$ rpki-client -vvf rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft File: WdGXNa3cboCAl6x3G0a7N1vCMOg.mft (raw, json) Hash identifier: dqkl3p5CZtBlWH+Lr1dIVWijANNn3IMr1I6kzCh/FkM= Subject key identifier: 39:CB:4D:36:77:6C:A1:6A:60:2D:D7:C9:41:0E:65:8A:6E:1B:9D:62 Authority key identifier: 59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 Certificate issuer: /CN=A91422D7/serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Certificate serial: 035C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft Manifest number: 04E0 Signing time: Sun 01 Mar 2026 01:45:53 +0000 Manifest this update: Sun 01 Mar 2026 01:45:52 +0000 Manifest next update: Sun 08 Mar 2026 01:45:52 +0000 Files and hashes: 1: WdGXNa3cboCAl6x3G0a7N1vCMOg.crl (hash: L3dAdpgx5nRgnznWepD08C6BWpqUkXP1oCMtW19zfe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 860 (0x35c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91422D7, serialNumber=59D19735ADDC6E808097AC771B46BB375BC230E8 Validity Not Before: Mar 1 01:45:52 2026 GMT Not After : Mar 8 01:45:52 2026 GMT Subject: CN=69a39a51-7980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:ce:32:de:7d:56:c9:d9:ab:bd:f5:2d:ba: 5d:bd:da:72:db:da:5d:85:ee:05:39:19:7f:d5:ff: 53:24:ab:ed:a6:b6:c4:03:9c:ee:92:70:bc:0d:5c: 02:ac:d1:db:c9:a4:40:2d:cd:cc:f6:2d:c7:55:4b: a8:10:85:32:2e:5c:c1:6a:f0:fb:5a:70:35:5e:43: 4a:dc:bf:b5:4c:36:09:71:48:b5:1f:29:b5:74:77: e1:c7:2f:3f:28:3d:b8:ec:1a:b8:61:4a:ee:7c:19: 58:e1:db:38:15:84:14:a6:0e:10:17:7e:af:3d:cf: c3:a0:66:1f:f8:89:80:b6:6a:7b:d1:96:a6:9f:fd: 07:a0:d3:01:60:67:6c:1e:8f:ff:01:78:aa:a0:42: ef:46:45:2b:2f:ea:9f:05:bf:df:c8:ee:c6:95:b7: 21:c1:2a:71:b2:01:ea:94:35:88:67:5b:23:dd:d0: 9a:7a:bf:f0:58:ff:45:6d:87:af:da:c7:24:87:a7: a7:28:5b:5c:ca:76:e0:02:e1:3a:96:40:81:90:10: 16:33:4f:45:59:0f:cd:b2:da:7d:f4:4f:e2:67:cf: 6f:62:64:f4:ec:b4:75:41:6d:48:a9:13:ce:32:36: 3c:64:a1:b6:b7:bf:5d:23:b8:ec:aa:f7:e4:7b:9c: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:4D:36:77:6C:A1:6A:60:2D:D7:C9:41:0E:65:8A:6E:1B:9D:62 X509v3 Authority Key Identifier: keyid:59:D1:97:35:AD:DC:6E:80:80:97:AC:77:1B:46:BB:37:5B:C2:30:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WdGXNa3cboCAl6x3G0a7N1vCMOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91422D7/5B9F71D2ED3011ECBF07F012C4F9AE02/WdGXNa3cboCAl6x3G0a7N1vCMOg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:54:65:ef:96:99:2b:da:e5:35:6b:50:15:3f:00:ed:ab:44: 