$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft File: epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json) Hash identifier: fVkHYZqRjiXpWfersFifGt6v6zsbrBWEPV8O+15pA+M= Subject key identifier: 17:15:34:CF:3F:2E:8B:FC:D5:46:95:BE:CC:5B:9E:63:7F:F2:54:E8 Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE Certificate issuer: /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Certificate serial: 03FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft Manifest number: 03F7 Signing time: Sun 01 Mar 2026 01:18:57 +0000 Manifest this update: Sun 01 Mar 2026 01:18:56 +0000 Manifest next update: Sun 08 Mar 2026 01:18:56 +0000 Files and hashes: 1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: 8PSiaGwrsfRY1WS1yMC5wt0AUw6HLG2mm713p+4x+4A=) 2: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: yhzK504aM0ZwukBm9Hp58v17YprcHumNvrbx2tCi/3c=) 3: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: xVfI/UuhEZlLBdOOX14MKLf7WRwvv4GN5zS12Efh5N8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1023 (0x3ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE Validity Not Before: Mar 1 01:18:56 2026 GMT Not After : Mar 8 01:18:56 2026 GMT Subject: CN=69a39401-7f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:88:37:52:19:4d:76:c2:88:bc:bd:b8:cb:a0: 5d:08:78:32:bf:65:52:ad:88:4d:ad:db:13:36:f9: c0:a4:7b:5f:4d:92:30:43:5e:e2:f5:0f:e9:01:b5: 46:ab:b2:60:98:d3:e5:72:2c:dd:b1:d4:88:8b:30: 85:0f:ac:5f:ed:49:03:42:7a:e4:32:70:21:2f:9d: 2f:75:e0:d4:d2:fc:68:11:e6:55:bf:3e:dd:c3:f0: 4e:c2:0d:4f:4c:da:8b:c3:4f:03:e9:53:5d:71:f9: 25:df:64:c1:c2:7e:ca:94:ba:0d:08:08:ea:d8:0b: 0f:74:64:ab:e5:10:32:5b:ed:30:85:94:3d:d0:71: fa:0b:7f:f4:94:48:33:17:ad:e1:77:5f:67:25:b5: 8b:ef:0e:d2:1c:c4:f4:1d:ea:aa:99:5d:81:ff:4d: 1d:08:a6:9d:c5:7d:b6:a0:cb:28:04:d5:f0:4b:9e: 85:29:45:8d:3f:a6:9c:46:7d:f8:91:cc:00:02:8c: ab:83:37:e2:f8:0e:04:bf:cb:c7:5a:64:25:8b:a7: 8b:c5:34:14:fa:5c:17:5f:0e:5d:85:e6:3d:f5:dc: 79:d4:13:ee:2d:44:da:54:bd:6a:89:5c:e5:d4:3b: 6d:a3:ec:66:47:7b:0a:b5:c4:e6:0f:b7:b6:e5:55: c4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:15:34:CF:3F:2E:8B:FC:D5:46:95:BE:CC:5B:9E:63:7F:F2:54:E8 X509v3 Authority Key Identifier: keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6b:28:5d:43:a6:fd:0f:be:8a:f6:07:a8:fc:00:dc:d7:d7: 70:7a:33:0b:e6:0a:87:71:06:0e:22:a5:e9:53:b4:3d:d9:f2: a5:42:ce:4b:4a:b6:fb:63:85:df:3e:dd:f8:c3:44:e8:27:0f: 37:c3:57:bb:12:3d:af:70:a2:ff:17:ce:0d:9f:9f:c2:6c:88: e4:bc:df:fe:38:be:ad:aa:52:26:d2:67:b3:57:c1:ed:48:c8: f5:67:42:a7:db:a8:71:1b:59:c5:97:2e:bd:1c:77:39:73:ff: 81:d7:40:c1:6b:c0:cd:2b:bf:e7:03:cc:9f:29:41:35:15:a9: f3:78:e8:a3:74:6d:39:89:54:9a:79:e6:23:c2:9f:47:f0:42: 7f:41:f1:48:0e:ce:73:a2:92:45:2f:6a:e9:4f:8e:0f:67:12: c6:07:83:df:2a:7b:67:5f:0d:f1:b7:ad:32:c6:79:a4:16:db: 36:fc:38:68:64:ec:0f:0f:d3:28:00:c0:9b:dd:22:39:69:7d: 4b:74:30:ca:6f:ae:33:76:cd:4e:18:4b:97:ba:45:57:ab:fd: 12:ad:01:87:f3:cc:a8:66:f8:a8:fe:ee:8f:3e:be:39:8e:5d: 3d:f8:3d:99:b6:92:39:68:df:28:b3:9d:be:c2:31:2f:4d:fc: 5b:ab:e7:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYwMzgxMTAvBgNVBAUTKDdBOThBQjY5QjcyQkFBQzY2NjBFNTRERDFDNkQ4QTA2 MkUyQ0QyRkUwHhcNMjYwMzAxMDExODU2WhcNMjYwMzA4MDExODU2WjAYMRYwFAYD VQQDDA02OWEzOTQwMS03ZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4g3UhlNdsKIvL24y6BdCHgyv2VSrYhNrdsTNvnApHtfTZIwQ17i9Q/pAbVG q7JgmNPlcizdsdSIizCFD6xf7UkDQnrkMnAhL50vdeDU0vxoEeZVvz7dw/BOwg1P TNqLw08D6VNdcfkl32TBwn7KlLoNCAjq2AsPdGSr5RAyW+0whZQ90HH6C3/0lEgz F63hd19nJbWL7w7SHMT0HeqqmV2B/00dCKadxX22oMsoBNXwS56FKUWNP6acRn34 kcwAAoyrgzfi+A4Ev8vHWmQli6eLxTQU+lwXXw5dheY99dx51BPuLUTaVL1qiVzl 1Dtto+xmR3sKtcTmD7e25VXE5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBcVNM8/ Lov81UaVvsxbnmN/8lToMB8GA1UdIwQYMBaAFHqYq2m3K6rGZg5U3RxtigYuLNL+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjAzOC85MUUwQzg1MkFG RkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFzWm1EbFRkSEcyS0JpNHMw djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VwaXJhYmNycXNabURsVGRIRzJLQmk0czB2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjAzOC85MUUwQzg1MkFGRkMxMUVDQjBDMzg4NURDNEY5QUUwMi9lcGlyYWJjcnFz Wm1EbFRkSEcyS0JpNHMwdjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeGsoXUOm/Q++ivYHqPwA3NfXcHozC+YKh3EGDiKl6VO0PdnypULOS0q2+2OF 3z7d+MNE6CcPN8NXuxI9r3Ci/xfODZ+fwmyI5Lzf/ji+rapSJtJns1fB7UjI9WdC p9uocRtZxZcuvRx3OXP/gddAwWvAzSu/5wPMnylBNRWp83joo3RtOYlUmnnmI8Kf R/BCf0HxSA7Oc6KSRS9q6U+OD2cSxgeD3yp7Z18N8betMsZ5pBbbNvw4aGTsDw/T KADAm90iOWl9S3Qwym+uM3bNThhLl7pFV6v9Eq0Bh/PMqGb4qP7ujz6+OY5dPfg9 mbaSOWjfKLOdvsIxL038W6vnNg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:26 2026 by rpki-client