$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: G/VTDdM1lzwlrhN5boyvRSkA3CO+O12e4rsdOgMopvw= Subject key identifier: E4:5E:A2:30:D1:C1:4D:1B:CD:B9:32:D8:AC:19:48:16:8C:02:01:8B Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 069A Signing time: Sun 26 Jul 2026 23:18:03 +0000 Manifest this update: Sun 26 Jul 2026 23:18:02 +0000 Manifest next update: Sun 02 Aug 2026 23:18:02 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 9LunyXX93heOyAtsAqkEHQrTTr6P5B4Fh8T3xf7t+IM=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Jul 26 23:18:02 2026 GMT Not After : Aug 2 23:18:02 2026 GMT Subject: CN=6a6695ab-3b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:e3:47:76:86:04:44:f1:98:4a:cd:7f:79: 1e:fa:3f:5e:c6:36:7c:cd:2e:a1:ff:29:29:b0:0f: 7d:54:c2:d3:64:37:58:13:f6:5b:7f:c9:df:fd:e5: 7e:b1:16:2e:60:5e:19:a5:0f:41:fc:1b:86:61:20: a5:cf:d5:dc:1a:87:ab:c8:d1:38:aa:73:35:fc:8e: ad:2d:e4:d6:04:eb:78:e4:2f:c6:ba:90:0e:89:c3: cc:a2:4e:0a:e6:9e:ea:1c:f0:7d:78:49:63:cf:02: 31:5e:a3:4b:ab:30:99:90:53:fd:dd:54:f0:5f:10: fa:8c:81:84:4b:28:85:07:17:a7:ba:04:c9:d2:59: 54:64:c2:58:5d:91:f2:98:2b:a9:6f:0e:a4:3a:9c: db:aa:2c:61:11:b1:a4:94:52:03:64:7f:54:02:b9: cc:58:8e:0a:23:42:a1:cb:ef:b6:d6:f1:f2:5e:05: fa:b1:fb:a6:4f:de:85:65:9c:0b:cb:20:54:f6:c1: 11:03:ce:a4:29:84:93:70:0e:e6:4a:a0:af:f0:ca: f4:b2:7b:26:1f:94:b7:ff:dc:5c:ae:ae:56:dd:a0: 03:5d:f4:73:64:c7:82:df:9a:43:9a:28:a7:7f:58: ae:11:88:57:37:31:c0:fa:84:29:34:84:e2:d7:ca: 12:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:A2:30:D1:C1:4D:1B:CD:B9:32:D8:AC:19:48:16:8C:02:01:8B X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:2b:8d:51:e0:94:8d:b9:98:b1:b5:03:d9:3b:d0:9d:b9: 23:66:e5:fd:94:3a:9f:53:97:63:42:fd:35:e1:54:02:7f:d5: df:fe:c8:c7:98:f2:9c:a2:e2:1e:89:59:ab:a1:33:b4:a3:c3: b5:cc:08:a0:02:eb:3e:bc:68:fb:6d:15:e2:8f:80:c7:2b:99: a3:82:ea:98:4d:d3:b0:c3:f3:e1:89:07:9b:49:ae:0a:9c:78: 07:03:fd:a6:6e:4c:94:e6:8e:a9:2e:2e:60:4c:6b:d7:c7:35: dc:7c:73:cc:18:fb:38:6b:2d:6c:1d:81:e2:b7:97:5b:92:47: 5d:6c:b7:ac:65:10:d2:d9:4f:91:c6:24:3e:1c:8d:51:ac:8e: f5:ef:ce:97:23:48:69:c8:72:29:5f:68:79:7a:1d:81:6c:9e: b5:1a:f5:8b:26:e8:fb:6c:b7:e1:e0:38:eb:b0:18:d6:8b:0e: 35:63:f2:a3:c7:4a:27:ac:57:c9:76:17:96:8b:cd:1e:9f:e7: 8f:22:a8:e4:51:71:3d:73:24:f9:f4:74:4e:4d:f3:5a:e1:66: 1b:76:e5:da:ce:b1:98:97:32:c6:81:03:7d:08:5d:70:38:84: ae:af:09:a1:49:b8:ee:51:71:9e:8c:f8:48:00:bc:9c:f1:5c: 2f:2c:40:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwNzI2MjMxODAyWhcNMjYwODAyMjMxODAyWjAYMRYwFAYD VQQDEw02YTY2OTVhYi0zYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyDjR3aGBETxmErNf3ke+j9exjZ8zS6h/ykpsA99VMLTZDdYE/Zbf8nf/eV+ sRYuYF4ZpQ9B/BuGYSClz9XcGoeryNE4qnM1/I6tLeTWBOt45C/GupAOicPMok4K 5p7qHPB9eEljzwIxXqNLqzCZkFP93VTwXxD6jIGESyiFBxenugTJ0llUZMJYXZHy mCupbw6kOpzbqixhEbGklFIDZH9UArnMWI4KI0Khy++21vHyXgX6sfumT96FZZwL yyBU9sERA86kKYSTcA7mSqCv8Mr0snsmH5S3/9xcrq5W3aADXfRzZMeC35pDmiin f1iuEYhXNzHA+oQpNITi18oSPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOReojDR wU0bzbky2KwZSBaMAgGLMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXgErjVHglI25mLG1A9k70J25I2bl/ZQ6n1OXY0L9NeFUAn/V3/7Ix5jynKLi HolZq6EztKPDtcwIoALrPrxo+20V4o+AxyuZo4LqmE3TsMPz4YkHm0muCpx4BwP9 pm5MlOaOqS4uYExr18c13HxzzBj7OGstbB2B4reXW5JHXWy3rGUQ0tlPkcYkPhyN UayO9e/OlyNIachyKV9oeXodgWyetRr1iybo+2y34eA467AY1osONWPyo8dKJ6xX yXYXlovNHp/njyKo5FFxPXMk+fR0Tk3zWuFmG3bl2s6xmJcyxoEDfQhdcDiErq8J oUm47lFxnoz4SAC8nPFcLyxAag== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:04 2026 by rpki-client