$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: zlPkswIuYvBuAEz2FY0u5dlTLBQMYhOMv7yxe9qUKhQ= Subject key identifier: AA:48:5A:41:CF:C1:DA:15:6E:F7:02:8C:87:02:D9:12:43:AC:A2:AE Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 06A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 068F Signing time: Sun 20 Sep 2026 22:22:25 +0000 Manifest this update: Sun 20 Sep 2026 22:22:25 +0000 Manifest next update: Sun 27 Sep 2026 22:22:25 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: ajYEyHz4DU+Qef1750t4ghdxUix+EOu7ClfgXbzJ968=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: 8jTO1g3DnI3Mc9HbbuIXEWUONxgdq2EyXq0caoNDXcA=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: AVEGvtOF0iwaeq96YQ9QUqPUhESEUdl2ZAme82upoYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 22:22:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1699 (0x6a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Sep 20 22:22:25 2026 GMT Not After : Sep 27 22:22:25 2026 GMT Subject: CN=6ab05ca1-bcc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8f:19:f9:59:85:a6:50:c5:70:b1:3e:46:fc: 16:33:7c:4d:4f:ea:f2:ac:f9:da:62:e0:64:f9:0c: 82:17:28:73:70:c9:73:a0:82:76:f2:cd:f1:fd:16: a1:8e:cf:24:84:bd:17:e5:53:7c:a2:07:35:39:ba: 65:20:7a:cc:8a:f6:25:74:43:1f:df:7e:b0:13:fa: f8:fa:a2:3e:b7:ab:69:60:7b:f2:74:d8:2e:ab:2f: 33:33:1a:03:8d:6e:75:cf:c3:2c:4a:db:09:d8:1f: ba:19:fe:0e:1a:57:c9:56:63:5e:45:3e:75:8b:22: dc:78:a1:75:ea:37:bb:66:a0:6d:56:98:8e:80:3a: 23:23:24:0f:95:02:ea:46:5b:ae:31:7e:02:5b:db: d3:55:38:26:0b:a5:7e:b3:8b:ce:18:3c:c8:94:82: 94:d8:3e:04:e5:cc:92:1b:df:02:7d:03:63:6e:6b: fa:b0:0d:7d:f4:ec:30:dd:07:61:f0:98:b4:91:cb: b7:50:18:7f:79:3c:19:bb:7f:5e:c5:7f:be:eb:1f: 60:79:0b:50:e4:c6:95:7d:94:66:db:2e:90:cf:26: 83:f8:6a:78:02:21:82:7a:01:48:6a:3a:9f:d6:b8: b9:ff:87:29:10:4b:00:ce:69:13:ed:80:e6:cf:18: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:48:5A:41:CF:C1:DA:15:6E:F7:02:8C:87:02:D9:12:43:AC:A2:AE X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a7:93:1d:99:cb:f4:76:44:87:c6:de:4b:2d:43:84:df:18: 01:0b:07:d4:7f:a0:31:36:b9:06:cc:c7:f1:53:8f:3a:f7:5b: be:5e:37:86:fa:60:84:33:9a:33:1f:28:13:50:b7:b0:cf:ac: fd:ea:8f:af:3e:6c:16:11:8d:58:a9:c9:69:bf:07:b3:91:e9: 4d:6e:1a:45:c3:b2:32:6b:d0:e6:95:a9:6b:60:42:69:a2:0a: 46:84:0b:13:b3:af:7e:c8:1c:aa:42:90:e2:f9:88:fb:b7:2b: 89:ab:54:05:24:6e:37:ac:1e:a2:d4:2b:8d:5b:45:ab:13:74: 0a:90:99:ef:58:c4:c5:06:70:4f:00:89:3a:3f:25:4d:53:ef: 01:ba:0a:fa:98:34:77:8d:cc:a8:f7:e9:66:b0:91:f8:2b:ec: e4:a0:3b:e2:cc:68:a4:f2:38:60:75:34:f1:b1:26:07:33:c3: a6:62:77:c4:b8:4a:6d:d9:8e:77:21:fd:85:e7:72:3e:a6:5a: 1a:e1:14:b0:7f:a4:54:a8:ff:f8:e0:a5:7c:93:31:fc:c7:d0: 48:29:04:03:d7:52:d2:17:e7:74:6b:25:75:2f:cc:28:c2:99: e1:5c:02:ec:56:28:c8:fd:b8:99:07:f2:85:d3:fa:68:95:2b: 06:75:52:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjYwOTIwMjIyMjI1WhcNMjYwOTI3MjIyMjI1WjAYMRYwFAYD VQQDEw02YWIwNWNhMS1iY2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI8Z+VmFplDFcLE+RvwWM3xNT+ryrPnaYuBk+QyCFyhzcMlzoIJ28s3x/Rah js8khL0X5VN8ogc1ObplIHrMivYldEMf336wE/r4+qI+t6tpYHvydNguqy8zMxoD jW51z8MsStsJ2B+6Gf4OGlfJVmNeRT51iyLceKF16je7ZqBtVpiOgDojIyQPlQLq RluuMX4CW9vTVTgmC6V+s4vOGDzIlIKU2D4E5cySG98CfQNjbmv6sA199Oww3Qdh 8Ji0kcu3UBh/eTwZu39exX++6x9geQtQ5MaVfZRm2y6QzyaD+Gp4AiGCegFIajqf 1ri5/4cpEEsAzmkT7YDmzxh3VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpIWkHP wdoVbvcCjIcC2RJDrKKuMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArqeTHZnL9HZEh8beSy1DhN8YAQsH1H+gMTa5BszH8VOPOvdbvl43hvpghDOa Mx8oE1C3sM+s/eqPrz5sFhGNWKnJab8Hs5HpTW4aRcOyMmvQ5pWpa2BCaaIKRoQL E7OvfsgcqkKQ4vmI+7criatUBSRuN6weotQrjVtFqxN0CpCZ71jExQZwTwCJOj8l TVPvAboK+pg0d43MqPfpZrCR+Cvs5KA74sxopPI4YHU08bEmBzPDpmJ3xLhKbdmO dyH9hedyPqZaGuEUsH+kVKj/+OClfJMx/MfQSCkEA9dS0hfndGsldS/MKMKZ4VwC 7FYoyP24mQfyhdP6aJUrBnVShA== -----END CERTIFICATE-----Generated at Tue Sep 22 16:05:08 2026 by rpki-client