$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: X3w2SbgeK/KIq87nB8ifNQKs8QmLT3h0zsT7mHGhjhY= Subject key identifier: 1C:FB:17:66:7E:A3:33:C1:A8:FB:3D:AD:E7:F0:E0:43:48:C4:DE:EC Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 025B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 0248 Signing time: Wed 29 Apr 2026 03:00:44 +0000 Manifest this update: Wed 29 Apr 2026 03:00:43 +0000 Manifest next update: Wed 06 May 2026 03:00:43 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: URviAMQOH3+KdqCESpICFJMQMfsmU+UADcLLJwVk3NI=) 2: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: zawi/wlEpNQoVrlgeNzoGXkUSXbiRvgZkdxKTLUCpcw=) 3: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: kxn0Dg877a3vfvZmxRWSok8mv3qj9xPRSNnHx7tUEbQ=) 4: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: 6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 603 (0x25b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Apr 29 03:00:43 2026 GMT Not After : May 6 03:00:43 2026 GMT Subject: CN=69f1745c-6324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:a9:94:2b:7a:55:97:e6:ae:72:ed:cf:bd: e5:6c:84:17:f0:21:72:80:d9:d4:f1:93:f3:88:87: e3:96:1a:16:f8:c1:14:31:fe:0b:45:1e:04:53:8f: 69:0c:8c:2f:8f:07:16:2e:a7:76:9e:68:be:9f:16: 1e:a6:ca:8b:3c:45:bb:91:4a:7c:b8:f3:ed:fb:0c: 7b:b8:9f:e0:80:8e:9f:6c:52:59:e6:0c:5a:fb:87: 6c:dc:57:6d:45:08:61:d5:ce:01:f2:03:43:79:58: 24:b0:47:42:6f:5f:33:44:25:53:c9:67:44:e0:3a: fc:47:1c:34:16:fe:06:1c:62:71:ae:43:6f:85:5e: 15:7a:24:01:15:35:b4:fa:c4:f4:29:e9:bd:21:d2: f6:d3:e1:8b:0c:d8:27:1e:2a:0e:8d:db:b0:63:1b: ef:54:00:1e:6c:dd:9c:6c:0a:d0:a3:f8:d4:77:63: f1:59:39:f0:03:70:0f:8b:26:d5:73:d6:55:35:5b: 67:c2:3f:b7:c3:54:0b:54:9f:b3:2c:5c:8e:a4:c3: d8:47:b5:94:1e:8a:38:64:0b:ff:11:3e:e3:06:1a: 1d:b7:e5:cc:da:93:6d:a3:57:f4:ce:95:8e:e4:b7: 58:c7:8f:17:21:6a:d4:fd:2a:3a:2b:2d:97:fd:5d: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FB:17:66:7E:A3:33:C1:A8:FB:3D:AD:E7:F0:E0:43:48:C4:DE:EC X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:16:ad:e1:1e:ff:46:9d:d6:a3:c1:9c:ce:7a:2d:77:29:b0: 0b:69:60:84:10:50:4f:df:88:de:bc:d3:40:49:3d:9c:34:83: 2a:08:3f:01:17:fb:38:37:01:52:98:ae:16:56:dc:fd:6c:f5: 01:42:1f:2f:b1:c2:be:ea:5f:e2:23:a3:f7:5d:8a:20:ef:14: d4:79:99:fe:a5:2d:91:db:64:74:52:9f:0b:4f:ff:f0:f0:06: 9b:11:75:28:a3:d2:5b:74:be:a5:76:5f:cb:cd:79:dd:30:2a: d8:35:c7:2c:16:50:31:f8:50:6a:b2:73:ab:40:0f:51:23:86: a5:58:f2:22:51:90:ac:20:e7:51:e0:a5:e5:86:f2:7c:27:af: ba:91:ff:06:0c:b0:80:07:a9:1b:a4:f1:75:7d:f6:87:f9:14: 27:18:68:8d:ab:c7:1f:75:8a:35:f5:18:87:94:82:3f:84:ae: 99:89:3b:9c:90:64:f6:6c:c7:5b:b0:87:24:d4:4f:b7:d0:43: 32:5e:15:ec:01:4d:8b:99:92:cd:f4:04:ad:88:a1:53:99:6d: 9f:3b:f7:1a:96:26:db:92:60:aa:14:d4:18:e4:d4:39:71:07: 28:90:75:6b:7e:f3:53:7f:da:98:28:e5:a7:41:bf:27:c0:72: c7:90:6f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjYwNDI5MDMwMDQzWhcNMjYwNTA2MDMwMDQzWjAYMRYwFAYD VQQDEw02OWYxNzQ1Yy02MzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKuplCt6VZfmrnLtz73lbIQX8CFygNnU8ZPziIfjlhoW+MEUMf4LRR4EU49p DIwvjwcWLqd2nmi+nxYepsqLPEW7kUp8uPPt+wx7uJ/ggI6fbFJZ5gxa+4ds3Fdt RQhh1c4B8gNDeVgksEdCb18zRCVTyWdE4Dr8Rxw0Fv4GHGJxrkNvhV4VeiQBFTW0 +sT0Kem9IdL20+GLDNgnHioOjduwYxvvVAAebN2cbArQo/jUd2PxWTnwA3APiybV c9ZVNVtnwj+3w1QLVJ+zLFyOpMPYR7WUHoo4ZAv/ET7jBhodt+XM2pNto1f0zpWO 5LdYx48XIWrU/So6Ky2X/V0stwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBz7F2Z+ ozPBqPs9refw4ENIxN7sMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtBat4R7/Rp3Wo8GcznotdymwC2lghBBQT9+I3rzTQEk9nDSDKgg/ARf7ODcB UpiuFlbc/Wz1AUIfL7HCvupf4iOj912KIO8U1HmZ/qUtkdtkdFKfC0//8PAGmxF1 KKPSW3S+pXZfy8153TAq2DXHLBZQMfhQarJzq0APUSOGpVjyIlGQrCDnUeCl5Yby fCevupH/BgywgAepG6TxdX32h/kUJxhojavHH3WKNfUYh5SCP4SumYk7nJBk9mzH W7CHJNRPt9BDMl4V7AFNi5mSzfQErYihU5ltnzv3GpYm25JgqhTUGOTUOXEHKJB1 a37zU3/amCjlp0G/J8Byx5BvnQ== -----END CERTIFICATE-----Generated at Wed Apr 29 16:57:42 2026 by rpki-client