$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft File: WKqOb2Cb9VgUA20moSpeKyUViTo.mft (raw, json) Hash identifier: xtjdHuP3kQQwaI/7zQanOaFC+GVDJ9Z0CFB599Uh0BU= Subject key identifier: 94:53:47:01:CA:07:7E:80:A1:94:4C:74:B9:C4:87:A4:40:5B:48:58 Authority key identifier: 58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A Certificate issuer: /CN=A914EBB2/serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft Manifest number: 8D Signing time: Mon 21 Sep 2026 04:08:03 +0000 Manifest this update: Mon 21 Sep 2026 04:08:03 +0000 Manifest next update: Mon 28 Sep 2026 04:08:03 +0000 Files and hashes: 1: WKqOb2Cb9VgUA20moSpeKyUViTo.crl (hash: R4Crs/YbNVsu6Yaw+HKtKJpL/CgASiie0uzlghXmhpE=) 2: 651B78142DD711F187F45729B3833773.roa (hash: orGvvH8EtrQFqpfDS8Xvz4vEWTgyCI2f9BcO9d6cJBw=) 3: D23FC546011111F1B3598E67446F56BC.roa (hash: vcrWn/T7PWva5wilhUJF83D5sEdB2Zxd5D/0CZVE3OU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 04:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EBB2, serialNumber=58AA8E6F609BF55814036D26A12A5E2B2515893A Validity Not Before: Sep 21 04:08:03 2026 GMT Not After : Sep 28 04:08:03 2026 GMT Subject: CN=6ab0ada3-c1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:2c:e4:de:4c:8c:bb:72:21:01:d1:72:cd: f4:43:4f:1f:ff:d1:aa:d9:17:96:fd:83:73:1f:a2: 06:64:1d:b0:6e:44:14:b8:19:78:51:c2:d0:6a:26: dd:9e:e9:4b:42:d6:b4:cc:5a:7c:11:b2:cf:43:50: d4:cc:47:39:a2:45:fc:83:11:3d:78:d3:ce:30:d0: dc:c3:b6:ed:71:00:35:fb:bf:0c:5f:44:0f:26:34: 5d:82:74:7a:a6:dc:bb:8e:72:57:6c:ea:97:45:45: c2:a4:49:4c:f8:63:c9:75:46:6e:9e:c7:0d:51:a9: 7b:6f:04:09:55:ea:0d:0d:0b:8b:c0:08:53:13:d5: 52:70:e2:2c:81:b2:2c:bd:62:73:b0:b1:91:c8:d6: b0:0b:58:d4:eb:22:f6:36:78:14:29:a4:8a:4c:6d: bc:00:8d:9f:9e:cf:89:5e:81:7d:33:cd:50:f5:c1: c9:3b:69:24:92:fc:a5:2b:03:b8:3a:3d:f3:e2:40: 02:b1:43:44:0b:24:c7:60:1b:d2:49:60:fa:0d:7e: 05:cc:97:78:d4:a8:2d:84:77:64:38:a2:1b:21:1e: 59:15:53:9f:3b:18:71:61:fb:79:68:d9:80:56:1d: 92:c3:c8:e9:37:3a:aa:00:47:f0:ab:7c:2e:7b:41: f6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:53:47:01:CA:07:7E:80:A1:94:4C:74:B9:C4:87:A4:40:5B:48:58 X509v3 Authority Key Identifier: keyid:58:AA:8E:6F:60:9B:F5:58:14:03:6D:26:A1:2A:5E:2B:25:15:89:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKqOb2Cb9VgUA20moSpeKyUViTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EBB2/F091F070ED0F11F0A8103404A1EE528E/WKqOb2Cb9VgUA20moSpeKyUViTo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:c6:23:0f:3c:cf:3c:04:96:02:dd:5d:4f:e2:a4:30:8f: 