$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft File: wKVDSTesKQBoKRal--4VQ84LCKc.mft (raw, json) Hash identifier: U/yqQKIc72qPgspUyQGjR/tScI4Tvj5lwOkbD6YCHoA= Subject key identifier: 8E:28:EE:A0:66:A9:33:71:45:02:33:5A:42:0E:CC:8B:23:6F:41:E2 Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 Certificate issuer: /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Certificate serial: 09EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft Manifest number: 09BF Signing time: Sun 26 Apr 2026 19:49:15 +0000 Manifest this update: Sun 26 Apr 2026 19:49:15 +0000 Manifest next update: Sun 03 May 2026 19:49:15 +0000 Files and hashes: 1: wKVDSTesKQBoKRal--4VQ84LCKc.crl (hash: KHQ6q6Yishgwm3SWiZCtLQrLKE4fhstQjWe7zSTXitc=) 2: 8BD44914C2AC11EAB23E1C3AC4F9AE02.roa (hash: 86fiv+ToJ8E+95Mhatj4DQQCxzIT6kPR/i0pwYtFn6s=) 3: 87A141747A5511EBA4258A7DC4F9AE02.roa (hash: RrvKz+k3BpE474LEsBiK8GJqBSWh6Od/xbLaF5t2LA4=) 4: FCA6CE3221DE11EBA27D251CC4F9AE02.roa (hash: lwb4D6wTQBfjbmXTI8Z//lyrBHKyL8sazKScgUSsnjE=) 5: FD55206821DE11EBA27D251CC4F9AE02.roa (hash: +q1/Z0Gbv09SPM+cE3PEwTTEu2R3d9XHswraJOVO5w8=) 6: 8B3FB092C2AC11EAB23E1C3AC4F9AE02.roa (hash: Fd1Tf/S90EhmoaFhI4h+ZhWQUJ40Q/83oW0JuW1LVTs=) 7: 6B641F14232411EB87A6CB0DC4F9AE02.roa (hash: aGGIYu/7r8bbBJz8mmriyFLWLYpIceyB24QlB1GUQUo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7 Validity Not Before: Apr 26 19:49:15 2026 GMT Not After : May 3 19:49:15 2026 GMT Subject: CN=69ee6c3b-202d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e7:5f:ef:3a:75:8f:8e:a8:36:7d:89:ed:47: 4e:0c:e2:1d:75:ba:3a:60:f7:ba:ee:8e:31:4a:ad: 2e:da:f8:a2:3f:e6:cc:67:49:fa:dc:26:02:6c:cb: 04:dc:36:68:99:3b:b8:f9:99:71:6b:89:33:25:c1: 90:65:52:e6:f8:79:e1:6f:20:c6:83:44:37:02:66: 18:7c:6a:71:cf:ef:d4:e1:b9:96:f6:af:ac:f8:41: 00:8d:24:24:7c:20:89:2d:b7:0d:d3:ca:33:db:af: b2:2f:6c:6c:3c:c0:74:44:a6:26:3b:4c:2f:8b:e5: 1c:b7:14:c0:d0:8c:5f:45:8d:4d:fa:dd:48:d6:e3: d7:a9:97:81:4d:80:5a:5c:e3:a1:83:c0:6d:92:2a: cf:1a:4a:6f:e7:5c:73:f9:44:71:c8:50:15:63:48: 13:15:26:4a:25:29:e6:9e:0d:ef:ab:8b:ef:42:b9: 4a:4e:a6:aa:b7:fc:a5:0f:7a:2b:01:ac:2d:7e:95: 2c:8d:42:60:11:0b:e4:c4:2a:8e:07:b5:1a:b3:60: 9a:9e:24:8d:2b:72:8f:39:7f:e8:e2:35:e7:d1:52: ff:37:6c:9a:58:0b:99:3a:4d:e9:54:8e:05:2a:68: 7f:e0:59:43:d8:86:d7:0b:31:2d:a2:51:62:2f:4e: ac:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:28:EE:A0:66:A9:33:71:45:02:33:5A:42:0E:CC:8B:23:6F:41:E2 X509v3 Authority