$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft File: WWtkT4ORAfVZi9Egyt6VSFGgzko.mft (raw, json) Hash identifier: KKfcJna492Aq47NL4qNdYovgFKrAXHPIjg9APKr9mpo= Subject key identifier: DF:F2:CC:C9:E6:95:8F:CC:8B:9A:B9:4A:2E:59:C1:E1:4E:80:E9:AE Authority key identifier: 59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A Certificate issuer: /CN=A91AC1CF/serialNumber=596B644F839101F5598BD120CADE954851A0CE4A Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft Manifest number: 06 Signing time: Thu 19 Mar 2026 08:09:18 +0000 Manifest this update: Thu 19 Mar 2026 08:09:17 +0000 Manifest next update: Thu 26 Mar 2026 08:09:17 +0000 Files and hashes: 1: WWtkT4ORAfVZi9Egyt6VSFGgzko.crl (hash: zttyeqHlKmzz/iTnoFHAZYCjUHhP/JTVQCkCMbuixf4=) 2: 840FB8CC1DAE11F1AA3EBAC03D3D8C67.roa (hash: r5BB+japYC6seEdkVZLK22Dexuxs6mCJDX2FzRf3yv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 08:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC1CF, serialNumber=596B644F839101F5598BD120CADE954851A0CE4A Validity Not Before: Mar 19 08:09:17 2026 GMT Not After : Mar 26 08:09:17 2026 GMT Subject: CN=69bbaf2e-a206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fb:9a:ea:90:09:a8:b0:fa:7f:86:de:bd:b3: dd:68:56:d9:45:c2:db:dc:4f:9d:5f:a0:1f:7a:43: 7b:ac:0a:25:0f:14:a8:7e:1a:ff:80:ef:22:d7:13: 98:eb:8a:a9:13:19:bf:7e:59:d1:5c:a5:46:b1:92: 8b:2e:f9:5e:eb:5d:2b:5c:fb:4a:53:df:0d:4b:dd: 07:a6:1b:91:84:10:12:50:d6:67:8a:8e:7e:fa:60: 9d:09:19:da:7e:0e:17:2a:04:13:d4:3a:5d:e3:2d: 25:d3:c1:67:7a:27:a8:ab:33:bc:16:4e:d9:45:60: d6:7a:5e:05:7c:72:94:7b:ca:1e:6a:0b:9e:fe:98: e2:04:a1:9a:3a:c7:d6:9e:40:98:ec:f4:f1:90:dd: 6f:ce:3c:bd:b9:98:84:af:e4:f6:7b:70:75:04:fa: 2e:ef:c1:ff:28:94:1f:4c:a4:ac:31:42:d1:6c:af: d8:27:dd:38:3a:82:82:21:fd:d4:c9:a5:63:b0:79: bb:93:b1:64:c8:ea:62:b6:cd:5f:66:db:c1:d6:19: b1:77:82:e2:76:b6:35:e6:b4:5f:21:f4:e6:02:04: 82:e8:a4:07:f1:3f:38:6b:51:73:85:ee:22:70:2a: a1:ad:5d:4d:d3:7c:7d:8a:e1:dd:63:cf:30:3a:74: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:CC:C9:E6:95:8F:CC:8B:9A:B9:4A:2E:59:C1:E1:4E:80:E9:AE X509v3 Authority Key Identifier: keyid:59:6B:64:4F:83:91:01:F5:59:8B:D1:20:CA:DE:95:48:51:A0:CE:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WWtkT4ORAfVZi9Egyt6VSFGgzko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC1CF/FA71B1D81DAD11F185E42FBE3D3D8C67/WWtkT4ORAfVZi9Egyt6VSFGgzko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:40:bb:3f:4b:31:3a:f5:4b:b6:58:9c:79:ff:c3:b5:0f: 