$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: Jb2/q3KTzQ+YKioSaTSncralU0+OiwAJfBzJbPaKlGo= Subject key identifier: B4:24:83:05:A3:C9:53:22:BB:AC:B6:68:A0:C2:FA:A3:C0:65:6A:8C Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 0375 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 0513 Signing time: Fri 17 Apr 2026 00:44:59 +0000 Manifest this update: Fri 17 Apr 2026 00:44:59 +0000 Manifest next update: Fri 24 Apr 2026 00:44:59 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: guQRPODa3yKHWGubbHBGlXoV5EPawTtXKmP4M9BsDgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 885 (0x375) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Apr 17 00:44:59 2026 GMT Not After : Apr 24 00:44:59 2026 GMT Subject: CN=69e1828b-e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:a7:26:10:3d:6d:b0:14:19:2e:7d:51:87: ea:a0:c7:62:a4:0b:5c:a7:0e:39:e8:0e:83:7a:09: 79:a0:cc:c6:d3:ad:9b:2e:f8:5f:6e:f7:bb:45:a1: e5:ef:f8:b1:7d:00:38:38:ed:14:6b:78:a3:a2:9c: b1:81:87:e8:2f:66:d9:46:31:8a:1a:ce:b3:a3:2c: 2a:f9:ac:76:29:11:7d:a1:ee:7f:69:a2:b6:f3:a4: 1b:f8:54:39:06:94:bd:94:77:b8:3f:c1:de:4b:ff: 81:bc:33:09:6a:58:51:f3:a9:e7:f2:61:3b:7c:05: ec:e6:77:3c:04:7a:44:73:fa:68:fa:f6:36:59:2c: a1:97:07:67:58:25:8a:af:ee:8f:9e:11:8c:76:e7: 6e:7a:d6:0c:60:d1:29:91:24:92:de:ba:55:33:9d: 32:a6:12:b5:ed:da:21:7d:eb:4c:17:82:1e:97:59: 09:c8:c7:d7:a2:4d:68:79:40:4c:ab:ea:01:f8:69: 1a:99:66:00:45:3c:13:42:cc:69:51:d5:36:6a:20: 13:28:ab:60:86:36:74:0a:73:c1:f6:cd:de:31:cd: 61:11:dd:ef:55:8e:49:df:62:0f:89:aa:1c:68:bd: f5:ff:26:9a:4e:f6:87:85:4a:7f:48:cd:f4:b4:ce: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:83:05:A3:C9:53:22:BB:AC:B6:68:A0:C2:FA:A3:C0:65:6A:8C X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:9c:e7:0a:2e:5f:88:8d:2d:a0:b1:3c:de:65:89:0a:8d:d5: 80:e6:2a:3c:18:0b:58:93:82:25:0f:88:dc:ea:60:3c:a6:1e: 71:91:48:7f:06:c6:b1:87:ad:9f:c3:b8:5a:dd:a4:7f:ce:54: 44:29:24:8a:46:39:4c:b4:44:13:f2:74:9c:da:81:a3:13:97: 50:f1:0a:42:3a:4a:41:00:e7:1b:f5:bc:82:31:14:64:c9:38: 87:6e:22:fb:93:7f:71:55:86:c6:07:a9:d9:0a:cc:1d:cb:c0: 54:ba:6d:4f:ff:6c:24:22:f8:f6:b1:10:05:0d:b4:03:5e:ee: 05:cf:ca:28:50:13:d0:e6:91:9a:8e:5c:80:75:bd:cc:be:8c: e3:a0:b6:a6:50:b7:d0:dc:bd:97:3c:b1:5a:14:fa:5a:f7:24: cb:96:ab:ea:cb:ee:13:41:6a:93:7d:35:5e:3d:26:af:85:99: 26:ce:b6:71:b3:02:12:22:f8:2f:37:1b:f6:e0:fd:b2:4d:9b: bd:e4:78:62:32:16:18:b1:2a:a5:e2:83:1e:76:26:e2:cc:12: 25:68:ae:c5:10:00:a3:d7:15:0a:37:11:45:63:8c:5a:0a:90: 6d:8e:0d:97:68:75:b8:37:bd:c5:0d:e1:db:7e:47:e7:72:72: f6:8f:2f:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjYwNDE3MDA0NDU5WhcNMjYwNDI0MDA0NDU5WjAYMRYwFAYD VQQDEw02OWUxODI4Yi1lNDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpinJhA9bbAUGS59UYfqoMdipAtcpw456A6Degl5oMzG062bLvhfbve7RaHl 7/ixfQA4OO0Ua3ijopyxgYfoL2bZRjGKGs6zoywq+ax2KRF9oe5/aaK286Qb+FQ5 BpS9lHe4P8HeS/+BvDMJalhR86nn8mE7fAXs5nc8BHpEc/po+vY2WSyhlwdnWCWK r+6PnhGMduduetYMYNEpkSSS3rpVM50yphK17dohfetMF4Iel1kJyMfXok1oeUBM q+oB+GkamWYARTwTQsxpUdU2aiATKKtghjZ0CnPB9s3eMc1hEd3vVY5J32IPiaoc aL31/yaaTvaHhUp/SM30tM6o7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQkgwWj yVMiu6y2aKDC+qPAZWqMMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuZznCi5fiI0toLE83mWJCo3VgOYqPBgLWJOCJQ+I3OpgPKYecZFIfwbGsYet n8O4Wt2kf85URCkkikY5TLREE/J0nNqBoxOXUPEKQjpKQQDnG/W8gjEUZMk4h24i +5N/cVWGxgep2QrMHcvAVLptT/9sJCL49rEQBQ20A17uBc/KKFAT0OaRmo5cgHW9 zL6M46C2plC30Ny9lzyxWhT6Wvcky5ar6svuE0Fqk301Xj0mr4WZJs62cbMCEiL4 Lzcb9uD9sk2bveR4YjIWGLEqpeKDHnYm4swSJWiuxRAAo9cVCjcRRWOMWgqQbY4N l2h1uDe9xQ3h235H53Jy9o8vMw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:24 2026 by rpki-client