$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: wCe6htFZDbNs1mMI7HDJE4bsS7W6NlYq+mW2fPGYLVc= Subject key identifier: C8:CC:E8:E4:5F:79:AA:87:A0:25:91:74:9C:25:6E:67:54:80:18:1A Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0D0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0CF4 Signing time: Sat 04 Apr 2026 18:02:34 +0000 Manifest this update: Sat 04 Apr 2026 18:02:33 +0000 Manifest next update: Sat 11 Apr 2026 18:02:33 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: ib0DNCut4visgUYIscMMz/uckV9NKhmP6R/W3qD+5bU=) 2: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: PO5NtRD87mrV7jcOB3vTKQ4iyi5S6EBAtu3hGqNnqRU=) 3: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: 3nsdI0Nn7Mgh8t9RARDJXXmnzJJqNGE5v3N1Sor/rHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3338 (0xd0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Apr 4 18:02:33 2026 GMT Not After : Apr 11 18:02:33 2026 GMT Subject: CN=69d1523a-0115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:5a:da:7f:19:f4:4d:b2:65:99:b7:3d:f5: ed:6d:39:bb:de:94:b5:98:9c:f9:50:30:d2:de:cd: 6c:0b:05:c9:f9:49:61:1e:e9:82:94:8b:c9:95:cb: a5:8b:5d:9b:e4:b1:6d:a1:f3:81:0c:e9:35:1b:f6: c3:a0:1b:53:1b:57:31:7c:de:fb:58:48:e7:75:cc: 0d:1d:73:29:5a:42:6e:3d:9a:e9:a9:5d:2e:a2:03: e8:30:9e:c1:d5:f4:07:38:74:92:48:94:ce:37:e8: d0:da:cd:41:5a:61:b6:d3:23:36:4b:ab:e5:1c:24: 2f:db:6f:c3:bd:1f:57:59:30:d5:76:6e:10:85:a6: 44:ee:d4:a1:c1:f3:2a:e9:de:e1:60:4f:3a:b2:3d: 4f:9c:80:29:26:27:74:88:ea:94:cd:07:c9:8c:cb: a4:c5:8c:d4:c6:b2:a9:39:56:b2:c7:4a:17:45:bd: 6c:96:a2:09:55:37:07:96:c5:64:21:32:06:0b:b2: c9:36:40:8c:8f:71:f6:81:98:97:b2:6b:1c:0a:e5: a7:5a:28:57:ff:ea:f4:e2:bc:cf:21:6f:65:67:0c: 8d:ab:e0:2b:d5:c6:7a:07:6d:e3:44:d7:75:ed:8f: 21:4c:5c:1b:2e:ae:30:c0:94:5c:67:5a:1b:d3:52: 5f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CC:E8:E4:5F:79:AA:87:A0:25:91:74:9C:25:6E:67:54:80:18:1A X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:1e:43:b8:72:f7:5a:f7:70:a5:c6:50:0e:d8:af:55:1a:b1: c5:cc:1c:2c:01:bd:9f:9d:cc:09:d1:cf:c7:1f:b3:27:bc:54: a2:b1:61:71:0f:3c:57:84:47:76:c4:e4:a1:98:b0:35:54:7c: c6:e7:54:e6:49:e0:f3:73:52:71:aa:e9:38:ab:13:a4:27:6a: 35:6f:78:41:97:d3:76:58:90:ac:d9:09:7a:44:fb:ec:8e:3c: e9:98:48:4d:99:12:a4:1e:7d:a7:3f:d2:32:95:d0:e2:86:ff: 32:f6:a1:48:71:86:2c:b0:20:ee:69:33:fa:79:10:7e:3c:f4: c6:51:a9:ac:4a:98:60:1a:16:ad:4e:8c:e2:bc:4f:b9:09:87: 5c:ce:f5:3b:31:47:7b:9a:74:30:7b:54:06:fe:0a:72:33:c4: 10:e7:45:c9:73:15:6e:d9:13:43:4f:df:57:dc:20:5c:e5:a6: 46:5f:af:f9:9d:6e:2e:f6:63:c9:1a:18:27:aa:c0:9e:5b:e0: 74:92:d7:0e:b9:b1:ee:9e:31:be:eb:a1:48:d7:6d:c2:5e:e9: 42:24:39:03:70:80:dd:12:a6:c7:c8:c2:5f:dc:62:67:0e:d0: dc:0a:45:6d:b8:d1:f6:e2:81:cc:df:be:f0:bc:d5:97:70:eb: ef:90:15:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjYwNDA0MTgwMjMzWhcNMjYwNDExMTgwMjMzWjAYMRYwFAYD VQQDEw02OWQxNTIzYS0wMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMxa2n8Z9E2yZZm3PfXtbTm73pS1mJz5UDDS3s1sCwXJ+UlhHumClIvJlcul i12b5LFtofOBDOk1G/bDoBtTG1cxfN77WEjndcwNHXMpWkJuPZrpqV0uogPoMJ7B 1fQHOHSSSJTON+jQ2s1BWmG20yM2S6vlHCQv22/DvR9XWTDVdm4QhaZE7tShwfMq 6d7hYE86sj1PnIApJid0iOqUzQfJjMukxYzUxrKpOVayx0oXRb1slqIJVTcHlsVk ITIGC7LJNkCMj3H2gZiXsmscCuWnWihX/+r04rzPIW9lZwyNq+Ar1cZ6B23jRNd1 7Y8hTFwbLq4wwJRcZ1ob01JfWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMjM6ORf eaqHoCWRdJwlbmdUgBgaMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEh5DuHL3WvdwpcZQDtivVRqxxcwcLAG9n53MCdHPxx+zJ7xUorFhcQ88V4RH dsTkoZiwNVR8xudU5kng83NScarpOKsTpCdqNW94QZfTdliQrNkJekT77I486ZhI TZkSpB59pz/SMpXQ4ob/MvahSHGGLLAg7mkz+nkQfjz0xlGprEqYYBoWrU6M4rxP uQmHXM71OzFHe5p0MHtUBv4KcjPEEOdFyXMVbtkTQ0/fV9wgXOWmRl+v+Z1uLvZj yRoYJ6rAnlvgdJLXDrmx7p4xvuuhSNdtwl7pQiQ5A3CA3RKmx8jCX9xiZw7Q3ApF bbjR9uKBzN++8LzVl3Dr75AVAg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:23 2026 by rpki-client