$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: 2Y1RGErZFQCWBr+hx5MEYCBW2MeDJLcgCKM0hktI8kQ= Subject key identifier: C4:B5:CF:2B:E7:9D:FC:B0:89:7A:EB:B1:A4:69:81:FB:8D:B2:04:C4 Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 01C2 Signing time: Fri 17 Apr 2026 03:48:31 +0000 Manifest this update: Fri 17 Apr 2026 03:48:30 +0000 Manifest next update: Fri 24 Apr 2026 03:48:30 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: m5JmWn07WmFTVjUoQIKyAty9wwn2SClRNnLVksDD1Aw=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: ubJqUF2IGrFRV6LySQWZVQd1AO/BSkWfNqfrHnBZLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: Apr 17 03:48:30 2026 GMT Not After : Apr 24 03:48:30 2026 GMT Subject: CN=69e1ad8f-38cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:96:05:8a:83:a0:ed:58:41:68:0f:2c:a1: c7:f7:27:5a:68:e6:8b:9b:15:e2:ea:ba:a0:7a:de: fc:49:01:fc:d4:a2:2b:25:3d:05:c9:4d:f0:a5:90: a6:5f:f3:d4:9f:54:1f:31:9a:8f:64:c5:0f:82:d1: 3d:68:5d:cc:e7:58:3d:a8:c3:5d:6e:7a:51:c9:65: 2f:70:95:72:33:8a:36:97:83:af:22:9b:59:01:52: 32:83:f4:49:42:f1:e6:3c:ee:3b:af:91:e7:e6:65: a4:aa:cc:e7:6f:63:91:a8:d3:d6:db:00:2d:97:35: f3:20:b9:ba:40:87:7f:1d:19:df:e5:94:22:36:ae: 14:1d:83:8a:65:26:f4:45:88:cd:e6:dc:b4:97:c2: 2a:5f:f9:bf:b7:a3:57:4a:98:d3:8e:b0:f0:f7:ba: 44:a3:b6:74:91:30:42:ae:91:e5:43:03:ef:49:2e: 48:0f:ac:b7:40:a4:93:3e:6c:bd:68:be:b7:35:9d: 11:c5:ce:44:d5:1d:a7:3a:48:b3:77:3f:c9:66:25: 9e:0f:d2:4a:6c:25:df:1f:3c:29:a0:58:2b:88:f2: a8:04:24:88:e0:8c:f5:58:3d:d8:7f:46:ce:0b:c9: 61:db:94:bf:95:18:a8:d6:19:23:a6:24:d5:aa:b6: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B5:CF:2B:E7:9D:FC:B0:89:7A:EB:B1:A4:69:81:FB:8D:B2:04:C4 X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:ae:13:13:95:6f:7a:80:c9:1c:28:8f:a2:3d:af:e1:a7:2e: 54:61:8f:14:70:ac:c2:23:72:07:a9:88:35:37:e9:6d:fc:7f: f1:c6:f8:a1:4c:38:ef:89:b0:3a:14:37:ac:40:de:22:d0:ee: 91:67:3d:5b:21:1e:05:ac:60:2b:72:72:a6:52:e9:15:48:55: 9a:e1:7a:da:c1:17:ec:9b:00:8c:ff:be:75:91:e7:d6:4a:26: bf:fb:ff:e9:05:f4:b8:73:70:ee:49:86:24:c3:61:5d:35:06: 7d:a9:e5:87:8b:6c:fe:1d:bb:54:41:c4:e7:cf:18:e4:0d:b3: 37:63:21:00:d8:fc:f3:b1:c9:56:1e:fb:3e:00:a5:dc:3f:ea: 3c:92:57:ff:a6:63:7b:15:94:87:78:81:80:f4:65:0a:d8:9f: f4:5b:1c:25:28:cb:41:11:fa:f1:8d:fc:a5:77:ea:f9:af:d6: 3b:6c:72:e7:c0:a5:22:d5:f6:86:8f:c0:08:6e:31:a8:d4:41: 64:02:53:d1:12:33:6a:5e:e7:c2:c0:14:1b:ff:a7:30:a6:14: c2:90:cf:4b:2a:9a:bd:62:89:f0:8f:61:fe:1a:54:e8:f3:21: 8b:6f:41:66:5f:78:cb:1e:2d:03:4f:2d:ab:e3:9c:55:29:e6: b0:e6:34:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjYwNDE3MDM0ODMwWhcNMjYwNDI0MDM0ODMwWjAYMRYwFAYD VQQDEw02OWUxYWQ4Zi0zOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtk+WBYqDoO1YQWgPLKHH9ydaaOaLmxXi6rqget78SQH81KIrJT0FyU3wpZCm X/PUn1QfMZqPZMUPgtE9aF3M51g9qMNdbnpRyWUvcJVyM4o2l4OvIptZAVIyg/RJ QvHmPO47r5Hn5mWkqsznb2ORqNPW2wAtlzXzILm6QId/HRnf5ZQiNq4UHYOKZSb0 RYjN5ty0l8IqX/m/t6NXSpjTjrDw97pEo7Z0kTBCrpHlQwPvSS5ID6y3QKSTPmy9 aL63NZ0Rxc5E1R2nOkizdz/JZiWeD9JKbCXfHzwpoFgriPKoBCSI4Iz1WD3Yf0bO C8lh25S/lRio1hkjpiTVqrYfVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMS1zyvn nfywiXrrsaRpgfuNsgTEMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApK4TE5VveoDJHCiPoj2v4acuVGGPFHCswiNyB6mINTfpbfx/8cb4oUw474mw OhQ3rEDeItDukWc9WyEeBaxgK3JyplLpFUhVmuF62sEX7JsAjP++dZHn1komv/v/ 6QX0uHNw7kmGJMNhXTUGfanlh4ts/h27VEHE588Y5A2zN2MhANj887HJVh77PgCl 3D/qPJJX/6ZjexWUh3iBgPRlCtif9FscJSjLQRH68Y38pXfq+a/WO2xy58ClItX2 ho/ACG4xqNRBZAJT0RIzal7nwsAUG/+nMKYUwpDPSyqavWKJ8I9h/hpU6PMhi29B Zl94yx4tA08tq+OcVSnmsOY09Q== -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:54 2026 by rpki-client