01:52:c0:e7:bf:40:36:1f:3e:b7:8e:56:4f:d7:77:72:6f:80:
62:b4:e1:7f:7a:9a:56:3a:8e:55:36:6b:46:55:5c:cc:58:ac:
01:86:a5:bd:27:97:50:6c:c8:55:c8:18:22:ae:24:2c:e3:25:
6f:bf:ba:bd:82:ec:33:1f:03:75:cc:cb:68:09:15:e0:2b:91:
40:10:72:0a:ee:42:34:ae:d8:84:70:9a:56:68:59:b0:ee:60:
3c:68:6f:47:ad:be:e1:22:4d:df:cf:42:bd:d2:13:29:97:0e:
f2:7c:35:29:44:63:6d:03:2c:77:16:2e:3c:9e:d1:ca:ea:3e:
71:87:85:23
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
ODlBMjExMC8GA1UEBRMoMTJCNkU1RTE4RjdEQzEwMDFDRTA4QUYxM0REMDRENzND
NjBFOUI5QzAeFw0yNjA4MTIyMzMwNThaFw0yNjA4MTkyMzMwNThaMBgxFjAUBgNV
BAMTDTZhN2QwMjMzLTdjNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCb0WCA1TypOiJLXDAvkClIwXknfQJP7vinKsDxvR8996xxVGAbQgRvnTxHyM2A
j6oyvTm8Q9Skiftp8ICiJ/Wfy1u+DzYMeOM5isFhyCERem285mvKm21orzUxW0yQ
4/9j+8ZJs9Niy7OdrziC5qrvHLK2cHk09lviZfd+JKJlAoVS8mk4NmMrurYsbfCy
lTGwWYVu6XhQsAyc+P9o7AtR8xRsgYlbIOvNri9S867e/ts4QRSayWYpxPO8gxy2
eWHaMTdslAFIClFUwPrRZA9KY2cIcHzF/MGFfXWWR0fygjmgunXkye/b1dve65T0
XF7RS/wa4+1KfSKR37W5j9MrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNjo+kO0x
0JkncG5SXrjy2DvGF4kwHwYDVR0jBBgwFoAUErbl4Y99wQAc4IrxPdBNc8YOm5ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4OUEyL0I5Q0NEMzlFMDYy
QzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FBYzRJcnhQZEJOYzhZT201
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjQxRkU2MTAxRDY2MTFFMkE2MkY4NzdDNzJG
RDFGRjIvRXJibDRZOTl3UUFjNElyeFBkQk5jOFlPbTV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4
OUEyL0I5Q0NEMzlFMDYyQzExRjFCQUM4OTNGQzI2M0Q4QzY3L0VyYmw0WTk5d1FB
YzRJcnhQZEJOYzhZT201dy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC58o1WFlZ7ZR7qWtQF/Amb1PFKx3xET9QiEDC76kfAFRsDIQ8g/BqLYAxgltG2
OPHJm1vxzlu4D3cl1A4GPYHX/DvTuFY76nVqaGvDJk9s7/kUBMhux6ASCxre3eid
BjFXTWm3kIUG7+Xmom5ggY36YePUOEEJZkNeP98xHncBUsDnv0A2Hz63jlZP13dy
b4BitOF/eppWOo5VNmtGVVzMWKwBhqW9J5dQbMhVyBgiriQs4yVvv7q9guwzHwN1
zMtoCRXgK5FAEHIK7kI0rtiEcJpWaFmw7mA8aG9Hrb7hIk3fz0K90hMplw7yfDUp
RGNtAyx3Fi48ntHK6j5xh4Uj
-----END CERTIFICATE-----
Generated at Thu Aug 13 15:23:13 2026 by rpki-client