5d:a1:6d:c8:da:c3:fe:bc:b3:61:57:30:00:9c:cd:2f:e4:a3: 46:ca:7b:1a:a9:18:4e:0e:22:af:71:c7:4b:b5:76:0d:99:dd: c1:85:e6:bd:9b:31:ea:b6:05:5e:ff:a1:98:68:ed:0c:db:04: 3c:92:0a:b8:5a:e8:f6:f2:4a:bf:bc:c5:26:ed:cc:40:9d:a8: ba:a0:86:e3:56:47:09:ea:42:2c:bd:2a:2e:64:d5:ac:80:f2: 39:40:ae:62:87:3f:93:e7:3e:10:da:cd:48:f7:c0:61:1c:60: 10:26:1c:ef:4b:99:48:b3:39:81:e8:a0:d0:72:bf:63:c4:f8: 93:52:53:d5:e4:c5:b9:b1:9f:45:4a:37:aa:b9:9d:25:1a:e6: ca:b1:3f:51:ed:9e:cf:d7:b2:25:11:14:1b:64:a3:cd:fb:1d: a3:22:8d:bf:1e:2a:51:3c:10:68:6b:58:8f:28:8b:51:01:6c: 82:bd:05:e5:35:4d:e6:1d:70:2d:c6:ea:d0:c1:cc:16:dd:48: f4:b8:5b:76:8c:ba:95:28:b7:80:45:e0:ab:f2:f5:72:fa:2d: cd:6c:1d:c7:47:76:0e:7e:10:5f:c4:fe:36:12:a4:a3:5d:e8: 25:85:f5:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyRDcxMTAvBgNVBAUTKDU5RDE5NzM1QUREQzZFODA4MDk3QUM3NzFCNDZCQjM3 NUJDMjMwRTgwHhcNMjYwMzAxMDE0NTUyWhcNMjYwMzA4MDE0NTUyWjAYMRYwFAYD VQQDDA02OWEzOWE1MS03OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH/OMt59VsnZq731Lbpdvdpy29pdhe4FORl/1f9TJKvtprbEA5zuknC8DVwC rNHbyaRALc3M9i3HVUuoEIUyLlzBavD7WnA1XkNK3L+1TDYJcUi1Hym1dHfhxy8/ KD247Bq4YUrufBlY4ds4FYQUpg4QF36vPc/DoGYf+ImAtmp70Zamn/0HoNMBYGds Ho//AXiqoELvRkUrL+qfBb/fyO7GlbchwSpxsgHqlDWIZ1sj3dCaer/wWP9FbYev 2sckh6enKFtcynbgAuE6lkCBkBAWM09FWQ/Nstp99E/iZ89vYmT07LR1QW1IqRPO MjY8ZKG2t79dI7jsqvfke5wVmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDnLTTZ3 bKFqYC3XyUEOZYpuG51iMB8GA1UdIwQYMBaAFFnRlzWt3G6AgJesdxtGuzdbwjDo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjJENy81QjlGNzFEMkVE MzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2JvQ0FsNngzRzBhN04xdkNN T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dkR1hOYTNjYm9DQWw2eDNHMGE3TjF2Q01PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjJENy81QjlGNzFEMkVEMzAxMUVDQkYwN0YwMTJDNEY5QUUwMi9XZEdYTmEzY2Jv Q0FsNngzRzBhN04xdkNNT2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWVRl75aZK9rlNWtQFT8A7atEXaFtyNrD/ryzYVcwAJzNL+SjRsp7GqkYTg4i r3HHS7V2DZndwYXmvZsx6rYFXv+hmGjtDNsEPJIKuFro9vJKv7zFJu3MQJ2ouqCG 41ZHCepCLL0qLmTVrIDyOUCuYoc/k+c+ENrNSPfAYRxgECYc70uZSLM5geig0HK/ Y8T4k1JT1eTFubGfRUo3qrmdJRrmyrE/Ue2ez9eyJREUG2SjzfsdoyKNvx4qUTwQ aGtYjyiLUQFsgr0F5TVN5h1wLcbq0MHMFt1I9Lhbdoy6lSi3gEXgq/L1cvotzWwd x0d2Dn4QX8T+NhKko13oJYX1Vw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:27 2026 by rpki-client