$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: qyTS4q7SZqho+akurxJQ4N+rCpYGU2qjQjoAi7B7y+s= Subject key identifier: F9:08:CD:2F:91:E7:7E:7E:38:8D:6A:24:93:A4:88:AF:6E:F7:94:C3 Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 07A9 Signing time: Sat 04 Apr 2026 20:05:55 +0000 Manifest this update: Sat 04 Apr 2026 20:05:55 +0000 Manifest next update: Sat 11 Apr 2026 20:05:55 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: gdWAsY95xxHAK8oiiLzc3uOMEHmeq+ciznbU9+7fqEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Apr 4 20:05:55 2026 GMT Not After : Apr 11 20:05:55 2026 GMT Subject: CN=69d16f23-df9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a7:9a:22:f6:51:34:f5:b3:71:f1:c3:3a:b0: 8f:62:69:dd:66:5a:aa:c3:7d:13:48:86:0f:6c:cc: 41:a0:f9:d2:13:b3:c2:a5:b9:d2:7f:f2:19:af:29: 11:0f:42:5f:7f:65:71:f1:a1:da:e0:3f:a4:de:d9: a4:30:8e:db:09:f4:1d:55:48:a5:0c:14:eb:66:49: 55:92:61:42:7b:62:96:6f:55:58:06:90:c0:ab:fc: ff:5d:0b:d5:47:b2:bb:23:ad:20:ff:2e:82:fe:e7: 66:45:22:df:33:2d:f4:6b:4a:cf:90:8b:96:08:ba: 7b:28:b8:fb:07:06:89:c8:c3:f7:77:a7:17:f0:6f: 83:52:b0:a4:3f:b8:36:fd:aa:7d:57:a5:37:7c:3c: 39:07:0b:26:1c:7e:98:ee:d5:42:3f:9a:b7:d1:1d: 6d:98:a2:25:2c:95:2d:ee:b8:67:15:97:05:e1:6c: d7:ef:4e:74:d9:73:21:11:54:cb:0c:be:e8:6d:11: b0:04:66:ca:c3:a9:7f:b3:79:92:ec:ca:a5:99:8d: 6d:80:3d:e3:c1:42:2f:7e:17:75:3d:10:d4:71:79: 91:b9:1c:c1:97:ff:00:b3:22:63:dd:7c:d2:69:e9: 08:fe:87:b7:c8:49:9f:38:c4:92:0a:32:3a:72:12: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:08:CD:2F:91:E7:7E:7E:38:8D:6A:24:93:A4:88:AF:6E:F7:94:C3 X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:7f:ba:47:a0:e8:e6:4a:0c:15:fe:7f:0e:85:4b:28:58:6b: 67:72:af:6a:43:cb:c8:32:be:db:10:53:98:27:2c:66:b6:b3: a4:b1:11:71:1f:11:28:3d:bf:a0:0b:59:3a:93:22:92:2e:22: f4:53:5b:0d:46:ea:95:2f:22:00:ad:83:17:ff:3f:8c:1b:f4: 39:53:60:b0:8c:75:40:51:15:07:97:81:ad:fb:16:42:ab:b3: b8:3e:47:44:63:71:0a:54:0c:61:45:fe:9e:be:7b:e7:1f:30: 46:cd:d1:f8:36:04:ae:b0:99:2b:db:2e:1c:69:06:f2:20:45: 92:70:a3:ed:df:b7:27:86:58:b6:f5:d8:dc:81:37:c9:49:28: ef:5f:76:da:42:29:0b:77:63:69:79:75:6b:0c:9d:81:8a:f6: db:34:1c:7d:05:85:fc:8c:6e:13:02:f6:1e:4e:e8:4d:be:88: 98:9b:ee:e2:e0:7b:1a:b6:58:b3:15:d7:5d:b7:af:8d:f1:8f: 1a:61:3d:19:5e:51:e8:bd:50:36:49:30:bc:e4:cd:68:df:3e: 87:0f:82:79:f7:3e:24:5d:1e:32:34:ab:46:af:c1:50:ee:3e: 32:bc:91:66:cc:7e:99:92:4a:1b:78:43:c0:5b:d1:ef:b8:c0: b9:a5:80:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjYwNDA0MjAwNTU1WhcNMjYwNDExMjAwNTU1WjAYMRYwFAYD VQQDEw02OWQxNmYyMy1kZjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaeaIvZRNPWzcfHDOrCPYmndZlqqw30TSIYPbMxBoPnSE7PCpbnSf/IZrykR D0Jff2Vx8aHa4D+k3tmkMI7bCfQdVUilDBTrZklVkmFCe2KWb1VYBpDAq/z/XQvV R7K7I60g/y6C/udmRSLfMy30a0rPkIuWCLp7KLj7BwaJyMP3d6cX8G+DUrCkP7g2 /ap9V6U3fDw5BwsmHH6Y7tVCP5q30R1tmKIlLJUt7rhnFZcF4WzX70502XMhEVTL DL7obRGwBGbKw6l/s3mS7MqlmY1tgD3jwUIvfhd1PRDUcXmRuRzBl/8AsyJj3XzS aekI/oe3yEmfOMSSCjI6chKfXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPkIzS+R 535+OI1qJJOkiK9u95TDMB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC3+6R6Do5koMFf5/DoVLKFhrZ3KvakPLyDK+2xBTmCcsZrazpLERcR8RKD2/ oAtZOpMiki4i9FNbDUbqlS8iAK2DF/8/jBv0OVNgsIx1QFEVB5eBrfsWQquzuD5H RGNxClQMYUX+nr575x8wRs3R+DYErrCZK9suHGkG8iBFknCj7d+3J4ZYtvXY3IE3 yUko71922kIpC3djaXl1awydgYr22zQcfQWF/IxuEwL2Hk7oTb6ImJvu4uB7GrZY sxXXXbevjfGPGmE9GV5R6L1QNkkwvOTNaN8+hw+Cefc+JF0eMjSrRq/BUO4+MryR Zsx+mZJKG3hDwFvR77jAuaWA3Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:01 2026 by rpki-client