$ rpki-client -vvvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: nYMaWH8LS0241ktY53Uj28Wh/BLt1aoJsTERe7oOWDA= Subject key identifier: 48:69:38:22:2A:A4:FF:0A:B2:5D:6C:87:BC:32:3F:B8:89:7D:0B:F2 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0C2F Signing time: Mon 26 Oct 2026 18:55:42 +0000 Manifest this update: Mon 26 Oct 2026 18:55:41 +0000 Manifest next update: Mon 02 Nov 2026 18:55:41 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: SEOkhEURym6PTtpHjVpIZ6VHLRnl6p2u1CqJVjI+Qro=) 2: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: FSDVyAO7ku9OlFpBuuGsvn65dxJw/I6Sh44G8o9Hakw=) 3: 12BE5F962DA511F1AB5ACB70A2833773.roa (hash: R5zAoICV1Khp7ZSKr9zmuPdSSnluyaeLcZGrxGttx1M=) 4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: /0M2k5A9D07fvk6xgy1fvur/gcuYQ+EgRMIrK3fZt+g=) 5: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: w3uOUeW/FatR7+z01Z2HvN2GffooWt+q9F95kyByhRI=) 6: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: FHAY3Htwxch2FFTA3f0b/wxleH7q9MS7UbS2oOU+tmc=) 7: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: foBCGIBz0chOGLnj+WF0iY+sCw/0L3oyHMk8x+gdNIk=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: C1lJZU5Iy+mNJL9oPivtxsIEriNMccsRSKnbZ5DSjo4=) 9: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: x3tN005H61P1/+QDbepYrTGCbgsygiXxYL2KOeh1kJw=) 10: A30B6882B3DE11F0B2D83330C4F9AE02.roa (hash: EMvRGH6droakZyNHqPZRY7LB/x9Bj+nru0EHjbDXrOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Oct 26 18:55:41 2026 GMT Not After : Nov 2 18:55:41 2026 GMT Subject: CN=6adfa22d-37d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:67:e5:0e:64:68:77:89:aa:84:49:af:52: e7:eb:a5:9f:5d:e0:04:47:3a:59:36:52:cc:71:4a: 10:63:d1:25:94:28:bd:b4:02:e6:5f:3b:4d:15:0b: 45:c4:8a:b1:bc:fc:6c:d1:c6:30:11:28:cd:b5:d9: e9:96:68:1c:f4:bd:6b:a2:d1:ba:24:2a:97:d7:6a: 0b:a4:f1:bc:22:2d:b1:6d:f6:8f:73:9d:35:6e:24: 3a:a5:89:9e:d3:b0:50:18:8a:4a:d3:88:17:bc:eb: aa:1a:ad:70:eb:53:8e:4e:be:f5:d6:e4:3a:52:1a: 92:26:9d:77:c8:e0:b6:47:a3:4c:43:37:27:91:85: a6:44:c0:ed:68:42:bf:8a:e4:ad:8a:35:2b:45:70: e0:68:9c:f5:8d:54:fa:dd:84:a3:93:35:6d:33:3b: 0b:fc:81:90:07:3d:03:42:64:8b:56:10:83:71:48: 9f:da:ac:14:86:5c:7f:30:19:6c:07:32:55:a8:84: 75:fd:37:18:3f:52:67:63:26:98:e0:ab:9a:f1:76: f8:2f:7d:58:37:bb:2f:9f:c2:ff:d3:33:1f:c5:26: f0:75:a5:1d:94:19:83:5d:0d:ab:7a:b9:80:a9:f3: 90:f2:02:c5:62:27:72:1d:8e:3f:8f:e7:02:8c:21: 95:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:69:38:22:2A:A4:FF:0A:B2:5D:6C:87:BC:32:3F:B8:89:7D:0B:F2 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:3a:cc:3b:d7:50:78:80:6d:6c:c3:9d:7f:86:3c:62:cb:d4: a1:1f:d4:74:02:30:38:32:b3:15:3a:41:f1:a5:5c:a5:75:af: fe:55:4a:35:f4:dc:38:26:0f:06:f5:7d:51:9f:ad:96:71:13: 99:85:ce:dd:ae:5e:a4:7b:0d:0d:11:f9:b9:58:c6:b7:ce:f5: 7c:0c:60:0d:0d:7d:28:47:cd:1a:94:0b:ff:14:db:54:96:69: 6b:a9:d3:dd:9f:23:76:34:e7:f4:fc:3d:74:ed:a8:89:b8:13: 71:41:05:cd:a8:24:c9:31:d4:17:e1:22:7d:07:3d:43:47:bb: 3d:8a:94:f4:86:72:da:02:2b:5d:ac:63:12:a7:b8:f1:8c:3c: 46:38:00:ea:50:08:49:26:39:ea:74:4e:18:be:b9:6f:6b:5a: ee:5e:e3:cb:7b:5e:37:d0:f7:17:b0:b1:72:26:7c:73:e5:42: 05:ff:38:15:36:87:4b:81:c3:39:f9:ee:ae:51:b2:a1:e0:dd: 29:c3:ff:44:9e:eb:9f:4c:fd:6d:13:2a:82:87:7a:c2:69:4b: bf:dc:cb:97:60:61:3a:63:2b:55:1d:69:03:19:33:d8:76:45: ea:da:dc:c6:f9:2f:45:9c:ac:63:c3:d8:c6:e1:90:ff:49:9d: 5f:61:46:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjYxMDI2MTg1NTQxWhcNMjYxMTAyMTg1NTQxWjAYMRYwFAYD VQQDEw02YWRmYTIyZC0zN2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB1n5Q5kaHeJqoRJr1Ln66WfXeAERzpZNlLMcUoQY9EllCi9tALmXztNFQtF xIqxvPxs0cYwESjNtdnplmgc9L1rotG6JCqX12oLpPG8Ii2xbfaPc501biQ6pYme 07BQGIpK04gXvOuqGq1w61OOTr711uQ6UhqSJp13yOC2R6NMQzcnkYWmRMDtaEK/ iuStijUrRXDgaJz1jVT63YSjkzVtMzsL/IGQBz0DQmSLVhCDcUif2qwUhlx/MBls BzJVqIR1/TcYP1JnYyaY4Kua8Xb4L31YN7svn8L/0zMfxSbwdaUdlBmDXQ2rermA qfOQ8gLFYidyHY4/j+cCjCGViwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhpOCIq pP8Ksl1sh7wyP7iJfQvyMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPzrMO9dQeIBtbMOdf4Y8YsvUoR/UdAIwODKzFTpB8aVcpXWv/lVKNfTcOCYP BvV9UZ+tlnETmYXO3a5epHsNDRH5uVjGt871fAxgDQ19KEfNGpQL/xTbVJZpa6nT 3Z8jdjTn9Pw9dO2oibgTcUEFzagkyTHUF+EifQc9Q0e7PYqU9IZy2gIrXaxjEqe4 8Yw8RjgA6lAISSY56nROGL65b2ta7l7jy3teN9D3F7CxciZ8c+VCBf84FTaHS4HD OfnurlGyoeDdKcP/RJ7rn0z9bRMqgod6wmlLv9zLl2BhOmMrVR1pAxkz2HZF6trc xvkvRZysY8PYxuGQ/0mdX2FGYA== -----END CERTIFICATE-----Generated at Tue Oct 27 22:28:48 2026 by rpki-client