$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: M+HXBkUiMMbaYfYTY3gbiOvp3RGEfNye9S4wLGELLhs= Subject key identifier: 41:59:67:7F:D5:A7:8F:5D:17:7C:42:02:55:7E:52:B7:B0:F8:AB:33 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2597 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2560 Signing time: Thu 16 Jul 2026 15:13:24 +0000 Manifest this update: Thu 16 Jul 2026 15:13:23 +0000 Manifest next update: Thu 23 Jul 2026 15:13:23 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: YLucrJSD9Uh0CUnR7sJmZkO65hOGXJaz0MiIiNy6GWo=) 2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: wltUxvT2gIrkk4cq9N351wOYzI5GH6/ywEsI+BXEuw0=) 3: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: Z4Rm3AAC08xH1t9OYPaZB/yfoesNVGIoDscrROCpTs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 15:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9623 (0x2597) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jul 16 15:13:23 2026 GMT Not After : Jul 23 15:13:23 2026 GMT Subject: CN=6a58f514-bf69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:53:3e:7e:8a:21:7f:7c:cc:c0:e9:fa:95: d3:bb:25:e2:70:05:d1:d8:48:e5:60:4d:f5:5d:a5: e7:d8:b9:e2:a7:1c:b5:49:0a:ef:3d:0c:4a:8a:f9: d3:38:ba:89:46:c7:96:bd:d1:59:ef:30:b5:0e:49: d3:2c:cd:65:36:42:3a:52:f6:07:35:a4:9b:5a:29: 67:ac:85:c8:1b:45:2e:ed:26:af:91:0b:b0:7a:6b: cf:d2:dc:1b:dc:94:3e:3c:79:1a:48:80:b8:f1:af: 7c:e2:e8:76:18:ce:52:d1:04:2c:ca:d6:8a:85:d1: 59:8e:10:1b:a5:1c:12:46:8e:67:45:76:03:8d:e9: ec:53:5b:9b:a1:d3:c4:2e:ee:45:ab:14:e4:45:32: 3e:29:18:a1:94:d1:a4:55:fe:35:6e:3c:85:12:d8: d1:3e:4c:0d:87:aa:0e:9c:44:dc:62:46:57:9e:76: 16:0f:11:95:33:99:2c:bc:f2:7f:5f:80:dd:d3:fb: 1d:df:86:a6:2f:0e:29:db:d1:87:3c:45:7a:41:11: a4:51:b6:43:64:1e:e5:04:9d:fa:5d:a8:97:82:cb: 9f:19:93:50:b7:cd:6e:b1:0d:7c:f7:5a:15:3e:9a: 83:01:38:d9:b7:07:20:a3:bc:3d:1b:3f:60:59:cd: 0a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:67:7F:D5:A7:8F:5D:17:7C:42:02:55:7E:52:B7:B0:F8:AB:33 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:4a:ea:2d:d5:43:26:53:dc:b3:78:1e:98:b8:a2:45:7f:be: 82:30:b1:45:e3:c4:8f:21:72:09:13:0f:e5:68:8d:86:ed:f8: 4e:32:44:3f:05:2c:e4:df:0f:09:38:0d:1d:f9:28:c5:6c:e9: df:c3:ad:8d:49:23:b8:b7:34:4f:04:72:36:75:fe:11:32:f5: 44:83:5e:bb:3b:32:62:18:36:74:c6:01:79:85:ad:4b:90:ab: 2c:47:ac:77:25:46:1b:b4:57:17:b0:db:a4:70:b3:21:02:a1: e0:f8:4a:80:58:03:b1:f9:fa:3d:0c:a6:84:b9:6e:7e:e2:53: bd:fa:a1:c6:4e:b7:5b:85:4f:2b:39:03:f4:30:c6:cf:d2:a3: 80:96:a0:42:d3:46:7b:91:cb:e1:38:83:79:19:8c:4b:c8:ac: ff:09:b8:4a:60:1a:13:1c:3a:db:f1:39:1a:40:a1:4a:fc:7b: de:7a:fe:cd:d7:f5:2f:a3:d1:d6:87:48:d7:be:0b:f1:5d:b1: ab:13:5a:e0:be:69:09:e4:3c:36:45:ba:c5:ab:23:ac:ab:2c: 59:c5:e8:12:67:e5:29:ec:14:d2:70:90:c9:43:f8:7a:30:db: 89:84:4c:55:c3:07:74:51:a6:12:47:26:16:49:8c:0a:f3:81: 6d:5a:cc:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwNzE2MTUxMzIzWhcNMjYwNzIzMTUxMzIzWjAYMRYwFAYD VQQDEw02YTU4ZjUxNC1iZjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfFTPn6KIX98zMDp+pXTuyXicAXR2EjlYE31XaXn2Lnipxy1SQrvPQxKivnT OLqJRseWvdFZ7zC1DknTLM1lNkI6UvYHNaSbWilnrIXIG0Uu7SavkQuwemvP0twb 3JQ+PHkaSIC48a984uh2GM5S0QQsytaKhdFZjhAbpRwSRo5nRXYDjensU1ubodPE Lu5FqxTkRTI+KRihlNGkVf41bjyFEtjRPkwNh6oOnETcYkZXnnYWDxGVM5ksvPJ/ X4Dd0/sd34amLw4p29GHPEV6QRGkUbZDZB7lBJ36XaiXgsufGZNQt81usQ1891oV PpqDATjZtwcgo7w9Gz9gWc0KDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEFZZ3/V p49dF3xCAlV+Urew+KszMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsUrqLdVDJlPcs3gemLiiRX++gjCxRePEjyFyCRMP5WiNhu34TjJEPwUs5N8P CTgNHfkoxWzp38OtjUkjuLc0TwRyNnX+ETL1RINeuzsyYhg2dMYBeYWtS5CrLEes dyVGG7RXF7DbpHCzIQKh4PhKgFgDsfn6PQymhLlufuJTvfqhxk63W4VPKzkD9DDG z9KjgJagQtNGe5HL4TiDeRmMS8is/wm4SmAaExw62/E5GkChSvx73nr+zdf1L6PR 1odI174L8V2xqxNa4L5pCeQ8NkW6xasjrKssWcXoEmflKewU0nCQyUP4ejDbiYRM VcMHdFGmEkcmFkmMCvOBbVrM0g== -----END CERTIFICATE-----Generated at Sat Jul 18 03:29:11 2026 by rpki-client