$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft File: _wsVRthMDZNVkFtsopPiW0QJSMU.mft (raw, json) Hash identifier: P/vTdIWbtBZ1UQusJqv6AMZK0K1lp2eMeKUbqT8VonY= Subject key identifier: E2:37:23:97:12:E0:47:E6:9A:B5:43:E4:B1:C8:23:FE:88:FA:7D:CE Authority key identifier: FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 Certificate issuer: /CN=A9198F53/serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft Manifest number: 0BB3 Signing time: Sat 04 Apr 2026 18:48:39 +0000 Manifest this update: Sat 04 Apr 2026 18:48:39 +0000 Manifest next update: Sat 11 Apr 2026 18:48:39 +0000 Files and hashes: 1: _wsVRthMDZNVkFtsopPiW0QJSMU.crl (hash: EjzADht13hNolGnp6Otf5FIOg/Lxr7bBrkOhiK5miZc=) 2: 0B1FBD4A40F611EAACD44866C4F9AE02.roa (hash: DFdvRHgXchuBm4qDLuYljzDy6YW5jSvcOAQEQdXRUns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F53, serialNumber=FF0B1546D84C0D9355905B6CA293E25B440948C5 Validity Not Before: Apr 4 18:48:39 2026 GMT Not After : Apr 11 18:48:39 2026 GMT Subject: CN=69d15d07-8763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:c3:cd:6f:2c:20:da:b7:6d:a8:10:e3:b3: 44:2c:d1:0f:26:7b:e7:1f:88:cd:bd:78:7b:5b:0a: b9:ac:33:22:96:9e:ab:da:b8:33:a0:6c:df:bb:4b: 0f:53:32:e6:05:bf:95:03:97:81:a0:b9:77:04:63: ac:7b:29:d2:55:b8:13:31:14:c5:76:a9:3a:1d:73: d9:79:9a:19:ef:18:7a:8d:ee:93:a0:50:a2:e3:89: d4:38:f3:d9:b4:ed:26:70:13:33:c3:2f:81:de:67: 74:fb:29:99:4a:a2:51:f2:bf:fd:31:06:86:15:ca: 72:15:b0:9f:09:c6:c4:e0:ca:b0:08:0b:f2:ce:a6: 62:8a:a6:5a:08:9d:ce:c5:23:0b:58:b3:dc:31:82: fb:1c:46:92:dc:e9:d0:3b:72:0b:09:ab:93:9b:3a: b6:e3:a5:6f:8f:f9:1c:f9:86:e1:db:96:c9:56:dc: c2:b0:c5:95:92:16:c1:24:61:b9:31:13:aa:39:53: 83:2e:24:a4:77:84:cf:e4:23:7d:3f:92:02:18:46: c7:73:45:65:7a:ca:a9:14:f6:6e:3e:cf:c6:cb:d0: a4:8e:59:12:84:93:0a:5d:72:ed:70:90:53:f3:d4: 3b:f2:15:65:8a:34:32:65:17:34:47:c4:60:e1:58: 9d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:37:23:97:12:E0:47:E6:9A:B5:43:E4:B1:C8:23:FE:88:FA:7D:CE X509v3 Authority Key Identifier: keyid:FF:0B:15:46:D8:4C:0D:93:55:90:5B:6C:A2:93:E2:5B:44:09:48:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_wsVRthMDZNVkFtsopPiW0QJSMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F53/CD06217640F411EAAE778261C4F9AE02/_wsVRthMDZNVkFtsopPiW0QJSMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b5:48:0c:7f:c3:03:88:0b:77:21:bd:6f:77:f2:e6:67:ef: 