$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft File: 96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json) Hash identifier: KWhLAlFCxSL0B34F0A1PFtF7BQoZlyGHdAsGZSmJz0s= Subject key identifier: A9:9C:CF:B0:C3:04:87:3C:55:3B:7E:0E:17:A4:87:EB:19:5E:2C:3B Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Certificate serial: 0474 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft Manifest number: 0467 Signing time: Sun 05 Apr 2026 00:00:26 +0000 Manifest this update: Sun 05 Apr 2026 00:00:26 +0000 Manifest next update: Sun 12 Apr 2026 00:00:26 +0000 Files and hashes: 1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: uh1gTKKW9jC6XNXsK6efmQPCb6gIfgvbrkmcBmnk2p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1140 (0x474) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Validity Not Before: Apr 5 00:00:26 2026 GMT Not After : Apr 12 00:00:26 2026 GMT Subject: CN=69d1a61a-e961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:0c:6b:87:0f:91:ef:f0:5b:0f:15:7c:5f: d3:60:01:27:3e:09:d7:4a:6f:99:f5:4f:1c:06:59: ba:1d:bb:1c:95:2a:cf:34:ad:7b:65:56:44:a6:86: 94:e9:9b:07:2f:5c:07:f0:2a:16:7f:c5:2c:ed:4f: b4:4b:5b:30:c5:f6:13:42:fa:af:d6:83:c6:15:d1: 43:27:27:2c:e4:ca:c3:18:5f:3f:c1:fe:76:c5:58: df:f1:21:b2:94:36:ea:2f:9e:b9:75:0b:88:2e:46: 51:5c:4e:3f:7a:18:e0:1d:d7:ba:c0:30:77:62:19: c6:bb:52:98:3e:f7:8b:ed:17:7c:db:2e:10:22:ed: c2:c6:b9:54:39:1a:8e:f8:19:5b:be:2a:69:97:6d: 98:c4:4a:6e:8c:7c:f0:85:0c:17:17:72:83:67:58: 0b:34:5a:2d:a4:8c:5d:82:3a:c7:e6:92:e8:b7:15: 4e:af:e4:46:0a:5e:37:92:36:e8:1e:d8:77:22:c3: 91:75:3c:1c:6c:a5:a6:35:88:40:61:98:9c:a5:2d: cc:f1:29:b9:e1:7f:21:70:51:a9:78:22:c9:b1:e9: c0:b5:c7:7b:16:f0:08:11:e8:44:78:cd:74:72:59: 2a:53:83:5d:61:16:43:f4:9f:04:1b:31:29:79:dc: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:9C:CF:B0:C3:04:87:3C:55:3B:7E:0E:17:A4:87:EB:19:5E:2C:3B X509v3 Authority Key Identifier: keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:9d:ac:78:a6:e7:9d:45:0f:cb:53:33:88:1d:dc:a3:36:8b: e8:d1:70:d5:95:56:72:57:00:13:82:b8:dc:c9:1f:f5:a9:0e: d3:63:8c:f5:1b:e1:06:6e:19:07:8d:e7:b1:c4:df:1d:5f:46: cc:97:7a:7a:7b:73:a9:46:19:f9:ea:9a:9b:26:16:30:27:55: 11:1e:f6:e3:ea:14:4e:ee:9c:9b:f3:a3:12:75:c0:a4:0f:9a: 50:83:83:f8:69:c1:5c:c6:f3:3a:b4:b6:98:3c:80:61:af:15: 98:e0:8e:98:4b:a6:b2:c6:82:fa:00:72:e9:52:5b:06:4c:57: 09:97:32:a8:0f:d4:27:a2:49:83:ea:7d:83:5b:1b:2b:82:b1: 07:30:f1:57:7f:18:e7:47:0e:0b:34:94:3c:8f:fd:2c:04:a2: d5:74:29:c8:f1:f5:f4:01:de:c3:ba:a9:51:b4:c7:50:2d:3e: 3d:b7:b4:96:11:74:07:64:40:87:a9:10:ba:07:c5:73:7d:91: 5b:1a:02:27:99:5e:b7:c8:33:2f:64:5d:07:31:d9:77:e6:90: 97:cf:09:d3:2b:db:71:87:97:b3:b9:65:1d:13:cb:ac:28:2a: cf:71:60:58:66:96:9e:4d:20:03:22:d3:8c:5d:0f:05:0a:64: 28:3f:40:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMkYxMTAvBgNVBAUTKEY3QTA3RjdBOTkxQzIxQTI1Q0QzOUFCMjBBREU0RkEz QjVFMDVEMTUwHhcNMjYwNDA1MDAwMDI2WhcNMjYwNDEyMDAwMDI2WjAYMRYwFAYD VQQDEw02OWQxYTYxYS1lOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sAMa4cPke/wWw8VfF/TYAEnPgnXSm+Z9U8cBlm6HbsclSrPNK17ZVZEpoaU 6ZsHL1wH8CoWf8Us7U+0S1swxfYTQvqv1oPGFdFDJycs5MrDGF8/wf52xVjf8SGy lDbqL565dQuILkZRXE4/ehjgHde6wDB3YhnGu1KYPveL7Rd82y4QIu3CxrlUORqO +Blbvippl22YxEpujHzwhQwXF3KDZ1gLNFotpIxdgjrH5pLotxVOr+RGCl43kjbo Hth3IsORdTwcbKWmNYhAYZicpS3M8Sm54X8hcFGpeCLJsenAtcd7FvAIEehEeM10 clkqU4NdYRZD9J8EGzEpedyJnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmcz7DD BIc8VTt+Dhekh+sZXiw7MB8GA1UdIwQYMBaAFPegf3qZHCGiXNOasgreT6O14F0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMyRi83MjFCMzFENDk2 MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lhSmMwNXF5Q3Q1UG83WGdY UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2Ql9lcGtjSWFKYzA1cXlDdDVQbzdYZ1hSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMyRi83MjFCMzFENDk2MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lh SmMwNXF5Q3Q1UG83WGdYUlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyp2seKbnnUUPy1MziB3cozaL6NFw1ZVWclcAE4K43Mkf9akO02OM9RvhBm4Z B43nscTfHV9GzJd6entzqUYZ+eqamyYWMCdVER724+oUTu6cm/OjEnXApA+aUIOD +GnBXMbzOrS2mDyAYa8VmOCOmEumssaC+gBy6VJbBkxXCZcyqA/UJ6JJg+p9g1sb K4KxBzDxV38Y50cOCzSUPI/9LASi1XQpyPH19AHew7qpUbTHUC0+Pbe0lhF0B2RA h6kQugfFc32RWxoCJ5let8gzL2RdBzHZd+aQl88J0yvbcYeXs7llHRPLrCgqz3Fg WGaWnk0gAyLTjF0PBQpkKD9ATA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:45 2026 by rpki-client