$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: 5GlNsm6jct1/U+1C2KObFqCXNcEGBMSDPMlQsF1lK8Y= Subject key identifier: 35:E7:CB:A2:EC:5C:36:6B:C2:B7:2B:01:C9:E0:A1:A4:1F:8E:EC:FE Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0AE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 0AAB Signing time: Mon 26 Oct 2026 19:32:41 +0000 Manifest this update: Mon 26 Oct 2026 19:32:41 +0000 Manifest next update: Mon 02 Nov 2026 19:32:41 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: +BhMiTtNt0YoyrWanh5t8InwiRKUPwx2u1Tnpyvgh6I=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: B+iCwX5O9Eeq7aQImMdocBqyaYXSiw6qKnAQCRyMV5o=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: mEA6pK1+kPCEgBGE8QLt8NRqO5P+TggoXjWxm6twcFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2787 (0xae3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Oct 26 19:32:41 2026 GMT Not After : Nov 2 19:32:41 2026 GMT Subject: CN=6adfaad9-1245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:5d:70:c8:53:a5:a5:cd:1a:6e:9d:c0:51: 97:f1:26:e8:09:93:bb:bf:9e:15:55:93:bd:92:a5: b9:68:84:4a:c2:22:b5:a3:7c:e1:2e:bb:e5:95:76: ad:54:97:d0:c1:49:eb:60:91:4c:a9:ce:57:d6:ac: b7:9a:8c:f6:56:bf:8b:87:bd:34:e4:5a:15:a4:4b: ba:2b:92:c3:39:b4:59:3d:73:11:a2:31:26:c4:10: 2b:7b:44:89:db:87:24:dd:96:1a:5c:05:4f:d2:63: 2e:d3:22:4a:ef:82:a7:70:9a:d8:7b:7b:7f:ec:12: 7c:00:26:7b:1f:ec:d6:50:a6:b0:02:f5:4a:c0:65: b7:f0:c0:4d:ef:f0:2b:9b:6c:3a:48:32:e9:dc:a5: e5:16:7c:e6:e9:1f:c4:93:9a:6a:bc:6e:e9:f2:43: 63:d3:30:b2:82:2d:a9:d1:74:4b:05:ca:a6:6d:92: 54:d7:8e:3e:e7:e8:6b:9e:9f:d4:98:e4:ae:04:ac: 1e:dc:c6:55:ba:24:7f:6e:74:2f:15:04:aa:15:40: 6e:e6:86:1d:ff:6b:78:c8:e5:5a:14:58:21:6c:bd: fe:1c:e9:d9:64:86:16:c2:4d:07:ed:9d:68:63:49: e5:8d:28:32:85:5c:03:54:21:4b:0d:dc:5f:69:19: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E7:CB:A2:EC:5C:36:6B:C2:B7:2B:01:C9:E0:A1:A4:1F:8E:EC:FE X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:98:6f:a8:6e:ae:e1:1d:c8:f5:76:80:0e:50:91:3c:1e:83: f4:99:5b:a7:28:da:51:fe:ed:54:6a:d3:7e:43:ce:ca:77:2f: 93:ab:06:73:66:69:21:58:6c:91:e0:a3:72:b2:16:b4:a1:05: d4:fd:39:68:7d:c3:cf:84:56:39:4a:bc:ed:55:dd:d0:6e:47: 3a:eb:f4:42:25:84:2a:4c:49:be:ca:05:59:8f:65:d0:7c:0e: 3c:bf:47:31:7f:32:c7:fb:74:27:c8:25:d8:bb:ec:0c:7c:b7: 77:ab:33:27:d3:17:7c:a4:fb:5f:ed:8c:96:a6:2f:3b:79:6f: f2:f8:14:cb:a5:59:83:c8:13:a5:86:31:95:55:76:eb:94:54: 81:a0:f0:75:19:ce:ec:70:9e:73:fd:6b:66:ed:fe:b4:07:4d: 2b:9e:3d:2e:c1:8d:b1:86:dc:01:8a:b2:bd:bb:e5:e2:d9:21: b4:17:97:24:50:e6:73:1e:45:8d:ac:98:0a:e0:bb:6b:a2:b7: 39:36:b2:b5:4c:54:52:72:8c:c2:e0:3d:7f:14:94:62:c3:5e: e4:67:35:08:f4:ae:65:1b:6e:28:55:e2:8b:45:71:e5:ce:ff: cd:30:a9:19:76:41:c5:3e:bc:cb:36:46:3e:08:aa:f7:48:7d: 00:1a:67:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjYxMDI2MTkzMjQxWhcNMjYxMTAyMTkzMjQxWjAYMRYwFAYD VQQDEw02YWRmYWFkOS0xMjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iRdcMhTpaXNGm6dwFGX8SboCZO7v54VVZO9kqW5aIRKwiK1o3zhLrvllXat VJfQwUnrYJFMqc5X1qy3moz2Vr+Lh7005FoVpEu6K5LDObRZPXMRojEmxBAre0SJ 24ck3ZYaXAVP0mMu0yJK74KncJrYe3t/7BJ8ACZ7H+zWUKawAvVKwGW38MBN7/Ar m2w6SDLp3KXlFnzm6R/Ek5pqvG7p8kNj0zCygi2p0XRLBcqmbZJU144+5+hrnp/U mOSuBKwe3MZVuiR/bnQvFQSqFUBu5oYd/2t4yOVaFFghbL3+HOnZZIYWwk0H7Z1o Y0nljSgyhVwDVCFLDdxfaRmxmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXny6Ls XDZrwrcrAcngoaQfjuz+MB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPphvqG6u4R3I9XaADlCRPB6D9JlbpyjaUf7tVGrTfkPOyncvk6sGc2ZpIVhs keCjcrIWtKEF1P05aH3Dz4RWOUq87VXd0G5HOuv0QiWEKkxJvsoFWY9l0HwOPL9H MX8yx/t0J8gl2LvsDHy3d6szJ9MXfKT7X+2MlqYvO3lv8vgUy6VZg8gTpYYxlVV2 65RUgaDwdRnO7HCec/1rZu3+tAdNK549LsGNsYbcAYqyvbvl4tkhtBeXJFDmcx5F jayYCuC7a6K3OTaytUxUUnKMwuA9fxSUYsNe5Gc1CPSuZRtuKFXii0Vx5c7/zTCp GXZBxT68yzZGPgiq90h9ABpn0g== -----END CERTIFICATE-----Generated at Wed Oct 28 18:28:22 2026 by rpki-client