10:d4:39:c3:84:5e:e7:cf:12:33:db:83:4d:69:cc:d5:89:e6: a6:44:d7:91:0b:e3:c7:66:26:6e:76:cf:4c:1e:ff:53:75:f9: bf:e1:fa:3f:35:67:b8:d8:e6:a2:08:a2:03:ed:71:96:e7:7d: 8b:9f:ba:0f:61:cd:b4:b2:cc:f3:b0:06:9d:f3:93:2b:38:0f: 99:40:1a:07:87:d2:89:6e:4d:c5:c7:94:36:70:72:b9:64:7a: c3:3f:35:0c:8c:21:9b:9f:28:31:61:ab:d4:c8:5f:15:61:a3: fc:32:b0:4c:b7:20:17:23:97:b3:ec:58:e6:05:18:4d:8d:bb: 6f:bc:f6:ec:23:02:92:ad:73:b2:71:d2:04:2b:73:9c:6f:68: 78:d0:f7:f9:9b:c2:47:c4:dc:4b:b5:ba:ad:40:d1:21:c0:8a: c4:87:9e:1e:f4:cb:9f:01:2d:17:01:89:f9:c1:bc:57:71:49: c7:dd:97:b5:29:5c:32:4a:02:7d:74:48:b7:07:79:d9:8f:a9: 26:d6:e4:f6:17:be:53:da:f9:1f:33:8d:5c:04:37:bf:f6:13: 4e:e8:cf:9b:8e:f5:c7:d2:38:d2:48:a4:1f:f2:d5:13:2f:38: a9:3e:9e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNTMxMTAvBgNVBAUTKEZGMEIxNTQ2RDg0QzBEOTM1NTkwNUI2Q0EyOTNFMjVC NDQwOTQ4QzUwHhcNMjYwNDA0MTg0ODM5WhcNMjYwNDExMTg0ODM5WjAYMRYwFAYD VQQDEw02OWQxNWQwNy04NzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuALDzW8sINq3bagQ47NELNEPJnvnH4jNvXh7Wwq5rDMilp6r2rgzoGzfu0sP UzLmBb+VA5eBoLl3BGOseynSVbgTMRTFdqk6HXPZeZoZ7xh6je6ToFCi44nUOPPZ tO0mcBMzwy+B3md0+ymZSqJR8r/9MQaGFcpyFbCfCcbE4MqwCAvyzqZiiqZaCJ3O xSMLWLPcMYL7HEaS3OnQO3ILCauTmzq246Vvj/kc+Ybh25bJVtzCsMWVkhbBJGG5 MROqOVODLiSkd4TP5CN9P5ICGEbHc0VlesqpFPZuPs/Gy9CkjlkShJMKXXLtcJBT 89Q78hVlijQyZRc0R8Rg4VidxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOI3I5cS 4EfmmrVD5LHII/6I+n3OMB8GA1UdIwQYMBaAFP8LFUbYTA2TVZBbbKKT4ltECUjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY1My9DRDA2MjE3NjQw RjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURaTlZrRnRzb3BQaVcwUUpT TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193c1ZSdGhNRFpOVmtGdHNvcFBpVzBRSlNNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY1My9DRDA2MjE3NjQwRjQxMUVBQUU3NzgyNjFDNEY5QUUwMi9fd3NWUnRoTURa TlZrRnRzb3BQaVcwUUpTTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLVIDH/DA4gLdyG9b3fy5mfvENQ5w4Re588SM9uDTWnM1YnmpkTXkQvjx2Ym bnbPTB7/U3X5v+H6PzVnuNjmogiiA+1xlud9i5+6D2HNtLLM87AGnfOTKzgPmUAa B4fSiW5NxceUNnByuWR6wz81DIwhm58oMWGr1MhfFWGj/DKwTLcgFyOXs+xY5gUY TY27b7z27CMCkq1zsnHSBCtznG9oeND3+ZvCR8TcS7W6rUDRIcCKxIeeHvTLnwEt FwGJ+cG8V3FJx92XtSlcMkoCfXRItwd52Y+pJtbk9he+U9r5HzONXAQ3v/YTTujP m471x9I40kikH/LVEy84qT6eGA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:34:07 2026 by rpki-client