$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: XR38IMLMxIPT69D1qd7e9/NR6v8QvSZjg/tE08WRDGg= Subject key identifier: 8E:06:47:2E:01:34:CC:38:DF:BA:14:13:40:B1:82:E8:7C:88:F7:F3 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0CBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0C9A Signing time: Thu 12 Mar 2026 18:19:03 +0000 Manifest this update: Thu 12 Mar 2026 18:19:02 +0000 Manifest next update: Thu 19 Mar 2026 18:19:02 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: K827HqYj5yGzxMhwidZkG7twsTamuUBgvauVwF6c9kU=) 2: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=) 3: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=) 4: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3259 (0xcbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Mar 12 18:19:02 2026 GMT Not After : Mar 19 18:19:02 2026 GMT Subject: CN=69b30397-14c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:04:5c:e3:42:0b:0a:5b:37:97:5e:66:8e: 85:6f:4e:81:8e:14:7d:ef:55:53:30:06:b2:96:88: d2:fd:a0:0e:81:0c:09:f7:6e:b8:ac:50:3a:cc:2f: 7d:66:23:30:1a:d4:33:27:d2:83:ba:91:63:37:39: fc:4c:3f:80:e9:3e:fd:2e:3b:3e:8f:f6:80:7a:eb: c1:d3:c3:40:06:0f:55:7b:26:f2:c8:c3:b8:f5:64: 4b:4c:76:11:d4:e2:cd:a5:16:e9:5e:4c:23:08:3d: 09:5f:d0:08:24:81:db:28:c7:6a:bd:ab:43:55:18: c6:19:fa:31:25:10:71:1d:ab:7a:fc:19:d7:d4:87: 52:b3:12:9a:0d:2c:fd:a0:d9:98:1c:ea:ce:20:2f: 59:c6:29:b1:b9:52:df:1f:72:3b:23:68:8e:b7:d2: 20:f6:98:cc:70:be:4d:28:30:6c:58:ac:67:a7:19: 21:e9:d7:7a:1f:f7:83:8f:f5:da:06:c6:de:62:4e: b5:80:37:81:fd:ba:eb:c4:34:4c:44:fa:f6:db:9c: d4:9e:b6:db:d1:1d:c7:20:ca:8d:d3:85:84:e8:ca: 32:d6:07:7b:53:c7:32:c0:61:40:83:11:d3:5e:62: d3:dc:52:60:87:46:d7:f8:b5:10:9c:82:aa:4c:bd: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:06:47:2E:01:34:CC:38:DF:BA:14:13:40:B1:82:E8:7C:88:F7:F3 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:d8:49:08:d1:e8:57:91:2a:2b:5d:5d:da:a7:3a:f7:45:8a: 81:1c:c7:a8:bc:8f:43:16:7e:2e:53:fa:0e:89:d5:86:56:db: 5a:4d:ab:d1:54:f7:ba:18:4f:dd:ef:46:86:be:ba:d9:6d:56: 06:ab:5e:1d:74:e7:cc:5b:fe:ee:e1:ba:de:5f:05:51:4d:e5: f4:fd:ae:92:4a:9e:f5:73:8e:f3:c7:81:25:7c:d4:1a:09:41: f6:9b:b8:0e:a6:07:5a:af:3b:46:c4:3f:cf:05:ef:ab:17:f2: 1e:1f:a7:a8:36:03:80:10:94:66:d6:3f:a4:2b:80:60:45:b7: 5c:e5:e6:93:11:c4:59:94:ff:43:d1:41:c4:cb:5b:eb:29:1a: 9a:a9:b8:27:cc:c1:3b:99:40:3a:4f:33:91:b9:b8:bd:f0:03: 2d:ea:ad:3c:65:09:9a:03:c9:f1:b5:fb:8f:a9:f0:1b:e5:54: af:b9:76:9d:7b:93:db:d7:c2:09:17:d3:ea:0d:98:07:0f:dc: 00:ac:e0:5d:30:43:6a:26:90:be:1f:37:fa:29:cc:6b:17:2f: e5:95:a8:03:ff:fe:ee:c2:1b:99:3b:a5:3a:06:aa:14:9f:06: e1:e3:5d:a0:f3:c5:e8:61:3e:7b:49:b0:a8:8c:ec:b3:72:fa: 28:04:19:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjYwMzEyMTgxOTAyWhcNMjYwMzE5MTgxOTAyWjAYMRYwFAYD VQQDEw02OWIzMDM5Ny0xNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WoEXONCCwpbN5deZo6Fb06BjhR971VTMAaylojS/aAOgQwJ9264rFA6zC99 ZiMwGtQzJ9KDupFjNzn8TD+A6T79Ljs+j/aAeuvB08NABg9VeybyyMO49WRLTHYR 1OLNpRbpXkwjCD0JX9AIJIHbKMdqvatDVRjGGfoxJRBxHat6/BnX1IdSsxKaDSz9 oNmYHOrOIC9ZximxuVLfH3I7I2iOt9Ig9pjMcL5NKDBsWKxnpxkh6dd6H/eDj/Xa BsbeYk61gDeB/brrxDRMRPr225zUnrbb0R3HIMqN04WE6Moy1gd7U8cywGFAgxHT XmLT3FJgh0bX+LUQnIKqTL11vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4GRy4B NMw437oUE0Cxguh8iPfzMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHNhJCNHoV5EqK11d2qc690WKgRzHqLyPQxZ+LlP6DonVhlbbWk2r0VT3uhhP 3e9Ghr662W1WBqteHXTnzFv+7uG63l8FUU3l9P2ukkqe9XOO88eBJXzUGglB9pu4 DqYHWq87RsQ/zwXvqxfyHh+nqDYDgBCUZtY/pCuAYEW3XOXmkxHEWZT/Q9FBxMtb 6ykamqm4J8zBO5lAOk8zkbm4vfADLeqtPGUJmgPJ8bX7j6nwG+VUr7l2nXuT29fC CRfT6g2YBw/cAKzgXTBDaiaQvh83+inMaxcv5ZWoA//+7sIbmTulOgaqFJ8G4eNd oPPF6GE+e0mwqIzss3L6KAQZIg== -----END CERTIFICATE-----Generated at Sat Mar 14 07:40:05 2026 by rpki-client