$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: ZaTFe/Fr5JrTJt3vUIvxbVKlJEXy/1k2MTT/FlfYLwk= Subject key identifier: 90:5C:24:A5:17:1D:90:1B:6F:AA:61:B2:92:8A:83:4B:05:CD:5B:A2 Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 01BB Signing time: Tue 03 Mar 2026 03:37:22 +0000 Manifest this update: Tue 03 Mar 2026 03:37:22 +0000 Manifest next update: Tue 10 Mar 2026 03:37:22 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: LfMj2nTgH3t3/raTc+5sb4xwtqmO2u9ewT5xZRPbM5g=) 2: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: HisRiW5EWGfUY7tpMgN5Z0zrlCM3EcURz9NoUEQR3wA=) 3: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 6WkzCxquW5lDfA6lzmSq2tT3dgU9Pqrs3T41zMdhl0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 03:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: Mar 3 03:37:22 2026 GMT Not After : Mar 10 03:37:22 2026 GMT Subject: CN=69a65772-31b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:c2:68:dc:95:3b:20:6b:4e:52:c2:e5:c1: 38:53:cc:5e:17:0f:58:ac:ea:f4:33:c5:ff:df:1c: e4:aa:56:cc:44:4a:2f:40:67:f1:ef:b3:53:b4:0a: 5d:4d:7d:09:47:35:fd:09:06:82:60:80:f1:eb:45: 48:48:d5:86:2e:6a:8d:c0:d3:39:4a:0a:38:49:3e: f4:4e:b7:44:11:57:71:72:a8:86:35:7b:64:28:96: e3:14:87:06:cf:1e:af:81:1a:a3:ce:77:63:45:af: 81:9a:ea:31:ef:be:85:dd:4f:0a:08:27:04:24:48: 6e:73:7a:a3:2a:93:5e:ed:7b:fe:76:24:9b:fa:1a: d7:63:7f:7d:24:22:f8:27:4a:db:6d:c4:3f:4f:46: a5:9e:9d:01:27:2c:fc:fc:42:c7:1a:df:5c:30:4c: e1:b6:96:2f:f3:87:85:a1:31:d2:5b:e0:f0:c9:22: c8:1d:5d:20:68:9d:3a:41:0c:12:b1:3e:08:9f:57: 75:aa:6d:0a:b7:f2:d9:10:d2:fd:6d:83:9c:ae:17: fb:0b:d8:7f:e9:55:a6:50:92:f5:f7:57:a8:56:88: e6:b7:4a:e2:0c:68:21:5b:29:53:c5:6d:a6:ee:26: fe:3f:be:9d:15:18:11:a6:ce:d0:de:d0:19:5a:fe: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5C:24:A5:17:1D:90:1B:6F:AA:61:B2:92:8A:83:4B:05:CD:5B:A2 X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:15:a5:ee:0f:6d:29:f6:55:38:b2:29:a7:70:04:da:16:a2: 0a:53:b8:6a:2f:9b:b1:cc:8c:c6:b9:57:50:a4:a1:76:0a:be: b8:4e:89:af:8e:b9:39:06:b7:18:4a:79:da:f1:38:35:ec:e7: 8e:31:ee:02:85:e9:9f:df:8e:f1:ad:1f:4a:ca:cf:db:d9:23: a9:42:22:bd:79:c6:2c:e8:8a:c7:3f:d2:71:30:00:5a:44:3e: 3e:c3:e2:20:03:d3:51:0e:11:28:87:f7:09:ef:dc:78:80:cd: 50:2a:7a:26:1d:86:26:6d:3c:79:b0:b2:41:7d:f6:8e:59:1d: d4:ac:71:89:b4:d8:90:ba:d0:bc:8a:a0:8b:1c:60:93:06:1e: de:9e:67:a8:10:00:c0:91:87:45:e6:64:7d:1a:f4:2c:b5:9f: 14:70:aa:aa:8a:19:36:bd:0a:ab:51:87:61:2b:fd:40:43:77: 82:95:49:d3:d9:e1:0c:fa:a6:f3:bc:b4:14:b9:45:ff:28:77: 8f:f7:ad:9c:91:28:14:f7:18:73:2e:a8:fa:c9:87:dc:f3:dc: b7:92:f0:1b:21:22:4b:0a:b0:7f:cc:93:16:ab:6f:08:30:18: 18:29:64:57:9d:70:06:78:4d:a0:b3:8f:37:31:46:d7:3c:dc: 7c:03:33:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjYwMzAzMDMzNzIyWhcNMjYwMzEwMDMzNzIyWjAYMRYwFAYD VQQDEw02OWE2NTc3Mi0zMWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApS3CaNyVOyBrTlLC5cE4U8xeFw9YrOr0M8X/3xzkqlbMREovQGfx77NTtApd TX0JRzX9CQaCYIDx60VISNWGLmqNwNM5Sgo4ST70TrdEEVdxcqiGNXtkKJbjFIcG zx6vgRqjzndjRa+Bmuox776F3U8KCCcEJEhuc3qjKpNe7Xv+diSb+hrXY399JCL4 J0rbbcQ/T0alnp0BJyz8/ELHGt9cMEzhtpYv84eFoTHSW+DwySLIHV0gaJ06QQwS sT4In1d1qm0Kt/LZENL9bYOcrhf7C9h/6VWmUJL191eoVojmt0riDGghWylTxW2m 7ib+P76dFRgRps7Q3tAZWv4DAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJBcJKUX HZAbb6phspKKg0sFzVuiMB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgRWl7g9tKfZVOLIpp3AE2haiClO4ai+bscyMxrlXUKShdgq+uE6Jr465OQa3 GEp52vE4NeznjjHuAoXpn9+O8a0fSsrP29kjqUIivXnGLOiKxz/ScTAAWkQ+PsPi IAPTUQ4RKIf3Ce/ceIDNUCp6Jh2GJm08ebCyQX32jlkd1KxxibTYkLrQvIqgixxg kwYe3p5nqBAAwJGHReZkfRr0LLWfFHCqqooZNr0Kq1GHYSv9QEN3gpVJ09nhDPqm 87y0FLlF/yh3j/etnJEoFPcYcy6o+smH3PPct5LwGyEiSwqwf8yTFqtvCDAYGClk V51wBnhNoLOPNzFG1zzcfAMzbA== -----END CERTIFICATE-----Generated at Tue Mar 3 16:56:15 2026 by rpki-client