$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: bgjtStc/qpRT6MXT3PlmFbb9TwKrL8ncsJwaa2HBCV0= Subject key identifier: 43:81:27:9A:A9:3F:36:7E:5A:41:D7:93:11:96:8C:2E:0B:BD:9E:08 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 06D3 Signing time: Sat 14 Nov 2026 22:08:50 +0000 Manifest this update: Sat 14 Nov 2026 22:08:50 +0000 Manifest next update: Sat 21 Nov 2026 22:08:50 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: l2WyBgfO2aEA1Z9XmASOgPw9AHK0VmhV0HRSElxNcG8=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 22:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1760 (0x6e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Nov 14 22:08:50 2026 GMT Not After : Nov 21 22:08:50 2026 GMT Subject: CN=6af8dbf2-15b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:83:09:ad:75:18:c8:5c:ce:8a:f1:08:df: e9:0a:9b:57:4d:43:e2:f6:f2:41:be:1e:50:b3:f7: 85:5b:39:68:fc:3e:68:51:85:d5:49:6f:04:eb:8a: 7c:ed:32:6b:bc:8d:ec:d2:67:80:6c:3a:3b:1c:a2: df:4c:be:ad:71:c0:ee:1e:f9:6e:ee:03:f0:b2:d3: 36:0e:a7:6d:b9:d2:1d:fc:8a:a7:f7:8f:93:4e:57: 70:66:77:8c:9e:7e:68:45:7b:f9:0e:0a:85:be:bd: 60:31:0c:48:de:65:21:47:ce:ef:57:49:d4:c0:a1: 44:85:eb:8b:60:bd:7c:2c:80:d8:b4:98:c3:c2:97: d6:0a:46:c9:df:08:9f:46:10:ad:28:64:15:e1:36: 27:96:d7:88:b4:6a:aa:f0:4a:8b:db:3a:c1:ed:6c: b2:57:5b:fc:94:98:61:e4:79:fb:5f:56:18:66:5d: f2:af:13:a2:89:c7:20:d3:98:40:27:b9:a5:b9:d2: 84:17:73:0a:39:fd:a4:a8:ed:3b:17:da:c9:be:bd: be:c1:32:ed:07:5b:c5:40:e9:54:85:8a:06:89:ba: 58:ab:dc:20:ce:45:1c:da:71:31:ba:99:f7:25:43: 8a:37:f6:c5:f6:68:65:92:e3:14:4d:9b:0f:96:57: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:81:27:9A:A9:3F:36:7E:5A:41:D7:93:11:96:8C:2E:0B:BD:9E:08 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:bb:53:c9:da:e1:82:5b:50:99:95:ba:d6:a4:60:be:6b:60: 79:19:98:32:6b:e8:ec:60:c1:68:04:b5:1d:87:25:d6:f2:a3: cf:d4:36:29:70:81:83:bb:27:e1:2d:0f:4a:58:c8:63:c7:68: 65:dc:2c:d4:b5:03:b3:54:dc:ff:e0:ce:cd:6a:8c:96:fc:97: 2d:9c:a4:a7:80:97:0c:76:08:67:9c:f0:16:04:7f:0e:9d:f7: b6:34:df:21:db:ba:3b:5f:9e:40:de:4a:dc:01:c4:fe:28:6a: f7:f7:f8:11:ac:0d:25:8c:e1:25:99:01:12:06:7f:b5:fd:9a: bc:db:c9:65:6c:3c:8a:f1:b5:16:46:55:86:7f:33:4c:b7:d7: d5:dc:0d:64:ac:a7:53:63:bc:9e:bd:0c:7d:e0:33:9a:08:83: a9:47:80:35:da:e4:dd:3a:d4:49:a8:95:c6:1f:90:b7:93:4f: 5c:32:46:89:88:fa:8e:39:93:2c:fd:07:ac:36:72:f9:35:89: 6a:ab:68:73:58:bc:5b:b7:7e:a0:dd:5a:cc:28:60:c4:5d:31: b2:8b:92:ac:81:f4:0c:75:6f:f1:82:6b:30:8b:8a:81:7b:39: 03:60:e0:19:42:3b:2a:53:08:e9:78:d1:7f:99:b8:a7:f4:bc: 46:14:9a:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYxMTE0MjIwODUwWhcNMjYxMTIxMjIwODUwWjAYMRYwFAYD VQQDEw02YWY4ZGJmMi0xNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzKDCa11GMhczorxCN/pCptXTUPi9vJBvh5Qs/eFWzlo/D5oUYXVSW8E64p8 7TJrvI3s0meAbDo7HKLfTL6tccDuHvlu7gPwstM2DqdtudId/Iqn94+TTldwZneM nn5oRXv5DgqFvr1gMQxI3mUhR87vV0nUwKFEheuLYL18LIDYtJjDwpfWCkbJ3wif RhCtKGQV4TYnlteItGqq8EqL2zrB7WyyV1v8lJhh5Hn7X1YYZl3yrxOiiccg05hA J7mludKEF3MKOf2kqO07F9rJvr2+wTLtB1vFQOlUhYoGibpYq9wgzkUc2nExupn3 JUOKN/bF9mhlkuMUTZsPlld/QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEOBJ5qp PzZ+WkHXkxGWjC4LvZ4IMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGbtTydrhgltQmZW61qRgvmtgeRmYMmvo7GDBaAS1HYcl1vKjz9Q2KXCBg7sn 4S0PSljIY8doZdws1LUDs1Tc/+DOzWqMlvyXLZykp4CXDHYIZ5zwFgR/Dp33tjTf Idu6O1+eQN5K3AHE/ihq9/f4EawNJYzhJZkBEgZ/tf2avNvJZWw8ivG1FkZVhn8z TLfX1dwNZKynU2O8nr0MfeAzmgiDqUeANdrk3TrUSaiVxh+Qt5NPXDJGiYj6jjmT LP0HrDZy+TWJaqtoc1i8W7d+oN1azChgxF0xsouSrIH0DHVv8YJrMIuKgXs5A2Dg GUI7KlMI6XjRf5m4p/S8RhSabA== -----END CERTIFICATE-----Generated at Sun Nov 15 21:01:52 2026 by rpki-client