$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: HtSMXgC6t89Cof+/k6Ch62FWZ4pgwFNW9H1smW7aBNM= Subject key identifier: 92:92:47:9B:3A:DD:83:74:63:A9:91:DD:B6:A0:91:A6:C5:C1:7B:01 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0CD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0CB2 Signing time: Tue 28 Apr 2026 18:40:52 +0000 Manifest this update: Tue 28 Apr 2026 18:40:51 +0000 Manifest next update: Tue 05 May 2026 18:40:51 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: Am23gwVsqKTCyqB1wSnaC2oPwn2biNfSY8To/JQTnHk=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=) 3: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=) 4: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 18:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3283 (0xcd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Apr 28 18:40:51 2026 GMT Not After : May 5 18:40:51 2026 GMT Subject: CN=69f0ff34-5fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6c:2c:5f:86:d4:90:0d:aa:1a:10:c1:74:76: d1:01:61:66:e3:65:14:22:23:ea:2e:59:03:9f:29: 5e:52:0f:4c:69:6a:87:5c:4d:7b:2a:37:c8:ef:11: b3:7a:57:61:27:69:b9:e2:64:c8:c6:96:1a:30:68: c0:c6:65:ed:73:db:59:33:58:cf:77:2b:1d:00:61: 17:ab:a8:60:ce:4a:24:9f:62:f2:9f:7a:16:93:b9: 14:5e:7f:51:2b:13:59:ab:b2:47:c4:29:a9:0a:4d: 29:fa:f7:a7:11:57:42:4c:0f:b2:ba:d2:8f:be:fb: 19:84:fc:0d:2b:4e:a4:19:d3:b5:dc:c4:b4:59:e0: 21:74:a9:35:c4:e0:7a:ec:08:6a:c7:39:07:bd:7c: 96:4c:df:2e:da:b5:0d:2d:13:c4:37:b5:43:2d:d9: 1d:b1:13:da:11:e6:12:46:a1:5b:80:c0:42:d4:73: 0f:27:c7:3d:60:54:0b:e9:1b:fc:e2:4c:68:db:bb: 66:dc:03:47:f3:7e:99:3f:e1:6d:76:29:5f:99:11: 0a:f8:63:45:1a:60:86:06:21:a9:e0:da:c2:df:b5: 28:79:90:e5:11:36:0c:ae:4a:a3:a4:43:cc:26:9e: fc:e4:80:9c:21:bc:e5:51:5f:dd:13:22:f3:a4:16: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:92:47:9B:3A:DD:83:74:63:A9:91:DD:B6:A0:91:A6:C5:C1:7B:01 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:13:b0:1f:b5:ff:8f:35:99:db:dc:ba:12:40:b0:94:95:07: 38:87:69:d6:47:2c:bb:e5:80:e5:93:bf:fb:f3:1b:be:09:11: 71:96:57:8e:7e:3a:e1:2b:90:cd:de:7e:c0:cb:99:b7:ce:49: aa:84:21:ed:a2:56:35:c7:b3:03:04:4d:1f:5d:f3:45:b5:4f: 5d:e6:f9:22:03:20:03:52:bc:71:8a:90:06:20:eb:8b:d0:1d: 6e:ab:d8:25:f8:6b:e9:96:17:c4:a7:e5:a9:29:b8:76:92:66: 3d:d0:2a:95:0c:aa:bd:a4:4f:1b:ff:41:f8:9b:d4:8b:30:4c: a3:02:f1:a0:05:87:be:99:2d:10:66:c0:72:11:fd:cc:70:08: ee:cb:17:e4:94:ca:e2:f6:33:4b:53:fb:97:6f:30:b6:c9:0f: 95:d8:b7:9e:cf:f9:87:57:c2:ca:60:d8:54:88:0e:21:e2:d8: 96:2b:7f:c6:59:de:92:4b:85:fd:cc:9b:6a:80:c6:0c:3d:5b: 37:00:19:90:ae:e1:5c:e4:28:77:3f:66:62:4b:61:9a:6a:71: 68:8e:97:65:87:d3:25:62:4d:29:63:0a:99:27:c5:07:a6:f7: 6d:19:cc:62:f9:7c:1b:93:3b:f7:b5:e4:fd:5d:4c:c0:65:08: 2e:31:88:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjYwNDI4MTg0MDUxWhcNMjYwNTA1MTg0MDUxWjAYMRYwFAYD VQQDEw02OWYwZmYzNC01ZmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj2wsX4bUkA2qGhDBdHbRAWFm42UUIiPqLlkDnyleUg9MaWqHXE17KjfI7xGz eldhJ2m54mTIxpYaMGjAxmXtc9tZM1jPdysdAGEXq6hgzkokn2Lyn3oWk7kUXn9R KxNZq7JHxCmpCk0p+venEVdCTA+yutKPvvsZhPwNK06kGdO13MS0WeAhdKk1xOB6 7AhqxzkHvXyWTN8u2rUNLRPEN7VDLdkdsRPaEeYSRqFbgMBC1HMPJ8c9YFQL6Rv8 4kxo27tm3ANH836ZP+FtdilfmREK+GNFGmCGBiGp4NrC37UoeZDlETYMrkqjpEPM Jp785ICcIbzlUV/dEyLzpBZfFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKSR5s6 3YN0Y6mR3bagkabFwXsBMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGxOwH7X/jzWZ29y6EkCwlJUHOIdp1kcsu+WA5ZO/+/MbvgkRcZZXjn464SuQ zd5+wMuZt85JqoQh7aJWNcezAwRNH13zRbVPXeb5IgMgA1K8cYqQBiDri9AdbqvY Jfhr6ZYXxKflqSm4dpJmPdAqlQyqvaRPG/9B+JvUizBMowLxoAWHvpktEGbAchH9 zHAI7ssX5JTK4vYzS1P7l28wtskPldi3ns/5h1fCymDYVIgOIeLYlit/xlnekkuF /cybaoDGDD1bNwAZkK7hXOQodz9mYkthmmpxaI6XZYfTJWJNKWMKmSfFB6b3bRnM Yvl8G5M797Xk/V1MwGUILjGIfA== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:36 2026 by rpki-client