$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft File: WYxfzqVVrllcyel2HA-y3q6kRR8.mft (raw, json) Hash identifier: HfmpLGewCWb6hCcUH9weq2ASjgqvgCQbilNhci68Z/g= Subject key identifier: 23:55:6A:47:84:8C:4B:CC:46:42:26:CC:51:41:7E:A8:70:A7:C8:6B Authority key identifier: 59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F Certificate issuer: /CN=A91FB880/serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Certificate serial: 0242 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft Manifest number: 023C Signing time: Sun 05 Apr 2026 02:04:26 +0000 Manifest this update: Sun 05 Apr 2026 02:04:25 +0000 Manifest next update: Sun 12 Apr 2026 02:04:25 +0000 Files and hashes: 1: WYxfzqVVrllcyel2HA-y3q6kRR8.crl (hash: BsZl4eH2xKXISXfDlQYob7TY+E2GxVqDXgW1zH9aCRY=) 2: 50A5B1ACC75911EDBFF7200BC4F9AE02.roa (hash: 8F41x2fmLZ5M8u7RlY+aL2kU1d0Mkh7PiR5sgAseHxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 578 (0x242) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB880, serialNumber=598C5FCEA555AE595CC9E9761C0FB2DEAEA4451F Validity Not Before: Apr 5 02:04:25 2026 GMT Not After : Apr 12 02:04:25 2026 GMT Subject: CN=69d1c32a-3de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5a:d9:b2:4e:b1:f5:5d:ff:0c:67:a2:57:c4: 7e:a8:e5:88:fd:61:d6:7d:79:93:12:49:1f:42:39: 2a:1c:07:b0:81:74:58:60:75:e4:55:ae:7a:cc:eb: 9d:f1:65:6d:f3:77:01:4d:e4:82:8c:a8:d5:f2:0a: 62:8c:88:6d:31:9f:73:d5:23:91:f8:20:2e:dc:9e: d0:c4:10:c4:4f:6a:e0:5b:80:9f:ed:f2:8a:f8:2e: c4:01:c0:7f:a8:be:21:e7:64:74:4d:9e:2a:f4:35: 49:87:b3:e3:ce:fd:4d:34:71:57:e8:ae:9a:df:a2: 7e:18:51:6b:53:39:ed:ab:f2:e8:d9:a1:36:0c:7f: fa:71:87:69:e1:dd:ee:92:6a:a0:56:d2:a2:55:95: 96:55:dd:b1:b9:91:4c:d6:e2:cf:29:d4:c5:cb:42: 57:87:01:9e:2a:dc:d8:4b:71:6a:3c:bb:43:b6:4d: b7:c0:91:cc:09:19:05:27:6d:60:a9:10:a2:89:a4: 84:05:bc:2e:ca:4a:d0:74:33:3f:cc:97:19:f4:39: c2:0e:6f:fb:a0:5d:4d:5d:b3:c4:af:01:e2:f1:66: 97:de:93:db:38:89:a2:03:1e:a6:7c:08:c8:6c:89: 3f:d0:d3:c5:4b:d1:82:db:2f:49:f2:39:ae:3f:4c: 98:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:6A:47:84:8C:4B:CC:46:42:26:CC:51:41:7E:A8:70:A7:C8:6B X509v3 Authority Key Identifier: keyid:59:8C:5F:CE:A5:55:AE:59:5C:C9:E9:76:1C:0F:B2:DE:AE:A4:45:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WYxfzqVVrllcyel2HA-y3q6kRR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB880/C1903E62C75611EDB28A7F0AC4F9AE02/WYxfzqVVrllcyel2HA-y3q6kRR8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:7f:c7:1b:2f:3d:e6:3f:33:a6:a3:b2:b0:6e:50:6a:e6:61: 