$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: 6fegTZAn5Yy+oqrPk+R6em1RnRMAFJXULEjEyQ3ESk0= Subject key identifier: 17:A1:34:6E:49:D8:BA:76:97:25:DD:8F:EA:A8:76:6E:DA:BF:EE:24 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 35D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 355E Signing time: Mon 20 Apr 2026 14:26:36 +0000 Manifest this update: Mon 20 Apr 2026 14:26:35 +0000 Manifest next update: Mon 27 Apr 2026 14:26:35 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 2LU1LePy3yImAw/T0dSI8VAx0L/OGWIluOTiBuSIf4U=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 5ZpkIo1n4Gv5uwa7NImU9M0kb+w/Ii5LkQHA44vK79I=) 3: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: Vd536Yo/UmC9YisTI800kHevdHaCEUXlwObFTopHde0=) 4: 967D3674CB7911F0B5816B84C4F9AE02.roa (hash: 0KMQ/55D5rrZWDAZvQGMwOpEu4hRv1HBS+IR1ld3fas=) 5: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: jgvloA4p8jwDkndKROuj2KaJOu+0VnyQm1S7vb4/ARo=) 6: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: Ac7ar5e+1Wqv3lV5cwQxtXQSoDcys5+NNyVEldaHACw=) 7: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: nh33iXL7qlto9SPY3eGtRzqM7MNK4E7ZZsv8bnTGP0E=) 8: 78F6DFE8CB6411F0A28C973CC4F9AE02.roa (hash: gvi8hWhSZEyhI/MZ6vtRb0JcAY+iSRYiYJZi1gBmvRI=) 9: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: hP7biJkDS354Ac1lKBliVsjrL4sBRs39Al7da/cRPrg=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: rPUnL7lHYdjtoOgbW/NTPA75gMTNRBPXaMY8wYcuEDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13782 (0x35d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Apr 20 14:26:35 2026 GMT Not After : Apr 27 14:26:35 2026 GMT Subject: CN=69e6379c-072f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:02:cf:73:cd:81:3a:68:eb:9c:7e:7f:1f:c0: 95:56:25:d1:22:eb:de:ec:5c:2c:75:0e:7f:31:c5: 53:e9:41:70:e1:41:e7:f3:c9:6c:86:fa:6c:42:cc: 1c:41:ec:c4:aa:53:19:34:8b:3b:97:77:d7:0e:6c: 0a:64:01:84:5d:e9:88:85:ba:10:5c:69:ec:8e:b3: 4d:a0:eb:17:5c:11:05:20:f2:b6:d2:78:ab:1e:15: 6b:54:2f:a5:05:e5:c1:c4:50:90:5d:28:61:4a:d2: 83:97:42:63:6f:cc:ea:08:17:d0:fe:35:c2:bf:b3: b1:67:86:55:6a:20:e3:cc:68:c7:90:e4:7d:e5:3d: 91:5f:ee:9e:ac:45:f4:7d:4a:34:d3:1c:5f:b6:af: aa:3d:80:40:8d:76:9a:25:34:41:e5:2c:ef:b7:8c: 1f:95:27:58:2c:83:28:ec:ff:26:73:50:eb:ad:5c: 2b:bd:4b:40:fb:6d:df:eb:71:bf:4c:cb:53:c7:be: 2b:f0:28:11:24:0e:8b:03:5b:7e:19:7d:75:90:48: 16:b8:63:49:b5:7e:0f:35:2b:e3:e7:81:ef:31:24: 34:0f:c1:be:6a:92:66:68:c8:cf:b4:5c:6e:ec:d8: db:e5:eb:a8:c4:59:f6:0d:ec:72:59:79:73:8f:b8: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A1:34:6E:49:D8:BA:76:97:25:DD:8F:EA:A8:76:6E:DA:BF:EE:24 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:09:bf:9c:15:2f:37:34:16:ac:19:78:c0:c7:cb:75:3d:bd: 9b:70:83:20:38:62:a3:cf:21:09:0e:ed:da:97:ae:be:a5:f1: 6a:de:3a:78:54:57:5b:a4:df:1a:eb:33:15:73:e0:67:45:75: b2:98:18:55:0c:f4:fa:ee:92:ea:83:6d:b8:4b:37:fa:58:6b: 36:d3:44:65:6c:52:f4:d0:a6:76:4e:5a:61:e9:04:56:3e:69: 52:c5:77:ee:6b:a4:b4:f7:b3:76:b7:6f:4b:fc:d0:d1:7a:39: a5:c3:d5:0a:57:1c:55:42:f4:9a:85:1a:bc:25:2b:47:a6:7e: 97:55:21:4a:3c:b4:8d:d9:ef:00:9b:f1:bf:c8:57:e2:2b:b6: 81:28:6c:6e:5f:16:93:28:14:83:65:ec:92:6c:59:c6:a4:c0: 43:49:1b:f8:54:18:12:b1:1a:22:3f:ad:cd:93:94:fc:56:0c: 7c:e5:b5:a2:86:df:e2:57:52:39:04:8d:ae:19:3f:95:a2:9b: f7:40:01:83:1b:f5:be:72:1c:49:07:45:1f:e9:0a:6f:a4:0c: eb:b2:0b:3e:05:c7:d4:db:8d:6e:a9:8c:a8:58:2c:19:47:e5: 24:3f:27:20:fc:ad:26:cb:7d:84:d3:87:9a:0e:48:7f:4c:45: ba:8b:3d:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjYwNDIwMTQyNjM1WhcNMjYwNDI3MTQyNjM1WjAYMRYwFAYD VQQDEw02OWU2Mzc5Yy0wNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QLPc82BOmjrnH5/H8CVViXRIuve7FwsdQ5/McVT6UFw4UHn88lshvpsQswc QezEqlMZNIs7l3fXDmwKZAGEXemIhboQXGnsjrNNoOsXXBEFIPK20nirHhVrVC+l BeXBxFCQXShhStKDl0Jjb8zqCBfQ/jXCv7OxZ4ZVaiDjzGjHkOR95T2RX+6erEX0 fUo00xxftq+qPYBAjXaaJTRB5Szvt4wflSdYLIMo7P8mc1DrrVwrvUtA+23f63G/ TMtTx74r8CgRJA6LA1t+GX11kEgWuGNJtX4PNSvj54HvMSQ0D8G+apJmaMjPtFxu 7Njb5euoxFn2DexyWXlzj7gdOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBehNG5J 2Lp2lyXdj+qodm7av+4kMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOwm/nBUvNzQWrBl4wMfLdT29m3CDIDhio88hCQ7t2peuvqXxat46eFRXW6Tf GuszFXPgZ0V1spgYVQz0+u6S6oNtuEs3+lhrNtNEZWxS9NCmdk5aYekEVj5pUsV3 7muktPezdrdvS/zQ0Xo5pcPVClccVUL0moUavCUrR6Z+l1UhSjy0jdnvAJvxv8hX 4iu2gShsbl8WkygUg2XskmxZxqTAQ0kb+FQYErEaIj+tzZOU/FYMfOW1oobf4ldS OQSNrhk/laKb90ABgxv1vnIcSQdFH+kKb6QM67ILPgXH1NuNbqmMqFgsGUflJD8n IPytJst9hNOHmg5If0xFuos9/g== -----END CERTIFICATE-----Generated at Wed Apr 22 09:17:47 2026 by rpki-client