
$ rpki-client -vvf rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
File: Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft (raw, json)
Hash identifier: bdplmmdSQvzR7OSxB3DlN6CQLy+X318SgLNcQIrNim8=
Subject key identifier: 3B:32:22:8F:AB:19:85:38:4A:9F:C8:24:34:30:8A:1F:E9:A1:C9:3B
Authority key identifier: 12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
Certificate issuer: /CN=A91289A2/serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Certificate serial: 4B
Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
Manifest number: 4B
Signing time: Sat 27 Jun 2026 00:26:11 +0000
Manifest this update: Sat 27 Jun 2026 00:26:10 +0000
Manifest next update: Sat 04 Jul 2026 00:26:10 +0000
Files and hashes: 1: Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl (hash: /9v6dVoUCyIDSqOtpXIhDIuy/LnAQoyVSat4xCi6ohE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl
rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 04 Jul 2026 00:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75 (0x4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91289A2, serialNumber=12B6E5E18F7DC1001CE08AF13DD04D73C60E9B9C
Validity
Not Before: Jun 27 00:26:10 2026 GMT
Not After : Jul 4 00:26:10 2026 GMT
Subject: CN=6a3f18a3-8e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:96:9a:7d:53:12:74:6f:02:90:cd:0d:0d:
1c:f1:63:c7:2e:ef:e7:ca:31:10:2f:8c:3f:8e:e4:
36:fb:e5:5d:96:65:64:68:66:4d:3d:06:66:6d:ef:
0e:82:9b:54:39:2f:66:6b:8f:a3:23:97:4f:18:93:
ba:55:f0:da:f4:41:fb:c6:a2:45:0a:94:2d:36:e7:
52:d2:3f:4f:87:76:da:44:b9:34:9a:1e:a0:2e:c1:
46:94:93:3c:0a:15:af:fa:8b:0d:77:7d:2a:30:b1:
da:0a:69:05:d8:d9:44:d1:a8:9c:0a:38:24:be:c5:
ee:9c:51:20:9d:81:2c:35:b8:f0:d0:3c:26:35:8e:
a5:7f:88:e8:0c:a0:36:7f:d2:a7:90:ed:79:ce:a2:
2d:f8:a3:14:63:be:24:f4:51:5d:ed:1d:e8:a9:2f:
4f:ba:ca:89:3b:f3:e6:ec:2d:18:e6:bb:20:2d:fe:
0e:21:f8:68:b3:cb:7c:97:4d:6e:1a:a7:ca:5b:4c:
28:b8:73:79:09:c4:e2:87:90:ff:77:17:e7:7f:49:
16:62:75:d1:6d:98:37:94:cb:32:f6:72:3a:bb:f9:
4a:8b:83:43:cd:9c:6b:d9:87:91:10:4c:29:51:70:
b8:67:58:4c:04:fa:0c:74:88:f9:3a:48:71:61:e3:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:32:22:8F:AB:19:85:38:4A:9F:C8:24:34:30:8A:1F:E9:A1:C9:3B
X509v3 Authority Key Identifier:
keyid:12:B6:E5:E1:8F:7D:C1:00:1C:E0:8A:F1:3D:D0:4D:73:C6:0E:9B:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/Erbl4Y99wQAc4IrxPdBNc8YOm5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91289A2/B9CCD39E062C11F1BAC893FC263D8C67/Erbl4Y99wQAc4IrxPdBNc8YOm5w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:1e:d0:ad:c0:5d:f0:90:cc:b1:ef:c6:ed:26:3e:66:85:51:
fe:5c:b1:61:b6:2d:2a:65:ef:89:88:14:38:95:83:e1:e4:bd:
c5:16:77:52:b1:8a:1e:d9:a5:90:d7:20:25:dd:62:55:4d:36:
8f:92:51:cc:6f:ff:d8:d9:8e:85:4d:a4:e7:31:38:cb:01:ac:
16:d7:d7:b5:c4:49:31:b5:44:28:11:95:e3:b8:6f:32:bb:e4:
dc:76:51:04:fc:aa:5b:2b:23:05:89:12:c0:dd:a1:65:43:dc:
93:44:3d:2e:a9:eb:7b:2d:f6:3b:64:db:02:04:eb:d6:87:20:
57:8a:fe:d9:40:a6:44:ae:04:76:40:f6:86:8d:64:15:66:db:
48:dd:4b:d5:ff:4e:e5:7f:6c:b6:5a:51:50:6d:88:24:1e:8a:
61:7f:3f:69:47:d3:e3:e3:1f:f9:08:85:82:83:84:f3:d1:8d:
e9:a9:78:1f:d8:ad:1a:9b:ed:9f:68:ac:f3:b3:65:27:f2:38:
b3:de:1b:c8:4a:b5:2f:9a:4c:2e:0d:a4:43:1e:39:4a:32:2b:
da:3c:9a:e2:1c:e9:01:5a:90:c8:81:b1:c6:67:8e:04:2c:6c:
7a:6a:71:ba:2a:25:61:f3:5e:f1:90:2f:e1:76:98:92:e2:fb:
e3:35:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 00:07:00 2026 by rpki-client