$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: XFewKm6Snr1CFD81QGxfnRZ65FtxfnW+WKyK0hKaxz0= Subject key identifier: 82:96:3F:BB:07:14:37:AA:1D:EB:4C:B4:9D:9C:67:21:C8:C7:60:27 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 25CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2598 Signing time: Mon 02 Nov 2026 15:02:01 +0000 Manifest this update: Mon 02 Nov 2026 15:02:01 +0000 Manifest next update: Mon 09 Nov 2026 15:02:01 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: aj044S4Uk/WBaJh9sO/nfH4a5mamgGpG3YWKM0HsTnA=) 2: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: Z4Rm3AAC08xH1t9OYPaZB/yfoesNVGIoDscrROCpTs0=) 3: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: wltUxvT2gIrkk4cq9N351wOYzI5GH6/ywEsI+BXEuw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 15:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9679 (0x25cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Nov 2 15:02:01 2026 GMT Not After : Nov 9 15:02:01 2026 GMT Subject: CN=6ae8a5e9-1cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:51:03:85:2c:97:91:b5:f4:09:e5:93:69: 09:80:2a:eb:ce:b1:a1:d1:db:a7:0b:5f:ef:be:82: 29:37:ba:9d:c3:83:0d:3f:6e:54:3d:17:39:68:cd: 8b:96:b3:c0:cb:06:53:b7:82:79:96:f3:b9:10:8a: bb:d6:83:25:5f:83:be:e7:9a:9f:e5:17:73:fc:a2: f2:bf:10:cf:e3:9c:2b:43:d7:14:e4:f2:11:c0:9d: 94:92:10:9c:a1:16:04:67:17:0f:e1:44:45:1e:53: 2e:55:05:e0:80:f2:e9:9b:b9:9f:6f:44:05:e8:22: eb:2f:01:88:7f:2d:4c:3f:54:34:59:0c:48:42:f0: 45:c8:f2:92:a2:a5:76:28:5f:08:71:68:a9:6b:1c: f0:23:f4:e2:52:d8:2b:0f:9d:df:d9:5f:1f:fc:e6: e5:44:0e:0c:6d:3a:e4:ad:e5:74:e4:6b:e3:5e:47: 00:06:0e:df:a2:3e:23:90:02:33:d7:d2:e4:19:be: 18:38:b1:6c:38:53:1c:29:fd:5c:11:ce:bd:30:6c: 48:c2:6c:35:1b:5b:0d:05:96:76:40:b4:3a:b7:e8: 20:16:a1:34:4e:3b:60:31:0e:e7:0b:60:38:8b:27: a3:6d:17:de:3f:2e:7c:3d:88:a1:25:ef:26:db:97: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:96:3F:BB:07:14:37:AA:1D:EB:4C:B4:9D:9C:67:21:C8:C7:60:27 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:18:0b:71:26:ec:06:b8:22:0e:a9:14:7c:75:f2:ae:f3:00: d0:0b:3a:0d:8f:64:03:3b:41:1c:e3:aa:88:23:0f:61:d7:fd: 39:93:f0:03:76:b8:5a:a8:7d:c0:cf:71:8c:18:e8:61:8f:78: 09:cc:52:85:cd:d6:ef:f2:4f:3b:31:3b:b6:d0:50:90:94:d4: 28:b2:03:22:10:f6:17:67:69:7f:87:8e:a5:54:74:47:02:8c: ba:dc:76:30:cc:fb:2c:06:80:b9:94:95:46:05:92:b9:d8:a1: 9d:c7:8d:12:ab:b9:cd:60:a4:e6:46:b3:20:c2:c1:58:01:cc: 7a:99:78:5f:af:4e:a4:93:76:74:a5:d1:c3:3a:95:91:a1:2c: 21:20:8a:36:8a:2d:80:55:38:e9:e8:2a:ee:ff:be:3f:03:aa: 4f:10:4c:55:0b:e1:7e:74:eb:1c:cc:3d:f9:52:21:45:0a:73: 03:35:17:ef:db:0b:29:ee:2e:41:e9:8b:c9:b2:9b:8d:03:24: e3:70:de:c0:8f:80:e8:83:de:a4:ff:42:be:cf:c7:76:ea:35: d6:7a:3f:68:4c:7b:e2:9e:e7:8d:a7:c7:c9:af:a9:0e:c3:74: ad:41:3e:8f:93:f0:f8:a2:0a:df:30:da:10:2c:1e:0a:f9:1e: 91:d6:da:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYxMTAyMTUwMjAxWhcNMjYxMTA5MTUwMjAxWjAYMRYwFAYD VQQDEw02YWU4YTVlOS0xY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv45RA4Usl5G19Anlk2kJgCrrzrGh0dunC1/vvoIpN7qdw4MNP25UPRc5aM2L lrPAywZTt4J5lvO5EIq71oMlX4O+55qf5Rdz/KLyvxDP45wrQ9cU5PIRwJ2UkhCc oRYEZxcP4URFHlMuVQXggPLpm7mfb0QF6CLrLwGIfy1MP1Q0WQxIQvBFyPKSoqV2 KF8IcWipaxzwI/TiUtgrD53f2V8f/OblRA4MbTrkreV05GvjXkcABg7foj4jkAIz 19LkGb4YOLFsOFMcKf1cEc69MGxIwmw1G1sNBZZ2QLQ6t+ggFqE0TjtgMQ7nC2A4 iyejbRfePy58PYihJe8m25fjSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKWP7sH FDeqHetMtJ2cZyHIx2AnMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxBgLcSbsBrgiDqkUfHXyrvMA0As6DY9kAztBHOOqiCMPYdf9OZPwA3a4Wqh9 wM9xjBjoYY94CcxShc3W7/JPOzE7ttBQkJTUKLIDIhD2F2dpf4eOpVR0RwKMutx2 MMz7LAaAuZSVRgWSudihnceNEqu5zWCk5kazIMLBWAHMepl4X69OpJN2dKXRwzqV kaEsISCKNootgFU46egq7v++PwOqTxBMVQvhfnTrHMw9+VIhRQpzAzUX79sLKe4u QemLybKbjQMk43DewI+A6IPepP9Cvs/Hduo11no/aEx74p7njafHya+pDsN0rUE+ j5Pw+KIK3zDaECweCvkekdbazw== -----END CERTIFICATE-----Generated at Tue Nov 3 03:51:15 2026 by rpki-client