$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: M30BE5cIb8Syq07y35dCo1MzWiEi8cSMBK3c1xQYxyU= Subject key identifier: 42:FB:5F:87:17:07:33:47:F4:49:BA:6D:A6:02:23:6F:D1:5C:91:91 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 067C Signing time: Sun 31 May 2026 23:12:39 +0000 Manifest this update: Sun 31 May 2026 23:12:38 +0000 Manifest next update: Sun 07 Jun 2026 23:12:38 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: eDt1Ap5HtPB9R7Vm5TQpUgBu084Bet/MlJBv8WwWC/M=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: W1AZdRPnUqP6po+2nyCEliB/EeCDTXtY0YkQggT0wxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Jun 2026 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: May 31 23:12:38 2026 GMT Not After : Jun 7 23:12:38 2026 GMT Subject: CN=6a1cc067-cccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e1:7d:29:7a:bb:46:5d:85:95:ea:64:48:ad: 43:60:fc:69:f3:0b:88:ae:71:63:2d:27:f7:30:a7: d4:f2:84:3f:0f:43:7a:e2:3d:bf:7f:25:18:76:b4: e7:a3:c8:d3:b0:ed:17:ce:48:6f:b6:b2:53:93:0c: e1:e9:ce:b7:cf:3a:de:a3:23:88:9c:5b:9c:39:a7: 6a:f0:5a:97:a1:d9:7d:f1:a6:7e:dd:e7:79:11:4c: 10:45:51:1d:f8:20:2f:92:35:1d:ce:eb:8d:9b:30: 8b:b5:8e:0f:35:12:9d:99:7b:23:1b:3d:87:a5:81: 29:4d:4b:17:d0:2e:41:3e:92:68:e5:4d:86:6c:b1: cf:bb:4d:ad:65:9b:4b:f0:4a:78:99:7d:af:f9:e0: 1e:8d:14:dd:2d:5d:85:01:7f:06:cf:98:4a:12:eb: 33:18:84:cb:ca:a2:4e:ee:0b:4c:aa:85:14:9e:81: e3:4b:6b:d4:63:bc:69:34:ee:40:81:53:e6:b8:a7: 26:7c:1f:ee:3c:6d:a8:66:c9:13:8d:d3:ba:5a:4a: 59:23:38:ca:29:f5:69:0c:98:24:e3:70:3a:4c:cd: 5c:4b:78:58:2d:b0:21:09:d9:7c:64:86:34:05:43: f9:9c:0b:e2:d3:cc:74:26:a4:25:65:82:76:41:6c: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:FB:5F:87:17:07:33:47:F4:49:BA:6D:A6:02:23:6F:D1:5C:91:91 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:56:78:bb:93:1f:8e:22:cb:30:6a:69:f9:97:e8:cd:57:d1: 34:cc:cc:40:73:c0:00:23:2b:8b:03:4e:e2:99:53:45:1d:c5: 26:ad:8e:e9:ff:37:cb:00:7d:59:67:6e:f7:5c:4b:e7:dc:ad: 2a:88:34:07:bf:93:60:74:19:cf:f3:0d:79:45:72:0f:54:31: c4:92:b5:2a:0c:ed:cc:5c:b6:58:0a:47:79:11:1b:15:08:ea: 0f:23:23:93:67:1e:ad:55:d0:7b:0c:7c:6b:0b:c8:9c:3a:ae: 6e:44:fe:c8:1d:d2:6e:06:8c:83:65:54:7e:7a:8c:cb:df:e6: de:60:93:df:2d:9a:99:72:14:7d:83:b5:ec:cb:b0:46:cd:24: c6:ce:de:6b:8b:77:de:a2:c0:30:b0:46:94:e1:37:bc:1d:5d: db:e1:78:c0:4b:7f:4c:d8:b6:4d:30:ae:84:73:9f:97:2e:5f: cb:42:13:ea:6c:b3:0d:ec:72:e4:79:e1:e0:00:2c:db:52:de: 94:25:83:9b:a1:c5:67:97:c2:ef:31:e3:fe:9c:f3:58:e4:25: 40:1a:ac:98:95:69:63:62:2a:5f:e4:bf:26:12:df:b5:b2:55: a3:52:e7:d5:79:3c:67:45:f0:75:ce:4f:4c:d4:17:79:e3:11: f2:0a:28:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwNTMxMjMxMjM4WhcNMjYwNjA3MjMxMjM4WjAYMRYwFAYD VQQDEw02YTFjYzA2Ny1jY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0eF9KXq7Rl2FlepkSK1DYPxp8wuIrnFjLSf3MKfU8oQ/D0N64j2/fyUYdrTn o8jTsO0XzkhvtrJTkwzh6c63zzreoyOInFucOadq8FqXodl98aZ+3ed5EUwQRVEd +CAvkjUdzuuNmzCLtY4PNRKdmXsjGz2HpYEpTUsX0C5BPpJo5U2GbLHPu02tZZtL 8Ep4mX2v+eAejRTdLV2FAX8Gz5hKEuszGITLyqJO7gtMqoUUnoHjS2vUY7xpNO5A gVPmuKcmfB/uPG2oZskTjdO6WkpZIzjKKfVpDJgk43A6TM1cS3hYLbAhCdl8ZIY0 BUP5nAvi08x0JqQlZYJ2QWy6ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEL7X4cX BzNH9Em6baYCI2/RXJGRMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXVZ4u5MfjiLLMGpp+ZfozVfRNMzMQHPAACMriwNO4plTRR3FJq2O6f83ywB9 WWdu91xL59ytKog0B7+TYHQZz/MNeUVyD1QxxJK1KgztzFy2WApHeREbFQjqDyMj k2cerVXQewx8awvInDqubkT+yB3SbgaMg2VUfnqMy9/m3mCT3y2amXIUfYO17Muw Rs0kxs7ea4t33qLAMLBGlOE3vB1d2+F4wEt/TNi2TTCuhHOfly5fy0IT6myzDexy 5Hnh4AAs21LelCWDm6HFZ5fC7zHj/pzzWOQlQBqsmJVpY2IqX+S/JhLftbJVo1Ln 1Xk8Z0Xwdc5PTNQXeeMR8goo2g== -----END CERTIFICATE-----Generated at Tue Jun 2 22:16:27 2026 by rpki-client