$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: pSg46T885hueUhDZ+XTPIVHYzAqgngfNR3UT+QM0/O4= Subject key identifier: 21:91:FC:2A:EA:4B:FA:26:64:8C:A0:6B:4B:3E:1F:84:21:97:EC:10 Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0CF7 Signing time: Thu 10 Sep 2026 18:23:09 +0000 Manifest this update: Thu 10 Sep 2026 18:23:09 +0000 Manifest next update: Thu 17 Sep 2026 18:23:09 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: 9BbssQWFNgm7triluk0agcsEvaJ4C1Gl+rjDBRkTj+w=) 2: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=) 3: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=) 4: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Sep 10 18:23:09 2026 GMT Not After : Sep 17 18:23:09 2026 GMT Subject: CN=6aa2f58d-3a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:dd:7e:89:70:f6:0c:13:fb:f9:af:5c:f4: 79:bb:7a:63:d2:19:0b:0a:3f:40:06:48:ce:c4:82: ea:06:0a:39:7f:22:e4:f2:4c:c3:b2:d8:cd:e6:3f: d0:ea:42:b6:40:f8:f8:50:23:65:51:6c:cf:aa:8c: 73:67:25:a0:9c:d4:e4:a1:ed:6b:0a:cb:35:9f:80: d1:26:5e:8e:8d:65:26:ad:7a:e3:56:59:96:88:93: 37:81:f1:eb:85:68:de:33:4d:dd:d2:38:37:89:2a: fd:8f:fd:fe:cd:16:54:29:e4:c0:4d:83:e9:1d:81: 36:93:84:ee:5f:e9:68:64:ea:0a:92:45:db:24:39: 2d:a6:22:36:b9:8a:08:f3:34:f7:9c:76:cd:f7:2f: ac:00:2a:45:87:e2:b9:f3:a2:1f:6e:8a:6d:ed:ce: 87:fd:f3:f1:23:21:5f:84:c9:00:8d:a9:f3:a6:3d: 3f:0d:85:b4:60:f0:47:46:d9:1e:9b:e2:7e:a1:3e: de:74:5e:aa:4a:f8:6b:a8:41:f9:33:8a:68:67:b8: 48:df:62:56:e9:fb:8a:7a:0e:1d:15:62:24:ca:9f: 5a:ef:93:28:42:9a:e0:b6:e0:7b:2d:ec:7e:25:f3: 87:09:a0:9a:bc:43:8b:c5:0c:fb:58:ab:be:e4:bc: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:FC:2A:EA:4B:FA:26:64:8C:A0:6B:4B:3E:1F:84:21:97:EC:10 X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:22:02:b4:ce:f6:4b:2a:20:47:cf:77:b5:81:e5:aa:25:cd: 26:66:bc:e4:89:a7:91:3d:34:b5:ff:33:db:09:3b:8d:85:53: f0:2c:06:54:1e:04:52:19:16:92:11:16:65:86:60:50:f6:e7: 62:e7:74:11:9a:0c:8a:c1:95:83:b5:a6:38:55:d5:1d:6d:bb: 94:29:92:e2:9f:2e:17:23:50:1f:c7:2f:8e:b1:c6:d1:46:04: 87:ae:11:fa:5c:e4:d0:e1:14:39:89:2b:02:5a:8b:f9:d5:b1: f7:93:e5:2f:90:ac:3f:9b:cb:91:7f:e4:d5:d6:32:29:31:d3: 33:a4:91:e3:4f:57:d6:c4:4b:9c:52:b0:e5:30:17:b8:03:f0: df:fc:9b:4c:fb:d3:cc:0e:c1:1f:fd:c2:a5:04:84:0b:57:12: 0c:70:21:bb:9c:f8:c1:ed:a5:ad:0c:bb:43:42:fc:ec:50:60: 2b:d6:fe:d6:da:78:56:89:e2:c9:e2:fb:17:d5:40:6e:7b:93: 59:a2:e8:59:e6:21:62:77:a5:3e:97:c8:38:a9:c2:70:fb:1d: b5:13:79:e8:8f:66:75:72:92:9d:68:d1:73:39:8b:08:e3:ec: d9:19:1b:17:8c:51:57:d5:0d:28:0f:e0:fb:bb:39:7b:dd:c7: 65:e4:3c:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjYwOTEwMTgyMzA5WhcNMjYwOTE3MTgyMzA5WjAYMRYwFAYD VQQDEw02YWEyZjU4ZC0zYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B7dfolw9gwT+/mvXPR5u3pj0hkLCj9ABkjOxILqBgo5fyLk8kzDstjN5j/Q 6kK2QPj4UCNlUWzPqoxzZyWgnNTkoe1rCss1n4DRJl6OjWUmrXrjVlmWiJM3gfHr hWjeM03d0jg3iSr9j/3+zRZUKeTATYPpHYE2k4TuX+loZOoKkkXbJDktpiI2uYoI 8zT3nHbN9y+sACpFh+K586Ifbopt7c6H/fPxIyFfhMkAjanzpj0/DYW0YPBHRtke m+J+oT7edF6qSvhrqEH5M4poZ7hI32JW6fuKeg4dFWIkyp9a75MoQprgtuB7Lex+ JfOHCaCavEOLxQz7WKu+5Lw8aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGR/Crq S/omZIyga0s+H4Qhl+wQMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJyICtM72SyogR893tYHlqiXNJma85ImnkT00tf8z2wk7jYVT8CwGVB4EUhkW khEWZYZgUPbnYud0EZoMisGVg7WmOFXVHW27lCmS4p8uFyNQH8cvjrHG0UYEh64R +lzk0OEUOYkrAlqL+dWx95PlL5CsP5vLkX/k1dYyKTHTM6SR409X1sRLnFKw5TAX uAPw3/ybTPvTzA7BH/3CpQSEC1cSDHAhu5z4we2lrQy7Q0L87FBgK9b+1tp4Voni yeL7F9VAbnuTWaLoWeYhYnelPpfIOKnCcPsdtRN56I9mdXKSnWjRczmLCOPs2Rkb F4xRV9UNKA/g+7s5e93HZeQ8eQ== -----END CERTIFICATE-----Generated at Fri Sep 11 15:36:07 2026 by rpki-client