$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft File: ERAxDg-ARncD2Ed_s-4l8diIjp4.mft (raw, json) Hash identifier: pcA7PfjwvNK8ME8bO6P8NrOnW6IAOZcWoRp/2WrpMWY= Subject key identifier: 1F:DE:DE:E9:FD:C1:30:AB:26:DD:02:AA:F7:77:E7:15:3B:CC:87:B1 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2579 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft Manifest number: 2545 Signing time: Tue 02 Jun 2026 15:01:55 +0000 Manifest this update: Tue 02 Jun 2026 15:01:55 +0000 Manifest next update: Tue 09 Jun 2026 15:01:55 +0000 Files and hashes: 1: ERAxDg-ARncD2Ed_s-4l8diIjp4.crl (hash: FiQ3h8um0bRs3JBX8qs2g6MWe+A+A1KU9uy2KisJ4uM=) 2: 81E6A038BEBD11EBA1BC8A0FC4F9AE02.roa (hash: aeyxqgM/Bum6LEnRbk9OqtNY1VCfNbofKFi7pc/FW5U=) 3: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (hash: Q7LCJn4UOngJqKxFQBK5nVd5LUGaCgTS+cghyBmcZLM=) 4: D4EB3054E66811ECA007390EC4F9AE02.roa (hash: d70t34kfzJ1P/tOrmndhA9sif675IHxnm4UIqWmVa9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Jun 2026 15:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9593 (0x2579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jun 2 15:01:55 2026 GMT Not After : Jun 9 15:01:55 2026 GMT Subject: CN=6a1ef063-afa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8f:3c:50:eb:79:75:78:24:ce:3d:a4:b3:24: fa:75:b9:1f:9e:db:20:7d:c1:84:e6:48:6d:20:44: 5e:64:db:fb:7b:36:a1:64:3b:a2:ed:c9:2a:ce:ec: 0f:ac:c6:42:98:72:87:16:50:7c:8f:38:ef:73:b9: 9a:0a:6c:96:ed:c5:03:99:a8:d0:59:77:dc:84:6a: 2f:b7:06:b8:65:35:d6:69:40:42:87:95:3a:4b:c2: a7:05:db:48:5a:92:76:bc:ae:3e:8c:9b:fd:7c:e3: be:56:e8:c9:38:29:c7:86:9c:34:da:4c:78:34:77: 4c:8d:77:30:39:3a:b7:07:51:28:cc:af:53:1d:b0: 39:ce:aa:59:19:7d:7e:f9:3e:37:b1:cc:06:1e:a7: 25:9e:8c:b6:2b:63:39:73:a6:3f:13:f6:e8:48:47: ee:d6:bc:cf:7b:57:17:04:a7:5c:06:9d:6f:ad:46: bb:e0:3e:d9:18:08:16:86:ea:73:b0:08:ef:c4:7a: 1d:a2:ec:1c:f1:14:a6:0d:e0:11:35:d1:f6:94:eb: 6c:af:7b:1f:85:9c:ca:31:82:24:e0:4f:bc:10:f9: 72:2e:f3:64:ad:64:cc:b1:ae:7a:ee:40:d0:bb:f2: e8:7d:0a:85:49:4c:29:60:dc:55:31:6f:b8:a3:c7: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:DE:DE:E9:FD:C1:30:AB:26:DD:02:AA:F7:77:E7:15:3B:CC:87:B1 X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d1:79:37:90:82:f9:ab:52:8e:75:e9:a5:db:c5:bf:f4:c5: 99:d5:ad:74:0f:e2:fb:3a:40:70:c6:59:24:d8:e8:a4:31:c5: 32:60:a8:b4:3a:ff:3b:27:ee:40:da:3d:d3:a8:61:2f:79:d3: f9:57:df:24:6c:f7:f2:cc:14:65:0d:be:40:07:91:58:72:ec: ff:a3:26:ed:6f:91:21:18:76:2b:b3:7a:ba:0e:95:33:bd:78: de:d6:22:72:aa:32:0e:7e:c2:0e:a6:91:49:7f:28:e3:7b:99: f7:e4:d0:89:63:03:01:c2:a5:e1:38:c6:6d:c9:ec:4e:e0:1c: a7:1b:a1:e9:c2:e7:51:7d:a4:aa:df:30:ed:6f:6c:a9:48:9e: a6:6c:90:51:b8:13:21:ca:82:1b:74:c9:b3:2a:d8:00:87:15: e3:58:f9:25:8d:3e:4b:91:97:bc:f5:0a:42:ca:b5:0b:62:8a: 19:13:7f:7b:3a:65:0e:5b:28:09:b4:17:01:ba:8e:6b:c6:ca: 5f:de:9e:1b:aa:ee:ef:2c:cb:1c:e0:a6:f8:6c:8f:64:b7:c8: 25:25:f7:ff:ef:65:de:36:1f:ae:b5:63:e9:57:c3:3a:30:fb: 9d:c1:16:15:49:75:1a:7b:c5:dc:fa:cd:90:a5:22:25:9c:50: 23:0c:e5:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjYwNjAyMTUwMTU1WhcNMjYwNjA5MTUwMTU1WjAYMRYwFAYD VQQDEw02YTFlZjA2My1hZmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Y88UOt5dXgkzj2ksyT6dbkfntsgfcGE5khtIEReZNv7ezahZDui7ckqzuwP rMZCmHKHFlB8jzjvc7maCmyW7cUDmajQWXfchGovtwa4ZTXWaUBCh5U6S8KnBdtI WpJ2vK4+jJv9fOO+VujJOCnHhpw02kx4NHdMjXcwOTq3B1EozK9THbA5zqpZGX1+ +T43scwGHqclnoy2K2M5c6Y/E/boSEfu1rzPe1cXBKdcBp1vrUa74D7ZGAgWhupz sAjvxHodouwc8RSmDeARNdH2lOtsr3sfhZzKMYIk4E+8EPlyLvNkrWTMsa567kDQ u/LofQqFSUwpYNxVMW+4o8erhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/e3un9 wTCrJt0Cqvd35xU7zIexMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC9GREVGRDczNjRCRDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJu Y0QyRWRfcy00bDhkaUlqcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArdF5N5CC+atSjnXppdvFv/TFmdWtdA/i+zpAcMZZJNjopDHFMmCotDr/Oyfu QNo906hhL3nT+VffJGz38swUZQ2+QAeRWHLs/6Mm7W+RIRh2K7N6ug6VM7143tYi cqoyDn7CDqaRSX8o43uZ9+TQiWMDAcKl4TjGbcnsTuAcpxuh6cLnUX2kqt8w7W9s qUiepmyQUbgTIcqCG3TJsyrYAIcV41j5JY0+S5GXvPUKQsq1C2KKGRN/ezplDlso CbQXAbqOa8bKX96eG6ru7yzLHOCm+GyPZLfIJSX3/+9l3jYfrrVj6VfDOjD7ncEW FUl1GnvF3PrNkKUiJZxQIwzliA== -----END CERTIFICATE-----Generated at Tue Jun 2 21:19:44 2026 by rpki-client