$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: Cn6f2yvi7affKXHixzYDFCa2JaWgOHN6VKVGPVFvl+I= Subject key identifier: 28:19:84:CC:0B:1E:F5:E1:BE:FF:A3:6A:1F:C4:A5:FA:58:43:7E:18 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 066B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 065F Signing time: Sat 04 Apr 2026 22:25:41 +0000 Manifest this update: Sat 04 Apr 2026 22:25:41 +0000 Manifest next update: Sat 11 Apr 2026 22:25:41 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 46JII3JdaYmMq7ak7IhcEe9Drdj/xTsPjigHIdZH4K8=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: W1AZdRPnUqP6po+2nyCEliB/EeCDTXtY0YkQggT0wxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1643 (0x66b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Apr 4 22:25:41 2026 GMT Not After : Apr 11 22:25:41 2026 GMT Subject: CN=69d18fe5-0e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:17:a5:a6:d1:b4:9b:c8:17:24:1f:7b:88:d5: e3:de:d5:b8:cc:32:ef:a7:38:4c:05:49:84:19:30: ac:c7:90:b2:30:6d:21:fc:ca:ea:30:bc:66:34:7b: fb:12:0a:ea:b9:15:48:5a:2a:7a:f9:8f:0d:a8:6f: a9:8f:41:53:3f:44:f8:02:e4:da:20:6d:61:b7:81: 4c:b0:8e:ed:e8:0f:d5:c0:7b:c7:38:99:8f:c8:c5: eb:2c:c0:59:bc:6d:e6:ae:89:99:81:d0:a0:82:c3: e0:d1:f8:fc:fb:3a:13:ee:04:77:80:cf:be:72:99: 22:f5:c9:b1:19:57:d9:89:3f:27:7c:e8:00:4d:a7: 74:3d:fb:0f:79:15:cc:cb:07:f5:0d:f8:e5:62:aa: c1:e4:5a:97:16:cf:42:e0:e9:d7:9c:ba:cb:7d:6c: 60:09:1f:9f:9f:ad:34:a8:57:6a:4d:7a:5b:58:c3: c9:10:6c:92:71:a8:a7:1c:8d:a1:94:78:5b:5f:61: 03:5a:04:c0:b1:55:70:72:49:1f:a2:86:2e:1c:80: 0f:f2:10:a4:ae:cc:69:81:b1:5c:9d:39:54:6f:a8: 0a:ed:f1:06:3d:94:e4:83:27:fb:17:29:1a:af:75: ba:22:01:31:4b:4b:27:81:ca:da:21:96:be:59:32: fa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:19:84:CC:0B:1E:F5:E1:BE:FF:A3:6A:1F:C4:A5:FA:58:43:7E:18 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:88:53:cf:8b:a2:4f:f7:3c:fb:3c:10:68:84:f9:b9:64:2a: 9a:6c:04:19:18:da:b5:79:e3:03:c4:43:f0:ab:8e:7e:59:d1: 67:5c:b0:9d:b5:fd:8c:58:9b:c9:1e:36:19:a6:a5:2f:58:a0: 2b:e1:d1:05:1f:b5:ee:ae:d1:cf:1b:e8:b3:e9:e3:87:e4:e5: 1f:8c:96:a3:55:6f:51:7e:e5:96:38:1d:21:a1:0b:a6:0f:7b: 18:55:7e:86:f3:46:b7:ee:7d:f8:54:bb:14:c7:76:09:64:ce: e2:82:59:78:b5:f9:e1:ce:e2:01:20:70:cd:c7:0b:2a:0c:9a: 51:2a:59:07:30:51:9a:ca:c7:e1:98:09:66:17:63:b9:ef:1b: 8d:e1:81:49:43:fc:24:ab:0e:39:c7:cf:26:01:91:10:fd:5b: f3:e7:58:e9:c2:21:a9:58:be:2f:e8:03:32:e2:db:ea:87:f4: d2:83:3d:99:b0:30:8e:4c:0a:3c:91:00:4b:ed:ba:d0:23:0f: 51:a1:c1:11:4d:58:dc:25:48:4d:1c:93:f8:13:57:49:67:5a: 98:b3:01:d4:47:a7:0f:fa:37:40:89:2b:ed:58:7e:72:a6:80: 06:14:50:1d:86:47:87:3b:01:3f:0f:0d:08:da:2f:d6:2c:f1: bd:68:df:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwNDA0MjIyNTQxWhcNMjYwNDExMjIyNTQxWjAYMRYwFAYD VQQDEw02OWQxOGZlNS0wZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBelptG0m8gXJB97iNXj3tW4zDLvpzhMBUmEGTCsx5CyMG0h/MrqMLxmNHv7 EgrquRVIWip6+Y8NqG+pj0FTP0T4AuTaIG1ht4FMsI7t6A/VwHvHOJmPyMXrLMBZ vG3mromZgdCggsPg0fj8+zoT7gR3gM++cpki9cmxGVfZiT8nfOgATad0PfsPeRXM ywf1DfjlYqrB5FqXFs9C4OnXnLrLfWxgCR+fn600qFdqTXpbWMPJEGyScainHI2h lHhbX2EDWgTAsVVwckkfooYuHIAP8hCkrsxpgbFcnTlUb6gK7fEGPZTkgyf7Fyka r3W6IgExS0sngcraIZa+WTL6TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgZhMwL HvXhvv+jah/EpfpYQ34YMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABIhTz4uiT/c8+zwQaIT5uWQqmmwEGRjatXnjA8RD8KuOflnRZ1ywnbX9jFib yR42GaalL1igK+HRBR+17q7Rzxvos+njh+TlH4yWo1VvUX7lljgdIaELpg97GFV+ hvNGt+59+FS7FMd2CWTO4oJZeLX54c7iASBwzccLKgyaUSpZBzBRmsrH4ZgJZhdj ue8bjeGBSUP8JKsOOcfPJgGREP1b8+dY6cIhqVi+L+gDMuLb6of00oM9mbAwjkwK PJEAS+260CMPUaHBEU1Y3CVITRyT+BNXSWdamLMB1EenD/o3QIkr7Vh+cqaABhRQ HYZHhzsBPw8NCNov1izxvWjfTw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:35 2026 by rpki-client