$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: +De126ez2RnFH6nRZJVPPS62x6DT6DiBtdQCreDZnXM= Subject key identifier: 05:AE:4D:4A:F4:45:DB:C0:9D:56:3B:0F:7D:81:8F:B8:03:4E:F5:6F Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: 0148 Signing time: Sun 05 Apr 2026 04:53:13 +0000 Manifest this update: Sun 05 Apr 2026 04:53:13 +0000 Manifest next update: Sun 12 Apr 2026 04:53:13 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: z26egI+HfxQH9FmqIGThmvRTmu2/3v0sEg0aYZieAxg=) 2: 7CFDC462FDFF11F0A0866006396F56BC.roa (hash: A5GbsNchZzAq8cqRzquWaPlJngUIDBnlI/CcMje+QIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Apr 5 04:53:13 2026 GMT Not After : Apr 12 04:53:13 2026 GMT Subject: CN=69d1eab9-14a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d0:dd:ff:88:b1:94:33:59:f4:8b:da:25:12: d9:c7:ef:bd:59:46:b1:83:31:f8:6d:90:02:7a:bd: c3:0c:b5:91:a4:59:af:01:6e:5b:66:f4:3f:01:13: e0:18:ed:d2:1b:d2:03:23:2f:28:68:95:17:2d:a9: 2d:9d:fc:a7:d1:c6:9d:66:3a:8f:5c:ab:c3:99:5e: 1f:ee:ce:1d:f3:9b:ab:e1:88:3e:e5:4d:69:6a:69: d9:60:2d:ea:68:54:10:b4:44:85:0a:68:5b:83:26: e9:bb:82:b0:a9:71:e0:e7:1d:6c:1a:85:4d:95:7c: 29:64:5d:7d:58:0e:f9:6e:13:69:dc:3e:56:e6:68: 0d:28:34:f5:50:bd:ff:b7:10:d5:b2:5a:5e:f1:51: 10:06:7f:bd:78:fd:26:55:b4:a8:3d:64:4f:76:35: 69:b1:9b:84:4a:ff:66:fa:69:e4:3b:73:89:75:de: 7c:52:5d:bd:72:c2:6f:ef:a5:37:b3:d1:67:a7:e5: 8e:1f:8b:e5:36:42:bb:f2:fd:b0:e7:ec:49:63:f2: 05:2a:e8:1c:d2:84:ed:35:18:0f:c2:ad:38:1c:e1: 86:ae:1f:0a:85:fe:18:57:57:2a:52:cf:e5:7a:10: 21:db:72:d3:4b:b2:78:f7:18:d7:72:8d:6f:e7:ee: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AE:4D:4A:F4:45:DB:C0:9D:56:3B:0F:7D:81:8F:B8:03:4E:F5:6F X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:29:c6:00:1b:a9:61:b3:60:fd:56:0b:5e:e6:bc:db:c9:0e: 96:d5:3b:95:c0:e3:3f:a5:ab:b7:70:62:eb:dc:43:31:1a:ed: 7b:a0:d2:1a:54:18:ed:1a:73:ca:3f:87:52:0e:7f:5e:fd:0d: 35:f9:74:c7:45:77:0e:1e:2c:27:fc:98:fa:e5:08:b0:04:27: c4:09:60:20:ee:c3:df:5c:1e:45:15:30:c4:1a:7e:62:d0:86: 75:49:f5:5e:81:e1:27:b8:0a:f1:d8:1a:91:a8:67:3f:4d:df: 13:f9:da:d3:9a:85:d4:ec:e7:f7:87:e6:db:31:f3:16:bd:f3: 44:38:9b:64:39:c5:0b:f8:25:ba:9b:10:18:77:94:1c:9f:23: 21:2d:eb:64:cb:1f:4d:9c:90:b4:62:64:4a:7d:97:46:60:61: e4:f5:65:1c:dc:69:4b:42:6e:36:9a:e2:89:30:5f:c3:20:93: 58:4f:d6:91:f6:e2:03:df:98:fd:85:db:92:24:7f:12:06:f2: a4:1b:24:7a:d3:c7:a0:78:78:c4:88:9c:9c:b4:b2:93:df:f4: 8c:53:01:55:0d:91:b7:70:1a:47:43:51:c8:1d:aa:57:27:01: 55:10:54:fe:1e:ce:7a:cd:43:08:18:37:fa:f8:6f:e7:6b:07: ac:81:c8:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjYwNDA1MDQ1MzEzWhcNMjYwNDEyMDQ1MzEzWjAYMRYwFAYD VQQDEw02OWQxZWFiOS0xNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdDd/4ixlDNZ9IvaJRLZx++9WUaxgzH4bZACer3DDLWRpFmvAW5bZvQ/ARPg GO3SG9IDIy8oaJUXLaktnfyn0cadZjqPXKvDmV4f7s4d85ur4Yg+5U1pamnZYC3q aFQQtESFCmhbgybpu4KwqXHg5x1sGoVNlXwpZF19WA75bhNp3D5W5mgNKDT1UL3/ txDVslpe8VEQBn+9eP0mVbSoPWRPdjVpsZuESv9m+mnkO3OJdd58Ul29csJv76U3 s9Fnp+WOH4vlNkK78v2w5+xJY/IFKugc0oTtNRgPwq04HOGGrh8Khf4YV1cqUs/l ehAh23LTS7J49xjXco1v5+4vjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWuTUr0 RdvAnVY7D32Bj7gDTvVvMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSnGABupYbNg/VYLXua828kOltU7lcDjP6Wrt3Bi69xDMRrte6DSGlQY7Rpz yj+HUg5/Xv0NNfl0x0V3Dh4sJ/yY+uUIsAQnxAlgIO7D31weRRUwxBp+YtCGdUn1 XoHhJ7gK8dgakahnP03fE/na05qF1Ozn94fm2zHzFr3zRDibZDnFC/glupsQGHeU HJ8jIS3rZMsfTZyQtGJkSn2XRmBh5PVlHNxpS0JuNpriiTBfwyCTWE/WkfbiA9+Y /YXbkiR/EgbypBsketPHoHh4xIicnLSyk9/0jFMBVQ2Rt3AaR0NRyB2qVycBVRBU /h7Oes1DCBg3+vhv52sHrIHIQQ== -----END CERTIFICATE-----Generated at Mon Apr 6 10:23:42 2026 by rpki-client