$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft File: WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft (raw, json) Hash identifier: S7KM9DQqSMuq7sLyCuUuWJ0ezIWQ1yEmnZ4HdbZ+0eQ= Subject key identifier: 1A:12:5D:00:FF:57:43:B2:57:EB:F4:FD:AF:6E:2B:8E:0D:AE:E1:29 Authority key identifier: 58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 Certificate issuer: /CN=A91C7B15/serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft Manifest number: 02BB Signing time: Fri 04 Sep 2026 16:46:34 +0000 Manifest this update: Fri 04 Sep 2026 16:46:33 +0000 Manifest next update: Fri 11 Sep 2026 16:46:33 +0000 Files and hashes: 1: WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl (hash: tBMN20iC5k9gYslwcvQSPO0iqRHMzv2tSK3FCmnf5fs=) 2: 04594232DEA011EE91181415C4F9AE02.roa (hash: r0uDvba6DftUN0N3BUlL384UPeW2DqBJfJ5rm2wQtaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=580E466B7D4FA8649D2E0B27375EA286C6C54584 Validity Not Before: Sep 4 16:46:33 2026 GMT Not After : Sep 11 16:46:33 2026 GMT Subject: CN=6a9af5ea-23d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:79:7d:74:94:ea:f2:06:04:0b:42:30:64:58: 2b:93:13:0b:42:45:4b:80:b7:f9:c2:33:4b:97:be: 70:b3:12:02:39:7c:38:12:05:dc:1d:cc:a5:14:1c: 15:94:ef:a0:b5:50:a4:c2:fe:5d:fe:d8:31:f8:52: c8:d6:c1:e4:aa:3f:af:bf:3f:27:89:9b:67:7e:1c: c4:21:5b:47:c8:3a:81:e4:7f:72:38:d2:93:ff:67: 5c:4b:5c:8a:31:33:79:3c:fd:95:c0:59:17:03:4f: c8:29:35:f4:c1:b2:5c:0c:4a:96:08:6c:79:6e:13: 73:bb:8a:68:ad:5c:23:29:70:42:02:d4:7a:50:b2: 94:63:89:96:cb:1b:fc:5e:bf:eb:01:44:07:07:6f: 1e:f9:f4:bc:8a:0a:e0:f4:26:13:df:05:ff:0a:eb: 79:03:34:62:25:ad:93:20:76:26:73:07:cc:d3:02: 58:46:b9:e0:59:a2:5c:c0:98:61:a9:a1:83:ce:c2: 50:25:08:ad:31:c7:94:9b:3c:1d:10:2b:eb:68:83: 74:81:1b:bc:2e:c8:da:34:da:fb:5a:ea:d2:08:a9: 79:50:44:09:77:98:e7:36:ef:12:fd:c1:e3:bf:05: 21:05:49:dd:73:18:df:42:e3:4a:7a:1d:89:a9:76: ed:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:5D:00:FF:57:43:B2:57:EB:F4:FD:AF:6E:2B:8E:0D:AE:E1:29 X509v3 Authority Key Identifier: keyid:58:0E:46:6B:7D:4F:A8:64:9D:2E:0B:27:37:5E:A2:86:C6:C5:45:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/WA5Ga31PqGSdLgsnN16ihsbFRYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/326EB0B48DEB11ED93FAAD0FC4F9AE02/WA5Ga31PqGSdLgsnN16ihsbFRYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:59:0b:f5:e7:c8:4c:77:9d:2c:40:f5:2c:83:64:fd:ea:62: fa:15:8b:82:78:a7:b3:4f:bf:b7:19:8f:d3:07:23:c8:1b:1c: 4c:f6:b4:9c:48:52:d0:97:3f:fc:3b:11:32:7a:d5:f2:3f:da: e9:93:61:28:29:bb:c1:09:12:74:68:ac:f7:e7:5a:9a:ce:f3: 3c:95:c6:6d:8a:8f:00:af:3d:2e:1f:09:15:f6:cf:62:89:da: 94:94:dd:47:03:23:61:b5:1a:34:fe:cf:a7:76:a7:c1:32:53: 65:60:58:eb:63:54:a1:ae:37:ef:3d:dd:25:f0:92:7b:2f:3f: 7d:de:84:2f:eb:97:d6:dd:14:d2:70:4c:39:a5:ff:9d:36:8b: 30:76:cf:a6:4d:b9:d2:cd:0b:93:ef:a0:b6:57:e9:ce:7f:0b: 60:12:b8:14:88:2a:79:d7:6b:80:4d:fd:30:0c:1a:e2:1b:08: 5c:83:fc:a7:b8:39:87:5f:55:25:c7:7a:e6:7a:b4:b4:71:ce: 01:10:48:d3:c5:1b:ea:c6:62:3a:5b:79:b6:a0:0e:f6:03:f7: b3:e8:77:1c:4c:f0:89:05:4e:b4:d1:f7:ac:43:63:40:74:c4: 29:7a:9f:32:86:94:68:a9:5f:12:21:d0:67:44:0f:4f:47:f5: 13:e8:ef:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKDU4MEU0NjZCN0Q0RkE4NjQ5RDJFMEIyNzM3NUVBMjg2 QzZDNTQ1ODQwHhcNMjYwOTA0MTY0NjMzWhcNMjYwOTExMTY0NjMzWjAYMRYwFAYD VQQDEw02YTlhZjVlYS0yM2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Xl9dJTq8gYEC0IwZFgrkxMLQkVLgLf5wjNLl75wsxICOXw4EgXcHcylFBwV lO+gtVCkwv5d/tgx+FLI1sHkqj+vvz8niZtnfhzEIVtHyDqB5H9yONKT/2dcS1yK MTN5PP2VwFkXA0/IKTX0wbJcDEqWCGx5bhNzu4porVwjKXBCAtR6ULKUY4mWyxv8 Xr/rAUQHB28e+fS8igrg9CYT3wX/Cut5AzRiJa2TIHYmcwfM0wJYRrngWaJcwJhh qaGDzsJQJQitMceUmzwdECvraIN0gRu8LsjaNNr7WurSCKl5UEQJd5jnNu8S/cHj vwUhBUndcxjfQuNKeh2JqXbt8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoSXQD/ V0OyV+v0/a9uK44NruEpMB8GA1UdIwQYMBaAFFgORmt9T6hknS4LJzdeoobGxUWE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS8zMjZFQjBCNDhE RUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFHU2RMZ3NuTjE2aWhzYkZS WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1dBNUdhMzFQcUdTZExnc25OMTZpaHNiRlJZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS8zMjZFQjBCNDhERUIxMUVEOTNGQUFEMEZDNEY5QUUwMi9XQTVHYTMxUHFH U2RMZ3NuTjE2aWhzYkZSWVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZlkL9efITHedLED1LINk/epi+hWLgnins0+/txmP0wcjyBscTPa0nEhS0Jc/ /DsRMnrV8j/a6ZNhKCm7wQkSdGis9+dams7zPJXGbYqPAK89Lh8JFfbPYonalJTd RwMjYbUaNP7Pp3anwTJTZWBY62NUoa437z3dJfCSey8/fd6EL+uX1t0U0nBMOaX/ nTaLMHbPpk250s0Lk++gtlfpzn8LYBK4FIgqeddrgE39MAwa4hsIXIP8p7g5h19V Jcd65nq0tHHOARBI08Ub6sZiOlt5tqAO9gP3s+h3HEzwiQVOtNH3rENjQHTEKXqf MoaUaKlfEiHQZ0QPT0f1E+jv+w== -----END CERTIFICATE-----Generated at Sat Sep 5 00:32:07 2026 by rpki-client