$ rpki-client -vvf rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft File: wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft (raw, json) Hash identifier: ++/Kq570KjYTj7NUz6cRwh4UiZOjgp4QDPEnIOOc+0E= Subject key identifier: 2E:FC:09:B0:A9:10:31:49:C7:1F:B4:F9:2D:C5:77:9D:AA:2D:01:1F Authority key identifier: C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 Certificate issuer: /CN=A912B85B/serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Certificate serial: 01AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft Manifest number: 01A7 Signing time: Fri 17 Apr 2026 03:49:32 +0000 Manifest this update: Fri 17 Apr 2026 03:49:31 +0000 Manifest next update: Fri 24 Apr 2026 03:49:31 +0000 Files and hashes: 1: wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl (hash: qujTIdyM8ftcgLF/f7sqL1ARowmKIDd/jvt1olrU7u0=) 2: 7DE2804AB4BC11EEA02E9A19C4F9AE02.roa (hash: m0EtsgnFteaZumXXNJzKKsBn+VRdGLka+E0ADygv+iA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 429 (0x1ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B85B, serialNumber=C275F7B8AECC2948D4B4BA999FA9C0E2AD54EA59 Validity Not Before: Apr 17 03:49:31 2026 GMT Not After : Apr 24 03:49:31 2026 GMT Subject: CN=69e1adcc-234c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:44:46:1f:73:d0:bf:90:95:73:bb:eb:9a: c5:56:67:79:fc:23:60:b9:ce:15:b9:ff:37:bc:ba: 39:a3:ee:cc:9a:1f:16:91:7e:bc:83:07:2d:a1:3a: a9:99:b4:0b:f0:06:ef:88:7a:34:3e:da:02:69:c7: 86:18:a5:6b:4a:9d:18:f6:49:94:55:ca:24:3f:38: 26:11:b8:51:53:c9:eb:27:17:67:4f:28:85:6f:fc: ed:65:25:00:9b:42:f7:72:ed:6b:db:95:fd:7b:5f: 22:96:ec:10:bb:2f:a3:cb:5f:02:69:e9:14:0b:d6: bc:09:8f:36:85:03:3d:52:e8:8a:76:b0:b1:98:71: 01:f5:93:52:cb:f6:de:35:cb:c5:3d:91:36:0b:b7: fb:2a:73:c0:9d:89:9a:f3:58:b9:69:8e:57:9d:7f: 88:d8:32:87:c3:ce:de:c8:ee:32:2a:2c:2d:5d:dd: 54:99:c5:5b:15:fa:b2:99:ae:b0:94:17:2c:8a:f9: ac:c8:f9:ed:f6:63:01:c3:d5:f7:ea:38:4c:61:54: 41:d6:c6:60:4e:ed:81:6c:9f:81:ba:51:96:f1:c9: 08:d1:3b:26:e5:40:6e:d4:04:fc:fa:b6:bb:ba:1c: 2d:5b:80:5f:e6:0c:7d:bd:a6:9d:2c:66:01:30:f1: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:FC:09:B0:A9:10:31:49:C7:1F:B4:F9:2D:C5:77:9D:AA:2D:01:1F X509v3 Authority Key Identifier: keyid:C2:75:F7:B8:AE:CC:29:48:D4:B4:BA:99:9F:A9:C0:E2:AD:54:EA:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wnX3uK7MKUjUtLqZn6nA4q1U6lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B85B/2047D746B4BC11EE8D03A518C4F9AE02/wnX3uK7MKUjUtLqZn6nA4q1U6lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:de:ef:89:6f:69:04:77:62:5c:ee:f5:8e:8a:d0:ba:76:63: 