67:44:ab:98:93:55:29:7c:c3:68:3b:87:9e:47:74:68:e7:f4: 85:7c:f9:fe:a7:48:90:e9:d4:4f:6c:f4:94:09:b7:2c:12:00: 92:77:51:02:6f:e3:ce:f7:a5:3d:8e:8f:75:25:da:bd:c7:a6: 6a:99:1e:ab:6a:5b:90:ff:48:51:7b:c0:b4:ed:61:b2:5c:2a: cf:a9:c6:aa:dc:6c:a5:c7:fc:51:c7:20:d5:e1:de:a6:85:ff: a5:ae:21:d2:8b:96:6c:ce:8d:22:f9:28:87:11:de:1b:21:27: 2e:f2:e2:51:eb:38:c8:ef:e3:b4:9a:dd:48:04:63:87:5a:cb: 11:da:0d:8a:a5:bc:90:71:c5:ce:dc:bc:e8:52:5d:fa:c6:0e: 94:5b:77:78:34:35:92:d7:87:14:31:95:82:9a:13:fc:13:20: e0:17:7f:80:d3:63:c8:8b:6c:c1:94:e0:08:36:da:a1:3d:2a: 1a:81:8e:b7:11:3d:65:05:24:c1:ae:bd:83:cc:e4:53:08:84: 09:97:22:78:ea:48:79:92:a5:95:fc:3d:1c:d3:33:49:42:89: 31:ef:9e:f8:5f:aa:e7:51:a5:c5:0c:b5:fc:de:1c:6b:0c:bb: 9c:e7:91:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI4ODAxMTAvBgNVBAUTKDU5OEM1RkNFQTU1NUFFNTk1Q0M5RTk3NjFDMEZCMkRF QUVBNDQ1MUYwHhcNMjYwNDA1MDIwNDI1WhcNMjYwNDEyMDIwNDI1WjAYMRYwFAYD VQQDEw02OWQxYzMyYS0zZGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1rZsk6x9V3/DGeiV8R+qOWI/WHWfXmTEkkfQjkqHAewgXRYYHXkVa56zOud 8WVt83cBTeSCjKjV8gpijIhtMZ9z1SOR+CAu3J7QxBDET2rgW4Cf7fKK+C7EAcB/ qL4h52R0TZ4q9DVJh7Pjzv1NNHFX6K6a36J+GFFrUzntq/Lo2aE2DH/6cYdp4d3u kmqgVtKiVZWWVd2xuZFM1uLPKdTFy0JXhwGeKtzYS3FqPLtDtk23wJHMCRkFJ21g qRCiiaSEBbwuykrQdDM/zJcZ9DnCDm/7oF1NXbPErwHi8WaX3pPbOImiAx6mfAjI bIk/0NPFS9GC2y9J8jmuP0yYOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNVakeE jEvMRkImzFFBfqhwp8hrMB8GA1UdIwQYMBaAFFmMX86lVa5ZXMnpdhwPst6upEUf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjg4MC9DMTkwM0U2MkM3 NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJsbGN5ZWwySEEteTNxNmtS UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZeGZ6cVZWcmxsY3llbDJIQS15M3E2a1JSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qjg4MC9DMTkwM0U2MkM3NTYxMUVEQjI4QTdGMEFDNEY5QUUwMi9XWXhmenFWVnJs bGN5ZWwySEEteTNxNmtSUjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp3/HGy895j8zpqOysG5QauZhZ0SrmJNVKXzDaDuHnkd0aOf0hXz5/qdIkOnU T2z0lAm3LBIAkndRAm/jzvelPY6PdSXavcemapkeq2pbkP9IUXvAtO1hslwqz6nG qtxspcf8Uccg1eHepoX/pa4h0ouWbM6NIvkohxHeGyEnLvLiUes4yO/jtJrdSARj h1rLEdoNiqW8kHHFzty86FJd+sYOlFt3eDQ1kteHFDGVgpoT/BMg4Bd/gNNjyIts wZTgCDbaoT0qGoGOtxE9ZQUkwa69g8zkUwiECZcieOpIeZKllfw9HNMzSUKJMe+e +F+q51GlxQy1/N4cawy7nOeR8Q== -----END CERTIFICATE-----Generated at Sun Apr 5 20:00:07 2026 by rpki-client