$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft File: Wsl8kSmaL6nIztiqxnD_78e2mhs.mft (raw, json) Hash identifier: LoprszKfHBA9IGOeVkkKKpLqugK8zegwrx426mphG2k= Subject key identifier: B2:DC:E7:2B:8B:90:A3:92:3D:5B:1D:52:E8:72:11:C1:79:D5:81:1B Authority key identifier: 5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B Certificate issuer: /CN=A91F3260/serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft Manifest number: 072A Signing time: Mon 16 Mar 2026 21:22:24 +0000 Manifest this update: Mon 16 Mar 2026 21:22:23 +0000 Manifest next update: Mon 23 Mar 2026 21:22:23 +0000 Files and hashes: 1: Wsl8kSmaL6nIztiqxnD_78e2mhs.crl (hash: nXrtr9bMf0iPHoPiovKH8pG5rm/HC3AppSMvKamiQgk=) 2: C5058712A3B911EC9709462AC4F9AE02.roa (hash: TbGbT+LPow5rz8JGgfsHT1Q0vL5d/bm4eFUkOIio6DA=) 3: 8B75957671A811EB8698AD67C4F9AE02.roa (hash: 7rQsxODOe8S8wCpj2cJIytKVy/MVPp6W4O54/79yfuw=) 4: 36F318D0890A11EE9F4C014DC4F9AE02.roa (hash: cxuC5mt/lZwqNGffF4CA11kwoRK1UHDLlLVN+mB5XQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 21:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3260, serialNumber=5AC97C91299A2FA9C8CED8AAC670FFEFC7B69A1B Validity Not Before: Mar 16 21:22:23 2026 GMT Not After : Mar 23 21:22:23 2026 GMT Subject: CN=69b8748f-2ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:c2:76:42:97:28:5b:f6:8b:1b:6b:86:d7: 07:b8:db:80:e8:22:2b:14:53:47:0d:54:10:87:5d: f0:85:6f:b5:27:1d:97:73:2a:4e:a5:66:30:73:6b: e5:2f:31:33:e4:e7:cb:b2:34:9d:7d:8c:96:d7:ef: f6:20:cf:69:ea:f7:b6:91:23:a8:5c:e0:38:fa:b8: 6f:e1:75:5e:68:ee:98:bd:c5:3a:1d:a8:c6:d3:52: c1:f1:82:aa:f2:a9:09:08:b0:b2:1a:27:9b:a9:e5: ee:5b:1e:d1:f2:16:e7:0f:b4:99:72:92:60:4c:04: 36:e9:8f:c4:0b:37:09:76:95:c9:ef:32:89:dd:19: 41:a4:93:fc:84:76:b1:82:aa:51:b4:1a:0b:e0:4a: e7:ba:00:bd:5a:67:0b:f3:27:00:bd:1d:ea:de:b8: 04:b7:91:5e:a5:6c:f4:e0:2d:47:2c:a3:79:e6:dc: 7a:87:e5:50:d4:9a:f8:56:9b:69:d6:eb:bc:7d:55: 85:c9:83:5a:80:79:79:13:cd:10:e5:ca:d5:ae:cc: 21:8d:c9:9e:11:5d:30:f3:68:41:f2:9d:29:e6:6d: d7:09:97:10:46:08:53:2d:ca:87:c0:76:ef:2f:a7: 0d:68:50:ad:56:9b:c1:bd:cf:88:dc:76:43:72:c4: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DC:E7:2B:8B:90:A3:92:3D:5B:1D:52:E8:72:11:C1:79:D5:81:1B X509v3 Authority Key Identifier: keyid:5A:C9:7C:91:29:9A:2F:A9:C8:CE:D8:AA:C6:70:FF:EF:C7:B6:9A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wsl8kSmaL6nIztiqxnD_78e2mhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3260/D78D2AA271A611EB87450466C4F9AE02/Wsl8kSmaL6nIztiqxnD_78e2mhs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:cc:d1:a4:e5:23:51:89:e5:74:bb:15:47:58:ee:5e:bb:b6: 