$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: YqjT3x1a8mapMycx5FMO9HZzHesEBMbTBSjI8J2YQW8= Subject key identifier: EE:66:32:79:7D:52:0E:46:DE:FD:E0:FD:09:77:33:4C:6D:78:47:C5 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 03A0 Signing time: Fri 19 Sep 2025 01:10:00 +0000 Manifest this update: Fri 19 Sep 2025 01:09:59 +0000 Manifest next update: Fri 26 Sep 2025 01:09:59 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: ChI7cSWrVvMMayj2G57GWcJbRNd3qmRFNOLLX2JF8g4=) 2: 7ABCBB70AFFE11ECA52DBA5DC4F9AE02.roa (hash: lDraqThqAp2VTAeBcGzfKiHZ4mgdJ9Pve9y5JAjucic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Sep 19 01:09:59 2025 GMT Not After : Sep 26 01:09:59 2025 GMT Subject: CN=68ccad68-7f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:01:6d:b1:b1:0e:85:6b:44:2f:c3:ce:65:33: f4:f0:e9:32:40:83:49:ea:ed:fc:58:61:1d:07:36: 32:67:b8:26:41:ca:48:cd:8f:cb:5e:45:50:e9:8a: ab:39:5d:61:f8:26:c8:e1:98:9c:72:ce:bc:2a:ea: 93:53:73:7b:95:59:bd:85:8a:2b:3d:d2:3a:f0:1d: 16:cf:20:85:9b:06:7c:f4:cc:d9:c8:1e:2f:50:f8: 9e:8e:d4:37:4c:2b:1e:db:a7:74:fe:5f:63:5a:8d: ce:a0:b7:fa:b0:7d:9c:fd:e3:42:1a:25:11:7a:40: 0a:ca:38:27:18:78:79:4c:c2:c7:98:8e:0d:f4:7f: e1:71:f2:11:e0:07:df:03:c1:69:03:dd:4d:b8:ee: a3:12:35:ba:39:62:ae:ee:10:bf:a5:d1:80:d8:6e: d1:db:6f:6f:d8:68:af:12:8c:e8:cb:cb:f1:b5:87: 1a:1a:66:e8:02:11:e5:7f:56:25:d0:83:83:45:3e: 55:b6:d0:b7:5d:5e:85:5f:b0:6b:8c:48:75:75:52: 97:ef:27:01:6f:cf:46:dd:6c:e7:e6:ea:38:57:08: 10:e1:7a:0c:fe:bb:52:98:59:3b:c8:55:7d:35:4e: bf:48:71:1a:63:cc:3a:68:fe:a1:53:e5:20:ca:75: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:66:32:79:7D:52:0E:46:DE:FD:E0:FD:09:77:33:4C:6D:78:47:C5 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:a6:7a:c8:c2:ef:9f:7a:f0:58:d4:21:55:e9:d9:1f:cb:be: 35:38:c2:75:e3:16:e9:09:41:b7:ef:cb:10:1c:56:42:5a:b4: 60:21:38:22:9b:58:69:6f:86:d0:05:30:e5:41:0b:27:e6:8e: d0:dc:0a:ef:49:06:e1:91:52:6e:1b:41:d1:7e:b1:fb:0f:e5: f0:b1:c6:1a:62:d1:a6:0c:a6:96:ee:dc:c0:ea:82:09:21:47: ae:7a:90:27:0e:a7:e0:f6:3f:90:ad:c7:81:ce:77:9d:a6:dc: ee:94:34:31:84:98:37:7c:2f:98:ed:09:e4:64:fc:9f:da:5c: 03:ac:1d:9c:50:cc:34:9c:ed:03:0c:17:2c:f4:58:ed:3f:1d: e8:3a:a8:f2:b4:8c:dd:11:f3:7d:81:42:56:f7:bb:ca:89:54: 7e:64:d8:f0:80:a3:c7:7a:0b:e6:8b:42:8d:52:37:34:4d:fe: 17:9e:0d:d2:f8:b0:f1:00:88:6e:9a:55:67:47:62:8a:f8:70: 35:28:90:23:91:0b:67:b5:06:c0:86:8c:b7:ed:d9:a5:ae:42: ae:4f:c1:1d:da:98:f3:3f:cb:43:33:09:b4:a0:42:7e:7c:99: a0:4e:90:3a:2d:c0:39:c7:35:ea:9a:78:65:78:58:e9:ce:ce: f4:53:99:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjUwOTE5MDEwOTU5WhcNMjUwOTI2MDEwOTU5WjAYMRYwFAYD VQQDEw02OGNjYWQ2OC03ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AFtsbEOhWtEL8POZTP08OkyQINJ6u38WGEdBzYyZ7gmQcpIzY/LXkVQ6Yqr OV1h+CbI4Ziccs68KuqTU3N7lVm9hYorPdI68B0WzyCFmwZ89MzZyB4vUPiejtQ3 TCse26d0/l9jWo3OoLf6sH2c/eNCGiURekAKyjgnGHh5TMLHmI4N9H/hcfIR4Aff A8FpA91NuO6jEjW6OWKu7hC/pdGA2G7R229v2GivEozoy8vxtYcaGmboAhHlf1Yl 0IODRT5VttC3XV6FX7BrjEh1dVKX7ycBb89G3Wzn5uo4VwgQ4XoM/rtSmFk7yFV9 NU6/SHEaY8w6aP6hU+UgynV5NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5mMnl9 Ug5G3v3g/Ql3M0xteEfFMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGpnrIwu+fevBY1CFV6dkfy741OMJ14xbpCUG378sQHFZCWrRgITgi m1hpb4bQBTDlQQsn5o7Q3ArvSQbhkVJuG0HRfrH7D+XwscYaYtGmDKaW7tzA6oIJ IUeuepAnDqfg9j+QrceBznedptzulDQxhJg3fC+Y7QnkZPyf2lwDrB2cUMw0nO0D DBcs9FjtPx3oOqjytIzdEfN9gUJW97vKiVR+ZNjwgKPHegvmi0KNUjc0Tf4Xng3S +LDxAIhumlVnR2KK+HA1KJAjkQtntQbAhoy37dmlrkKuT8Ed2pjzP8tDMwm0oEJ+ fJmgTpA6LcA5xzXqmnhleFjpzs70U5k4 -----END CERTIFICATE-----Generated at Fri Sep 19 04:02:32 2025 by rpki-client