Key Identifier: keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:fa:eb:5b:d0:94:fc:f1:20:56:53:31:bf:07:2c:1c:7e: 03:f3:77:aa:13:dc:26:0d:77:eb:34:3b:3a:b4:41:b6:e0:9f: 33:4b:ed:ae:83:d5:b3:68:bb:64:10:a9:a0:2f:01:89:f8:38: fb:a0:1e:58:b3:c0:4d:e5:1d:78:81:7c:7a:90:a7:9d:d5:17: 6d:81:7d:95:ef:7f:48:0d:f1:b8:da:4b:e8:07:40:21:80:ed: b4:43:62:99:d5:14:30:09:65:c2:36:26:9e:ce:b1:b3:da:41: 14:91:64:31:d7:a1:b4:49:d9:d6:ed:f2:e3:63:e6:64:88:8e: 1f:44:f5:17:d0:f4:2c:4d:8b:e6:f6:d3:2c:39:62:6d:1a:5d: 5f:2c:87:25:00:ac:d5:0b:50:c7:0c:3e:4f:84:7c:75:42:a2: 8f:cf:96:69:1f:cc:4b:b2:c2:ba:e7:ad:97:8d:47:f4:0f:04: dc:1f:ef:30:bd:1b:76:b8:a3:97:c3:f5:d6:49:54:90:fb:86: 83:d4:c8:33:a5:10:7b:90:02:4c:99:b3:40:68:6d:39:6a:0a: 95:c2:a4:8f:57:79:f9:7a:ea:ce:3c:f1:43:ee:37:af:21:40: 2e:26:ba:f6:1f:29:fd:86:37:33:45:b1:53:2c:76:ba:8f:87: 73:b6:66:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0MxMTAvBgNVBAUTKEMwQTU0MzQ5MzdBQzI5MDA2ODI5MTZBNUZCRUUxNTQz Q0UwQjA4QTcwHhcNMjYwNDI2MTk0OTE1WhcNMjYwNTAzMTk0OTE1WjAYMRYwFAYD VQQDEw02OWVlNmMzYi0yMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArudf7zp1j46oNn2J7UdODOIddbo6YPe67o4xSq0u2viiP+bMZ0n63CYCbMsE 3DZomTu4+Zlxa4kzJcGQZVLm+HnhbyDGg0Q3AmYYfGpxz+/U4bmW9q+s+EEAjSQk fCCJLbcN08oz26+yL2xsPMB0RKYmO0wvi+UctxTA0IxfRY1N+t1I1uPXqZeBTYBa XOOhg8BtkirPGkpv51xz+URxyFAVY0gTFSZKJSnmng3vq4vvQrlKTqaqt/ylD3or AawtfpUsjUJgEQvkxCqOB7Uas2CaniSNK3KPOX/o4jXn0VL/N2yaWAuZOk3pVI4F Kmh/4FlD2IbXCzEtolFiL06sfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI4o7qBm qTNxRQIzWkIOzIsjb0HiMB8GA1UdIwQYMBaAFMClQ0k3rCkAaCkWpfvuFUPOCwin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczQy9FRDA2OEJCOEE0 OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tRQm9LUmFsLS00VlE4NExD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLVkRTVGVzS1FCb0tSYWwtLTRWUTg0TENLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczQy9FRDA2OEJCOEE0OTExMUVBQjI1Nzk0MkRDNEY5QUUwMi93S1ZEU1Rlc0tR Qm9LUmFsLS00VlE4NExDS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHBT661vQlPzxIFZTMb8HLBx+A/N3qhPcJg136zQ7OrRBtuCfM0vtroPVs2i7 ZBCpoC8Bifg4+6AeWLPATeUdeIF8epCnndUXbYF9le9/SA3xuNpL6AdAIYDttENi mdUUMAllwjYmns6xs9pBFJFkMdehtEnZ1u3y42PmZIiOH0T1F9D0LE2L5vbTLDli bRpdXyyHJQCs1QtQxww+T4R8dUKij8+WaR/MS7LCuuetl41H9A8E3B/vML0bdrij l8P11klUkPuGg9TIM6UQe5ACTJmzQGhtOWoKlcKkj1d5+XrqzjzxQ+43ryFALia6 9h8p/YY3M0WxUyx2uo+Hc7ZmJg== -----END CERTIFICATE-----Generated at Mon Apr 27 09:16:30 2026 by rpki-client