$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: +nHuDqLGTmTkydsMHrVPg1VaTan2bCE806+eQae6Ml8= Subject key identifier: 59:D8:66:A1:6A:00:B8:14:9E:90:0A:1C:78:0C:9A:52:74:4E:70:E9 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 0695 Signing time: Thu 16 Jul 2026 22:57:30 +0000 Manifest this update: Thu 16 Jul 2026 22:57:29 +0000 Manifest next update: Thu 23 Jul 2026 22:57:29 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: ewst5ZLfIAs43cXBBM78+aPuG21eyUvMfLLksspRVtg=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 22:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Jul 16 22:57:29 2026 GMT Not After : Jul 23 22:57:29 2026 GMT Subject: CN=6a5961da-397f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6f:85:1e:a9:1c:c0:c0:ec:af:83:7b:98:fb: 7b:76:ba:9a:ce:ff:4e:29:a6:56:36:63:5c:9b:01: 91:df:22:71:cf:fa:a9:96:51:ae:45:3f:11:b6:f9: c2:d3:da:99:af:1c:3a:94:61:c2:8b:38:9e:a9:4d: 4f:e7:ff:69:fd:7a:25:b0:48:2c:0b:bb:4b:b0:78: 70:ca:7c:d6:fa:00:6d:fb:ad:e0:4d:2f:5a:a5:1c: ed:df:a7:13:84:5b:03:fa:2c:c1:4d:90:69:e5:77: 05:76:48:d0:19:0c:25:e4:d7:5a:af:37:cb:48:5e: 75:d4:4d:2b:44:03:65:65:f3:8b:64:35:2d:db:42: f6:3a:fc:b8:15:49:1c:fd:c6:8e:de:55:28:c3:50: ea:c9:bb:51:bd:19:97:04:e7:de:60:74:9c:51:56: 8b:9c:8d:fb:84:73:e9:c9:53:64:a7:89:e5:f9:f1: 34:7a:5f:4c:d1:4b:ca:13:e0:78:f9:80:75:3d:98: 8a:4e:b1:f1:51:3e:56:9d:e3:aa:e9:fe:b1:b5:5a: ca:80:59:b7:43:9f:21:e6:7d:87:fd:92:d2:61:54: 38:4c:af:24:e0:ff:ce:11:79:ed:91:00:f8:7e:e3: 30:02:7e:71:67:42:93:0d:b7:00:7d:f6:06:21:ad: 0c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D8:66:A1:6A:00:B8:14:9E:90:0A:1C:78:0C:9A:52:74:4E:70:E9 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cb:88:70:15:98:c9:81:c1:c4:4b:45:93:86:b5:a0:91:75: 77:63:d7:9d:a5:a4:96:47:3c:90:6c:14:d1:6c:aa:c9:d6:dc: cf:cc:4a:80:95:2a:10:ef:71:da:ae:ff:ca:a1:73:3b:b5:54: d6:54:92:b6:28:a4:32:ce:fa:84:ac:8a:c0:7e:fe:4e:da:ad: 87:d8:57:6c:db:ab:d7:86:cc:5d:7d:a0:56:6a:2c:0f:32:63: a3:1e:bd:f1:6b:ca:29:aa:ca:24:30:e2:35:6d:46:5f:7d:e4: bd:6e:92:ba:1c:18:ea:88:dc:71:e1:2c:1b:7a:75:05:8d:63: 66:01:fb:07:34:c1:49:1c:75:82:e9:47:47:c7:d6:7f:15:71: 52:11:9d:8c:3a:fb:72:47:9a:69:7f:9b:de:3b:ea:fd:e0:6e: 68:cd:21:09:3d:e7:ea:ec:37:18:3f:90:91:f7:07:5d:43:31: 44:40:09:16:c4:d9:4b:80:3a:2e:5f:c6:cc:1f:13:af:9b:b7: 39:68:8f:91:36:23:6b:46:83:fa:2d:05:3d:a4:1a:56:73:81: fb:91:e3:62:12:05:44:77:03:30:f6:0f:f1:4c:91:66:49:6a: 11:86:e2:73:c4:a6:69:5d:aa:10:f8:0e:c5:dd:05:7b:21:9a: 00:30:5f:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwNzE2MjI1NzI5WhcNMjYwNzIzMjI1NzI5WjAYMRYwFAYD VQQDEw02YTU5NjFkYS0zOTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwm+FHqkcwMDsr4N7mPt7drqazv9OKaZWNmNcmwGR3yJxz/qpllGuRT8RtvnC 09qZrxw6lGHCizieqU1P5/9p/XolsEgsC7tLsHhwynzW+gBt+63gTS9apRzt36cT hFsD+izBTZBp5XcFdkjQGQwl5NdarzfLSF511E0rRANlZfOLZDUt20L2Ovy4FUkc /caO3lUow1DqybtRvRmXBOfeYHScUVaLnI37hHPpyVNkp4nl+fE0el9M0UvKE+B4 +YB1PZiKTrHxUT5WneOq6f6xtVrKgFm3Q58h5n2H/ZLSYVQ4TK8k4P/OEXntkQD4 fuMwAn5xZ0KTDbcAffYGIa0M/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnYZqFq ALgUnpAKHHgMmlJ0TnDpMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXMuIcBWYyYHBxEtFk4a1oJF1d2PXnaWklkc8kGwU0Wyqydbcz8xKgJUqEO9x 2q7/yqFzO7VU1lSStiikMs76hKyKwH7+Ttqth9hXbNur14bMXX2gVmosDzJjox69 8WvKKarKJDDiNW1GX33kvW6SuhwY6ojcceEsG3p1BY1jZgH7BzTBSRx1gulHR8fW fxVxUhGdjDr7ckeaaX+b3jvq/eBuaM0hCT3n6uw3GD+QkfcHXUMxREAJFsTZS4A6 Ll/GzB8Tr5u3OWiPkTYja0aD+i0FPaQaVnOB+5HjYhIFRHcDMPYP8UyRZklqEYbi c8SmaV2qEPgOxd0FeyGaADBfVA== -----END CERTIFICATE-----Generated at Sat Jul 18 08:21:20 2026 by rpki-client