70:6b:68:bf:e2:d4:7e:23:1f:23:9f:39:2e:ae:11:b4:a6:1e: b5:ed:93:61:b2:84:e0:e1:72:41:b1:4f:de:e5:15:9a:8a:bf: af:2f:3b:7f:10:1e:3b:b3:96:ff:36:66:c4:d4:d0:3c:03:07: fb:7a:9b:e6:12:4c:52:8a:84:44:7c:f2:50:3e:0b:ea:17:82: 7e:58:0b:ae:fd:d3:1a:66:e1:9a:a6:90:7b:c0:96:86:6d:3c: 3b:bd:f8:33:07:c7:66:52:c1:ff:5a:f2:7d:ed:f4:62:5f:3f: f0:cf:0c:e6:b4:f5:65:04:ca:0c:fe:8c:e9:8b:26:a2:88:69: 31:42:fd:b4:17:87:bc:83:fb:06:3c:4c:1e:8f:fa:f9:1f:c5: 1a:77:86:f4:ab:b0:0e:c2:10:47:a4:a0:5d:f0:f0:91:2d:0b: 8a:6b:71:48:78:14:a9:4d:3b:db:5c:32:85:b2:0b:e9:77:53: 81:dc:ef:79:e3:cf:a8:38:39:14:61:f0:2b:5f:17:55:f2:cb: 30:ef:0c:3d:d8:64:23:ca:35:aa:a7:b1:ce:24:93:01:f7:fa: 8b:52:36:c9:95:88:d5:6f:af:1d:fe:ad:e9:95:36:35:2f:a5: 72:95:89:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCQjIxMTAvBgNVBAUTKDU4QUE4RTZGNjA5QkY1NTgxNDAzNkQyNkExMkE1RTJC MjUxNTg5M0EwHhcNMjYwOTIxMDQwODAzWhcNMjYwOTI4MDQwODAzWjAYMRYwFAYD VQQDEw02YWIwYWRhMy1jMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlMs5N5MjLtyIQHRcs30Q08f/9Gq2ReW/YNzH6IGZB2wbkQUuBl4UcLQaibd nulLQta0zFp8EbLPQ1DUzEc5okX8gxE9eNPOMNDcw7btcQA1+78MX0QPJjRdgnR6 pty7jnJXbOqXRUXCpElM+GPJdUZunscNUal7bwQJVeoNDQuLwAhTE9VScOIsgbIs vWJzsLGRyNawC1jU6yL2NngUKaSKTG28AI2fns+JXoF9M81Q9cHJO2kkkvylKwO4 Oj3z4kACsUNECyTHYBvSSWD6DX4FzJd41KgthHdkOKIbIR5ZFVOfOxhxYft5aNmA Vh2Sw8jpNzqqAEfwq3wue0H2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRTRwHK B36AoZRMdLnEh6RAW0hYMB8GA1UdIwQYMBaAFFiqjm9gm/VYFANtJqEqXislFYk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUJCMi9GMDkxRjA3MEVE MEYxMUYwQTgxMDM0MDRBMUVFNTI4RS9XS3FPYjJDYjlWZ1VBMjBtb1NwZUt5VVZp VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dLcU9iMkNiOVZnVUEyMG1vU3BlS3lVVmlUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUJCMi9GMDkxRjA3MEVEMEYxMUYwQTgxMDM0MDRBMUVFNTI4RS9XS3FPYjJDYjlW Z1VBMjBtb1NwZUt5VVZpVG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUo/GIw88zzwElgLdXU/ipDCPcGtov+LUfiMfI585Lq4RtKYete2TYbKE4OFy QbFP3uUVmoq/ry87fxAeO7OW/zZmxNTQPAMH+3qb5hJMUoqERHzyUD4L6heCflgL rv3TGmbhmqaQe8CWhm08O734MwfHZlLB/1ryfe30Yl8/8M8M5rT1ZQTKDP6M6Ysm oohpMUL9tBeHvIP7BjxMHo/6+R/FGneG9KuwDsIQR6SgXfDwkS0LimtxSHgUqU07 21wyhbIL6XdTgdzveePPqDg5FGHwK18XVfLLMO8MPdhkI8o1qqexziSTAff6i1I2 yZWI1W+vHf6t6ZU2NS+lcpWJuA== -----END CERTIFICATE-----Generated at Tue Sep 22 11:21:01 2026 by rpki-client