$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft File: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft (raw, json) Hash identifier: kg8wWs3x+4BbR37ATLA9TiPC49Trz+y1IDsI8DBXjzM= Subject key identifier: 98:8F:07:4E:72:ED:CD:5F:6F:08:4B:C1:91:71:19:BF:6D:00:90:FC Authority key identifier: 7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 Certificate issuer: /CN=A91A5DC1/serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Certificate serial: 07A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft Manifest number: 07A3 Signing time: Tue 24 Mar 2026 20:05:13 +0000 Manifest this update: Tue 24 Mar 2026 20:05:12 +0000 Manifest next update: Tue 31 Mar 2026 20:05:12 +0000 Files and hashes: 1: ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl (hash: hp9+YesS7/6X4qKv09Rt78WSvUYUcOmtMAV9zR9/h2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1955 (0x7a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5DC1, serialNumber=7A9DA461EBEBD15316420739C89EC4CCEE99C160 Validity Not Before: Mar 24 20:05:12 2026 GMT Not After : Mar 31 20:05:12 2026 GMT Subject: CN=69c2ee79-d7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:1e:ad:a4:31:ff:ed:f7:56:b8:90:12:91: 60:51:2f:c5:9f:53:73:d6:74:6e:3f:5d:42:93:bd: 26:3f:a0:80:2a:0f:b6:f7:f0:74:e3:8a:38:b9:dd: d9:75:ad:e2:fd:3b:34:80:8d:22:88:49:fd:ba:83: 74:28:e7:cb:b8:75:61:dc:2a:56:1f:79:15:09:e5: 87:72:98:af:b2:3e:70:4c:e5:85:71:04:fa:2b:54: eb:e6:69:31:ee:d8:2e:f2:4c:0e:ba:41:bc:c5:ea: 0d:ed:ad:8d:08:e7:9c:99:75:e9:45:6e:86:d3:4b: c4:b5:cb:57:d7:42:2d:07:6b:26:ca:7d:d3:22:a1: b4:a6:ac:52:c8:94:a5:ac:85:a1:f1:d6:2b:cd:ec: 14:10:2d:fe:11:c0:c2:c7:a6:5f:e3:21:36:01:cc: 6f:81:e8:08:f6:9a:7a:95:58:0f:ca:90:f6:80:65: a7:fa:d2:ea:8f:d2:a7:02:e2:28:73:fa:eb:22:ee: a6:27:77:85:30:40:0c:ba:e6:d4:6f:90:18:94:2b: 17:14:25:bb:07:b8:ed:ff:fe:aa:e3:89:34:36:8c: 9e:24:ad:82:c0:cf:82:ad:42:b8:16:fd:49:f2:f7: f3:67:e0:64:0f:e2:55:f3:16:9e:31:cc:67:05:cb: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8F:07:4E:72:ED:CD:5F:6F:08:4B:C1:91:71:19:BF:6D:00:90:FC X509v3 Authority Key Identifier: keyid:7A:9D:A4:61:EB:EB:D1:53:16:42:07:39:C8:9E:C4:CC:EE:99:C1:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5DC1/413A8924458111EB8E0E742CC4F9AE02/ep2kYevr0VMWQgc5yJ7EzO6ZwWA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e4:8f:cf:2c:c3:ca:2e:64:03:80:0d:24:cc:be:e6:28:22: 03:26:f0:95:8c:8c:f5:3f:fc:16:66:e1:a2:d6:7c:f3:fe:03: 17:91:f5:be:e4:ad:ab:58:6c:dc:4e:65:68:a9:25:52:32:49: a2:db:ab:50:7f:45:aa:5d:0b:ed:30:3a:85:ff:27:31:a7:08: 4d:81:7a:10:a5:02:5b:c6:5a:86:8d:dd:96:d6:9e:62:18:0f: 15:b2:7d:92:70:97:7c:48:5c:a1:2d:48:9f:ee:ea:af:39:38: 8a:04:17:ee:de:da:e4:f2:fd:2d:37:82:3a:5b:4b:c9:54:91: 88:71:0d:98:3c:8b:f7:c7:83:4e:60:1a:83:fe:17:7e:e5:22: 72:e0:ef:07:7f:ba:ef:b5:8a:f0:c9:20:5a:da:c5:fb:6a:24: a7:57:c5:2a:db:22:94:25:b1:10:57:2a:07:6c:3d:92:7c:e5: f9:a2:bb:48:82:5d:8d:02:ca:18:c9:f1:f1:1f:59:ec:0f:f4: 19:01:e5:4f:71:31:34:83:f7:0c:22:67:e2:32:a0:4c:18:ab: 04:61:6e:37:98:29:b7:5d:3a:21:4d:fe:b1:73:53:74:6d:26: c6:f6:18:0c:a4:ee:d0:34:3e:10:69:fa:b5:fa:37:62:06:82: 2c:8c:32:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEQzExMTAvBgNVBAUTKDdBOURBNDYxRUJFQkQxNTMxNjQyMDczOUM4OUVDNEND RUU5OUMxNjAwHhcNMjYwMzI0MjAwNTEyWhcNMjYwMzMxMjAwNTEyWjAYMRYwFAYD VQQDEw02OWMyZWU3OS1kN2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sgeraQx/+33VriQEpFgUS/Fn1Nz1nRuP11Ck70mP6CAKg+29/B044o4ud3Z da3i/Ts0gI0iiEn9uoN0KOfLuHVh3CpWH3kVCeWHcpivsj5wTOWFcQT6K1Tr5mkx 7tgu8kwOukG8xeoN7a2NCOecmXXpRW6G00vEtctX10ItB2smyn3TIqG0pqxSyJSl rIWh8dYrzewUEC3+EcDCx6Zf4yE2AcxvgegI9pp6lVgPypD2gGWn+tLqj9KnAuIo c/rrIu6mJ3eFMEAMuubUb5AYlCsXFCW7B7jt//6q44k0NoyeJK2CwM+CrUK4Fv1J 8vfzZ+BkD+JV8xaeMcxnBcvXGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiPB05y 7c1fbwhLwZFxGb9tAJD8MB8GA1UdIwQYMBaAFHqdpGHr69FTFkIHOciexMzumcFg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNURDMS80MTNBODkyNDQ1 ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBWTVdRZ2M1eUo3RXpPNlp3 V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwMmtZZXZyMFZNV1FnYzV5SjdFek82WndXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NURDMS80MTNBODkyNDQ1ODExMUVCOEUwRTc0MkNDNEY5QUUwMi9lcDJrWWV2cjBW TVdRZ2M1eUo3RXpPNlp3V0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn+SPzyzDyi5kA4ANJMy+5igiAybwlYyM9T/8FmbhotZ88/4DF5H1vuStq1hs 3E5laKklUjJJoturUH9Fql0L7TA6hf8nMacITYF6EKUCW8Zaho3dltaeYhgPFbJ9 knCXfEhcoS1In+7qrzk4igQX7t7a5PL9LTeCOltLyVSRiHENmDyL98eDTmAag/4X fuUicuDvB3+677WK8MkgWtrF+2okp1fFKtsilCWxEFcqB2w9knzl+aK7SIJdjQLK GMnx8R9Z7A/0GQHlT3ExNIP3DCJn4jKgTBirBGFuN5gpt106IU3+sXNTdG0mxvYY DKTu0DQ+EGn6tfo3YgaCLIwyiA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:54 2026 by rpki-client