99:2b:87:93:6b:c2:49:5f:13:e8:34:2e:9b:5a:f9:9c:1b:3a: fd:0e:8a:b8:6c:3e:18:ec:c9:7b:96:31:1e:96:88:38:48:75: 89:b7:76:ea:e1:71:b1:d6:0a:2f:11:54:ff:00:9f:93:f1:7e: 33:a2:bc:2a:76:e8:57:e4:e0:37:88:ca:67:55:7e:52:c7:40: 57:2d:37:a8:e3:48:4d:d7:6f:aa:d1:17:97:14:3a:bc:cb:a1: 9f:9e:c0:01:0c:68:09:98:9b:d5:1f:b6:80:aa:cd:a4:8f:1b: e6:cc:3b:70:de:74:78:02:34:23:62:05:e1:c9:1c:21:f4:a3: a9:19:b0:b4:40:dc:41:05:e3:b2:1e:ae:ed:ca:41:9e:4a:f6: 9d:c6:b6:d6:a2:a0:69:c8:dc:48:78:2c:be:62:7f:78:2b:c0: 3b:1b:bf:9e:6f:2b:a6:5e:11:b8:0c:1b:70:ab:46:63:03:ff: 16:9d:4b:43:97:3c:fe:85:36:50:35:eb:b4:9c:35:39:84:7b: bc:4e:64:bb:e7:03:ae:a9:f5:ca:1f:99:8d:b1:4f:f6:9c:a2: 14:41:3f:97:84:1c:a3:e9:af:dc:b4:c3:65:ea:6f:b6:bf:25: f4:62:2f:a3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzFDRjExMC8GA1UEBRMoNTk2QjY0NEY4MzkxMDFGNTU5OEJEMTIwQ0FERTk1NDg1 MUEwQ0U0QTAeFw0yNjAzMTkwODA5MTdaFw0yNjAzMjYwODA5MTdaMBgxFjAUBgNV BAMTDTY5YmJhZjJlLWEyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP+5rqkAmosPp/ht69s91oVtlFwtvcT51foB96Q3usCiUPFKh+Gv+A7yLXE5jr iqkTGb9+WdFcpUaxkosu+V7rXStc+0pT3w1L3QemG5GEEBJQ1meKjn76YJ0JGdp+ DhcqBBPUOl3jLSXTwWd6J6irM7wWTtlFYNZ6XgV8cpR7yh5qC57+mOIEoZo6x9ae QJjs9PGQ3W/OPL25mISv5PZ7cHUE+i7vwf8olB9MpKwxQtFsr9gn3Tg6goIh/dTJ pWOwebuTsWTI6mK2zV9m28HWGbF3guJ2tjXmtF8h9OYCBILopAfxPzhrUXOF7iJw KqGtXU3TfH2K4d1jzzA6dMhNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3/LMyeaV j8yLmrlKLlnB4U6A6a4wHwYDVR0jBBgwFoAUWWtkT4ORAfVZi9Egyt6VSFGgzkow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMUNGL0ZBNzFCMUQ4MURB RDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZWWmk5RWd5dDZWU0ZHZ3pr by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV1d0a1Q0T1JBZlZaaTlFZ3l0NlZTRkdnemtvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MUNGL0ZBNzFCMUQ4MURBRDExRjE4NUU0MkZCRTNEM0Q4QzY3L1dXdGtUNE9SQWZW Wmk5RWd5dDZWU0ZHZ3prby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAk5EC7P0sxOvVLtlicef/DtQ+ZK4eTa8JJXxPoNC6bWvmcGzr9Doq4bD4Y7Ml7 ljEelog4SHWJt3bq4XGx1govEVT/AJ+T8X4zorwqduhX5OA3iMpnVX5Sx0BXLTeo 40hN12+q0ReXFDq8y6GfnsABDGgJmJvVH7aAqs2kjxvmzDtw3nR4AjQjYgXhyRwh 9KOpGbC0QNxBBeOyHq7tykGeSvadxrbWoqBpyNxIeCy+Yn94K8A7G7+ebyumXhG4 DBtwq0ZjA/8WnUtDlzz+hTZQNeu0nDU5hHu8TmS75wOuqfXKH5mNsU/2nKIUQT+X hByj6a/ctMNl6m+2vyX0Yi+j -----END CERTIFICATE-----Generated at Thu Mar 19 15:44:58 2026 by rpki-client