67:4b:2a:df:b7:09:2a:0e:2c:75:6a:01:4b:2c:90:9f:2b:13: 80:12:5f:c7:9a:cb:6c:fc:88:43:ee:31:35:ed:00:88:69:98: cc:39:b2:df:02:22:ad:e2:bc:f7:01:08:9c:5a:76:bb:c2:41: a4:52:ca:5d:5f:e0:c0:cb:db:f3:04:b5:ab:fe:d4:44:06:f9: a1:d6:88:b9:53:1a:95:ad:bf:46:41:b2:bf:c0:b6:8e:62:da: 01:f1:e9:7d:40:52:ee:9f:40:55:c8:37:08:db:3d:62:6b:54: c1:6f:73:f5:c7:29:ac:ea:56:e5:0f:e9:42:98:33:df:f9:75: d6:29:7e:7e:d3:40:c6:dc:4a:ab:b8:6f:57:5f:9c:ec:1c:52: 2e:57:34:2a:ed:00:d8:7c:5c:bf:f7:ce:8e:2f:aa:02:e7:d7: 03:ae:25:78:0f:2b:38:64:76:a4:bd:f5:fb:28:42:eb:df:3a: 06:6e:6e:92:0d:63:7e:50:49:54:d1:95:56:fd:f7:b0:d7:e6: 11:a1:27:e1:66:01:9b:dc:36:cd:bb:64:42:bd:e7:48:83:f3: c5:59:5c:d6:fb:a6:d4:b6:ec:17:28:ff:2f:d1:db:82:8e:6f: ee:d5:7b:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI4NUIxMTAvBgNVBAUTKEMyNzVGN0I4QUVDQzI5NDhENEI0QkE5OTlGQTlDMEUy QUQ1NEVBNTkwHhcNMjYwNDE3MDM0OTMxWhcNMjYwNDI0MDM0OTMxWjAYMRYwFAYD VQQDEw02OWUxYWRjYy0yMzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS1ERh9z0L+QlXO765rFVmd5/CNguc4Vuf83vLo5o+7Mmh8WkX68gwctoTqp mbQL8AbviHo0PtoCaceGGKVrSp0Y9kmUVcokPzgmEbhRU8nrJxdnTyiFb/ztZSUA m0L3cu1r25X9e18iluwQuy+jy18CaekUC9a8CY82hQM9UuiKdrCxmHEB9ZNSy/be NcvFPZE2C7f7KnPAnYma81i5aY5XnX+I2DKHw87eyO4yKiwtXd1UmcVbFfqyma6w lBcsivmsyPnt9mMBw9X36jhMYVRB1sZgTu2BbJ+BulGW8ckI0Tsm5UBu1AT8+ra7 uhwtW4Bf5gx9vaadLGYBMPFYzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC78CbCp EDFJxx+0+S3Fd52qLQEfMB8GA1UdIwQYMBaAFMJ197iuzClI1LS6mZ+pwOKtVOpZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjg1Qi8yMDQ3RDc0NkI0 QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtValV0THFabjZuQTRxMVU2 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3duWDN1SzdNS1VqVXRMcVpuNm5BNHExVTZsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjg1Qi8yMDQ3RDc0NkI0QkMxMUVFOEQwM0E1MThDNEY5QUUwMi93blgzdUs3TUtV alV0THFabjZuQTRxMVU2bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK97viW9pBHdiXO71jorQunZjZ0sq37cJKg4sdWoBSyyQnysTgBJfx5rLbPyI Q+4xNe0AiGmYzDmy3wIireK89wEInFp2u8JBpFLKXV/gwMvb8wS1q/7URAb5odaI uVMala2/RkGyv8C2jmLaAfHpfUBS7p9AVcg3CNs9YmtUwW9z9ccprOpW5Q/pQpgz 3/l11il+ftNAxtxKq7hvV1+c7BxSLlc0Ku0A2Hxcv/fOji+qAufXA64leA8rOGR2 pL31+yhC6986Bm5ukg1jflBJVNGVVv33sNfmEaEn4WYBm9w2zbtkQr3nSIPzxVlc 1vum1LbsFyj/L9Hbgo5v7tV7aw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:44:45 2026 by rpki-client