$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: pQ5dVHF3KCgrDO8AyF5JxMTxbYKMJCYdB0jc2QK+CdI= Subject key identifier: DF:38:29:33:B1:3E:30:01:1A:4B:A8:8F:6F:66:49:8F:41:25:DA:E0 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 06BF Signing time: Tue 06 Oct 2026 22:30:24 +0000 Manifest this update: Tue 06 Oct 2026 22:30:23 +0000 Manifest next update: Tue 13 Oct 2026 22:30:23 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: lDhcAKrVjb4jt6GcJ3Q3wdWbhqkDFslRjxgzs05N8xY=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Oct 6 22:30:23 2026 GMT Not After : Oct 13 22:30:23 2026 GMT Subject: CN=6ac57680-c9e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:91:1d:9b:23:fe:fe:64:10:ae:b7:dc:0f:ef: c1:4f:28:64:a8:fe:aa:8f:b5:41:f3:8f:2e:5f:71: a0:4d:ef:ba:b1:07:7a:04:ab:52:30:44:c2:f7:d6: de:6b:ac:f0:3f:27:2e:5c:17:e1:05:4e:c5:7e:d7: c2:cb:40:f0:c4:70:a3:37:3b:38:6e:9a:28:2b:b0: f2:3e:48:2f:a6:f9:cd:b9:bb:22:d6:df:e2:a4:d8: 90:d9:dd:aa:a7:da:59:b3:0e:37:fd:18:41:bb:b2: fb:01:56:be:ca:d6:5b:3c:64:ed:a0:d3:ec:ab:bb: 12:57:de:97:12:1c:6c:44:ab:3b:57:77:88:17:ce: a6:27:d2:79:04:c0:50:6e:00:bb:13:5d:86:34:e3: 7d:0c:ff:29:77:05:5c:b2:90:9e:3e:c7:b2:fe:af: 50:54:5a:da:c4:cb:66:20:60:dd:c3:58:7f:59:0b: d9:d1:3f:39:69:84:30:19:f6:b3:86:a8:6a:5f:f8: 3c:ce:24:d3:d5:b9:c7:4d:e4:c7:cc:74:eb:ed:b2: 2b:d6:13:08:3e:ae:3c:1e:88:fb:08:5e:fd:ef:e7: 01:07:97:8a:43:02:be:d5:98:b1:0a:fd:4a:c5:fa: 44:4c:6f:b8:86:53:55:b7:22:be:61:17:7b:34:57: 9a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:38:29:33:B1:3E:30:01:1A:4B:A8:8F:6F:66:49:8F:41:25:DA:E0 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:ba:98:d8:54:f1:d3:a7:38:cc:de:8c:9b:38:66:d9:f6:59: 81:2a:23:6a:0b:b0:ba:06:03:bf:04:91:a7:0f:7e:59:44:f5: 50:f6:31:f5:15:8b:25:16:4b:b7:39:01:f7:4b:de:c4:3d:40: e7:3d:57:af:7f:9a:a7:5f:95:18:7a:b2:4c:fc:96:44:f3:9a: e2:f6:80:c6:a7:a7:01:7a:a8:93:86:f8:84:59:a5:c9:b4:5c: 83:91:99:02:af:ae:f6:0d:66:42:69:04:50:dc:40:5c:1c:11: e2:db:6c:ec:b1:1a:85:f2:2b:ea:25:78:30:42:01:01:c7:1a: af:60:03:5b:44:2a:8b:73:d9:a0:24:99:19:eb:2f:14:d9:58: d6:ca:42:95:79:45:22:2d:ae:81:2a:de:11:8c:18:79:37:17: 9f:56:6b:e1:86:94:54:73:7d:ea:3d:e7:97:7b:90:d3:98:bc: 39:e9:1d:5d:b2:1e:9d:9f:44:3e:07:fd:ef:42:66:f9:77:4e: 04:af:18:c8:c5:3a:1c:59:ef:ca:34:b0:17:c9:02:c9:87:ac: 5d:a1:8b:f0:59:fe:61:36:25:11:34:8f:1f:6d:0a:25:1b:fc: 47:3a:9c:70:30:d7:4f:a0:6b:ba:49:ff:b7:b9:4c:2f:56:ac: 90:13:64:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYxMDA2MjIzMDIzWhcNMjYxMDEzMjIzMDIzWjAYMRYwFAYD VQQDEw02YWM1NzY4MC1jOWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpEdmyP+/mQQrrfcD+/BTyhkqP6qj7VB848uX3GgTe+6sQd6BKtSMETC99be a6zwPycuXBfhBU7FftfCy0DwxHCjNzs4bpooK7DyPkgvpvnNubsi1t/ipNiQ2d2q p9pZsw43/RhBu7L7AVa+ytZbPGTtoNPsq7sSV96XEhxsRKs7V3eIF86mJ9J5BMBQ bgC7E12GNON9DP8pdwVcspCePsey/q9QVFraxMtmIGDdw1h/WQvZ0T85aYQwGfaz hqhqX/g8ziTT1bnHTeTHzHTr7bIr1hMIPq48Hoj7CF797+cBB5eKQwK+1ZixCv1K xfpETG+4hlNVtyK+YRd7NFea3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN84KTOx PjABGkuoj29mSY9BJdrgMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEbqY2FTx06c4zN6Mmzhm2fZZgSojaguwugYDvwSRpw9+WUT1UPYx9RWLJRZL tzkB90vexD1A5z1Xr3+ap1+VGHqyTPyWRPOa4vaAxqenAXqok4b4hFmlybRcg5GZ Aq+u9g1mQmkEUNxAXBwR4tts7LEahfIr6iV4MEIBAccar2ADW0Qqi3PZoCSZGesv FNlY1spClXlFIi2ugSreEYwYeTcXn1Zr4YaUVHN96j3nl3uQ05i8OekdXbIenZ9E Pgf970Jm+XdOBK8YyMU6HFnvyjSwF8kCyYesXaGL8Fn+YTYlETSPH20KJRv8Rzqc cDDXT6Brukn/t7lML1askBNknw== -----END CERTIFICATE-----Generated at Wed Oct 7 17:15:39 2026 by rpki-client