2c:02:be:92:8d:9d:33:b0:3b:af:93:20:d2:3d:b9:aa:2d:a2: 1e:ba:21:62:37:3e:8b:6e:44:16:5c:bc:26:1c:9e:73:91:10: e6:21:b9:43:20:ed:0e:50:c4:bd:c7:c8:93:7c:a1:16:28:35: c7:a0:0f:79:59:b1:92:6b:29:57:81:a7:d3:d8:ed:61:fb:d1: 1d:57:67:4e:96:ac:cd:42:89:0b:41:25:b3:ab:4d:c9:5d:2f: 7b:fa:4d:7e:3d:f9:b6:76:2a:0e:87:92:c5:b1:cc:f4:20:91: a4:47:16:3a:1a:b5:db:c4:d8:c6:36:f8:04:65:d4:1c:4b:97: a3:a2:d7:e0:ad:82:68:a1:87:ce:72:8b:45:75:0d:76:c6:d2: 3b:e2:63:11:93:3f:d0:b3:68:0c:59:b4:9b:d5:bd:e6:b7:e5: fa:18:b7:97:ac:ce:f1:7c:18:5d:5a:b7:65:3f:38:f0:65:2b: 65:10:48:d5:d0:a2:78:45:6e:79:5e:a1:5b:5f:fa:e8:19:a5: ba:55:c9:8d:ea:da:71:ec:15:0b:5e:73:55:6e:fc:17:ff:11: 2f:c7:f0:3e:a2:24:15:b7:29:65:d7:01:c7:35:33:48:27:a8: a4:71:b1:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMyNjAxMTAvBgNVBAUTKDVBQzk3QzkxMjk5QTJGQTlDOENFRDhBQUM2NzBGRkVG QzdCNjlBMUIwHhcNMjYwMzE2MjEyMjIzWhcNMjYwMzIzMjEyMjIzWjAYMRYwFAYD VQQDEw02OWI4NzQ4Zi0yZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxD/CdkKXKFv2ixtrhtcHuNuA6CIrFFNHDVQQh13whW+1Jx2XcypOpWYwc2vl LzEz5OfLsjSdfYyW1+/2IM9p6ve2kSOoXOA4+rhv4XVeaO6YvcU6HajG01LB8YKq 8qkJCLCyGiebqeXuWx7R8hbnD7SZcpJgTAQ26Y/ECzcJdpXJ7zKJ3RlBpJP8hHax gqpRtBoL4ErnugC9WmcL8ycAvR3q3rgEt5FepWz04C1HLKN55tx6h+VQ1Jr4Vptp 1uu8fVWFyYNagHl5E80Q5crVrswhjcmeEV0w82hB8p0p5m3XCZcQRghTLcqHwHbv L6cNaFCtVpvBvc+I3HZDcsRAEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLLc5yuL kKOSPVsdUuhyEcF51YEbMB8GA1UdIwQYMBaAFFrJfJEpmi+pyM7YqsZw/+/Htpob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzI2MC9ENzhEMkFBMjcx QTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2bkl6dGlxeG5EXzc4ZTJt aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzbDhrU21hTDZuSXp0aXF4bkRfNzhlMm1ocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzI2MC9ENzhEMkFBMjcxQTYxMUVCODc0NTA0NjZDNEY5QUUwMi9Xc2w4a1NtYUw2 bkl6dGlxeG5EXzc4ZTJtaHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN8zRpOUjUYnldLsVR1juXru2LAK+ko2dM7A7r5Mg0j25qi2iHrohYjc+i25E Fly8Jhyec5EQ5iG5QyDtDlDEvcfIk3yhFig1x6APeVmxkmspV4Gn09jtYfvRHVdn TpaszUKJC0Els6tNyV0ve/pNfj35tnYqDoeSxbHM9CCRpEcWOhq128TYxjb4BGXU HEuXo6LX4K2CaKGHznKLRXUNdsbSO+JjEZM/0LNoDFm0m9W95rfl+hi3l6zO8XwY XVq3ZT848GUrZRBI1dCieEVueV6hW1/66BmlulXJjeracewVC15zVW78F/8RL8fw PqIkFbcpZdcBxzUzSCeopHGxww== -----END CERTIFICATE-----Generated at Tue Mar 17 14:48:28 2026 by rpki-client