$ rpki-client -vvvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: lsiLnQ3Q+j8kEcGD7h49MxDMq8GpsTO5fOH0ko7RHb8= Subject key identifier: 1C:2F:DF:F0:0E:6A:10:E4:A4:24:E5:EA:E4:69:D9:3A:99:E2:10:1B Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 05B3 Signing time: Mon 21 Sep 2026 00:22:41 +0000 Manifest this update: Mon 21 Sep 2026 00:22:41 +0000 Manifest next update: Mon 28 Sep 2026 00:22:41 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: qqy8sv48T9BGknM0X5iwV0pVlZ+8ITI8x5ChiAMlTe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Sep 21 00:22:41 2026 GMT Not After : Sep 28 00:22:41 2026 GMT Subject: CN=6ab078d1-612b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:dc:b2:cd:a3:75:a5:51:e6:6a:e3:29:e9:69: 82:55:d4:cd:5a:90:01:c0:8e:de:6c:a6:9f:c9:f4: 17:39:fc:57:af:f3:04:91:bf:9a:8e:9a:f8:2b:85: 2c:f9:0a:31:52:56:73:d6:1d:0b:5e:6a:b9:25:ff: 54:61:53:0b:b8:b8:85:0b:f8:04:35:4a:a9:e1:04: d5:ff:9e:bd:07:dc:9d:6b:85:a4:4c:44:4b:85:ce: 91:8a:ee:64:90:96:62:ef:42:a3:5f:ce:e9:b3:df: ba:10:16:2e:6e:08:07:90:98:9d:32:5c:92:96:a5: bc:eb:4f:b2:42:2b:c3:ea:54:e1:bc:c9:09:26:54: 15:50:b9:8e:11:84:7e:dc:bd:91:f8:0a:b9:e4:ea: 5c:c9:ce:12:e8:23:f5:3c:62:1b:91:73:e8:78:34: 04:26:74:86:28:91:48:32:1b:e6:ca:59:18:07:92: 64:93:4b:84:b4:d5:8b:0c:51:01:ea:a0:ca:5d:90: 0a:6d:d9:50:ba:60:e6:b9:34:3f:eb:fa:43:25:51: db:70:f0:74:c8:bc:6d:73:44:1b:a0:16:87:0e:37: c0:af:72:3a:64:04:8a:b8:ca:47:a9:bd:a1:0c:e1: f6:0b:91:58:5f:ef:f3:99:65:a5:ed:30:9b:8d:90: f7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:2F:DF:F0:0E:6A:10:E4:A4:24:E5:EA:E4:69:D9:3A:99:E2:10:1B X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:66:94:bd:61:4f:38:0a:38:33:83:89:a0:3c:61:27:db:0a: c5:48:1f:15:bb:78:3a:48:e9:71:90:f4:8f:b9:a7:e9:6f:6a: 28:2b:a4:ad:96:c7:b4:d3:e5:fe:f2:85:1e:5b:87:ec:ee:38: 55:e5:29:24:cc:db:17:ea:aa:06:46:20:8b:05:ea:6a:52:dc: df:ee:b2:6d:54:92:7a:c7:62:16:8a:57:b2:8a:e1:c1:23:ba: bf:c1:8e:af:d7:c0:b7:9f:3c:74:b8:c4:8a:9b:5e:df:2f:29: 3f:f4:18:e9:d9:b6:1b:f6:66:7c:da:f4:4f:68:d2:2f:da:e3: b0:9a:b6:b0:56:c4:86:d6:1e:cd:60:40:39:2d:03:96:c5:6c: a3:bc:50:fa:e4:c6:91:43:2d:63:7b:43:c6:ac:5f:32:e8:1d: 47:a6:1e:ad:a7:60:0d:6c:40:c9:6d:8e:2d:9e:3d:1b:c5:27: f5:bc:39:8a:17:c9:83:2b:a0:21:22:73:52:c9:52:44:24:88: 28:96:fe:67:ea:1d:72:fc:28:14:fd:f2:78:36:5c:9d:8a:cc: 9e:8d:83:fe:26:ee:88:a7:9b:ba:da:20:3b:e4:8c:ac:ff:09: 09:3b:4a:da:8a:74:52:16:c4:e0:8f:2c:5e:bc:7b:b9:7f:99: 46:56:14:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjYwOTIxMDAyMjQxWhcNMjYwOTI4MDAyMjQxWjAYMRYwFAYD VQQDEw02YWIwNzhkMS02MTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltyyzaN1pVHmauMp6WmCVdTNWpABwI7ebKafyfQXOfxXr/MEkb+ajpr4K4Us +QoxUlZz1h0LXmq5Jf9UYVMLuLiFC/gENUqp4QTV/569B9yda4WkTERLhc6Riu5k kJZi70KjX87ps9+6EBYubggHkJidMlySlqW860+yQivD6lThvMkJJlQVULmOEYR+ 3L2R+Aq55Opcyc4S6CP1PGIbkXPoeDQEJnSGKJFIMhvmylkYB5Jkk0uEtNWLDFEB 6qDKXZAKbdlQumDmuTQ/6/pDJVHbcPB0yLxtc0QboBaHDjfAr3I6ZASKuMpHqb2h DOH2C5FYX+/zmWWl7TCbjZD3hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBwv3/AO ahDkpCTl6uRp2TqZ4hAbMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF2aUvWFPOAo4M4OJoDxhJ9sKxUgfFbt4OkjpcZD0j7mn6W9qKCukrZbHtNPl /vKFHluH7O44VeUpJMzbF+qqBkYgiwXqalLc3+6ybVSSesdiFopXsorhwSO6v8GO r9fAt588dLjEipte3y8pP/QY6dm2G/ZmfNr0T2jSL9rjsJq2sFbEhtYezWBAOS0D lsVso7xQ+uTGkUMtY3tDxqxfMugdR6YeradgDWxAyW2OLZ49G8Un9bw5ihfJgyug ISJzUslSRCSIKJb+Z+odcvwoFP3yeDZcnYrMno2D/ibuiKebutogO+SMrP8JCTtK 2op0UhbE4I8sXrx7uX+ZRlYUoQ== -----END CERTIFICATE-----Generated at Tue Sep 22 09:22:52 2026 by rpki-client