$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: rCDPZ94hkvUsdlZ+ZFuHImIYbjk+8y0DcQw6dOn4mg4= Subject key identifier: B5:EB:A7:D6:5A:DF:34:DF:F1:96:4B:40:23:C4:BE:D6:C9:B4:6F:A7 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 040B Signing time: Sun 05 Apr 2026 00:12:36 +0000 Manifest this update: Sun 05 Apr 2026 00:12:35 +0000 Manifest next update: Sun 12 Apr 2026 00:12:35 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: PXnYhgg+G9sDNS9Jdn75nuAniItGlahaspmtQGJQfLs=) 2: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: D6VPmXFDc+G5ZgUvGAmbcPnFMvgmVskOcccS3cS1IpY=) 3: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: Utidw5eD+Ey8KmLxBNEaERSjjHpRl3N3GM7Q067OeCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Apr 5 00:12:35 2026 GMT Not After : Apr 12 00:12:35 2026 GMT Subject: CN=69d1a8f4-b620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b5:35:4b:58:bc:e8:94:95:b4:91:b3:23:cd: 50:09:ee:f9:0f:86:b8:8e:ad:b9:74:30:bc:22:a6: 50:6d:50:bd:a1:66:a3:26:65:2c:ef:03:d0:73:7a: 08:de:30:89:68:32:ea:34:e3:b9:5d:20:22:a6:39: 59:d5:c7:5e:f1:09:85:f2:a3:25:f3:14:55:d4:3e: 3d:5b:96:e9:f9:45:5d:d1:b3:bb:c9:c5:b3:75:a8: 91:ab:37:f8:ad:82:0c:f7:ba:f3:48:92:1f:f8:4f: 68:4f:5a:4e:49:32:65:c7:a7:ad:67:e3:ff:81:2e: 6e:49:01:8f:7c:28:77:80:fe:c8:84:f8:b7:54:5c: 2f:8a:18:17:91:e1:74:aa:f0:ff:63:62:83:7e:41: 68:08:55:56:d6:33:b7:f4:b1:3f:17:77:28:8c:da: 86:e7:ca:a0:aa:67:6e:59:f3:66:86:1b:8e:ff:99: 7f:7b:bb:d6:83:5b:6e:06:4e:26:e5:f2:e0:ec:41: ee:21:1b:e3:be:d6:9a:22:78:c7:cb:c5:5c:7b:04: f1:28:cf:a4:40:ef:64:a5:ba:39:2d:ca:18:08:52: 90:df:32:ad:2d:f4:6c:9c:90:30:d2:b0:07:20:a5: b7:11:1e:0a:49:ab:d1:51:65:28:34:50:2c:dc:75: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:EB:A7:D6:5A:DF:34:DF:F1:96:4B:40:23:C4:BE:D6:C9:B4:6F:A7 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:23:7e:a8:70:71:14:e3:74:01:71:84:b3:d9:c6:93:24:a0: 2c:49:da:da:09:85:c7:b2:89:9e:b2:d0:0c:85:85:ab:d6:15: 85:fe:33:82:b2:6f:fe:a4:90:26:51:be:b4:f4:42:2b:07:db: c8:ce:b3:e0:91:d1:12:1e:34:e5:ec:36:cf:25:f7:bd:2f:ef: 51:df:47:87:ab:f5:b4:3d:30:e3:7e:3c:12:c4:7d:bf:00:a5: 90:bf:25:ea:98:ed:61:c6:f8:ea:48:eb:fc:fd:a5:ab:d0:41: aa:1e:b7:f1:e1:1d:12:8e:31:18:0e:b2:7d:e8:ab:55:1e:7c: 88:a9:d2:48:82:db:15:8a:d0:3c:85:31:5d:2b:f7:15:6a:47: 27:21:08:19:f5:e6:ad:73:29:96:8b:20:23:3e:60:62:79:2f: c1:4d:67:24:bf:01:21:21:a3:4b:71:24:64:b3:46:83:52:db: 6b:de:65:79:8b:65:e8:f4:b3:e6:b3:11:f0:12:81:ef:89:ab: 82:d8:1c:8d:3f:70:09:f0:1c:56:b0:7b:0a:e4:8f:26:2d:59: fc:6e:ed:e9:e1:1e:d0:6d:ce:99:4f:fc:f1:f7:93:06:08:34: d9:30:9a:26:ea:8d:7f:f0:a3:02:3d:b9:a7:6a:2f:e8:e8:54: fa:ee:75:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjYwNDA1MDAxMjM1WhcNMjYwNDEyMDAxMjM1WjAYMRYwFAYD VQQDEw02OWQxYThmNC1iNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8bU1S1i86JSVtJGzI81QCe75D4a4jq25dDC8IqZQbVC9oWajJmUs7wPQc3oI 3jCJaDLqNOO5XSAipjlZ1cde8QmF8qMl8xRV1D49W5bp+UVd0bO7ycWzdaiRqzf4 rYIM97rzSJIf+E9oT1pOSTJlx6etZ+P/gS5uSQGPfCh3gP7IhPi3VFwvihgXkeF0 qvD/Y2KDfkFoCFVW1jO39LE/F3cojNqG58qgqmduWfNmhhuO/5l/e7vWg1tuBk4m 5fLg7EHuIRvjvtaaInjHy8VcewTxKM+kQO9kpbo5LcoYCFKQ3zKtLfRsnJAw0rAH IKW3ER4KSavRUWUoNFAs3HXq8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLXrp9Za 3zTf8ZZLQCPEvtbJtG+nMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgSN+qHBxFON0AXGEs9nGkySgLEna2gmFx7KJnrLQDIWFq9YVhf4zgrJv/qSQ JlG+tPRCKwfbyM6z4JHREh405ew2zyX3vS/vUd9Hh6v1tD0w4348EsR9vwClkL8l 6pjtYcb46kjr/P2lq9BBqh638eEdEo4xGA6yfeirVR58iKnSSILbFYrQPIUxXSv3 FWpHJyEIGfXmrXMplosgIz5gYnkvwU1nJL8BISGjS3EkZLNGg1Lba95leYtl6PSz 5rMR8BKB74mrgtgcjT9wCfAcVrB7CuSPJi1Z/G7t6eEe0G3OmU/88feTBgg02TCa JuqNf/CjAj25p2ov6OhU+u51ZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:54:21 2026 by rpki-client