$ rpki-client -vvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: ZoUXTf9wHdOZTlq8/XXLs9hMIKaEbHB2aWK2OnJqjic= Subject key identifier: D7:5E:E7:14:BC:6E:2A:72:A8:F5:A9:2F:F0:1A:C2:35:5F:58:B8:45 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0CA2 Signing time: Mon 02 Mar 2026 02:49:00 +0000 Manifest this update: Mon 02 Mar 2026 02:48:59 +0000 Manifest next update: Mon 09 Mar 2026 02:48:59 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: VicKAxfS4btAxbUdWZb3kTsTtyCR6nA9W4gHEKckzIw=) 2: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=) 3: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=) 4: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=) 5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=) 6: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=) 7: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Mar 2 02:48:59 2026 GMT Not After : Mar 9 02:48:59 2026 GMT Subject: CN=69a4fa9c-2f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:73:f8:45:7f:79:5f:f8:b3:a8:6f:29:8a:f4: 73:7b:f7:6b:e8:a3:98:7c:59:5c:b8:20:bd:de:b9: 36:e3:f2:ae:90:6c:65:9a:ee:d3:02:69:b9:60:2e: 1f:94:dc:f4:ff:3e:8e:d6:fc:75:b7:51:bd:99:eb: dd:37:b8:f1:af:31:4c:92:2f:4b:d6:c3:6c:73:ac: c0:7c:8c:b2:bd:cc:f2:d9:1c:ea:94:6f:44:49:86: a7:b3:98:49:96:c0:e8:d2:38:a5:96:43:07:40:15: 82:95:49:c5:1f:f4:ed:f5:87:6e:27:00:b0:a3:6d: a1:c6:48:8c:a5:a5:0a:b8:11:16:3d:67:98:2c:b3: 80:07:15:1b:90:df:fd:e6:86:3b:b2:ef:17:12:84: 66:08:4a:51:32:be:f8:e1:21:8b:0d:d5:ef:ed:ce: 93:b7:6d:a6:3a:1d:35:3e:9e:cf:b4:9e:5a:64:9b: e7:21:01:68:e4:bb:66:4b:f8:37:6d:c2:29:50:58: 93:c2:b0:f2:1d:72:6f:16:8a:59:22:11:b3:eb:82: 16:a2:3e:d4:e8:a6:d2:a4:04:73:b7:37:29:94:f1: 18:45:f8:fb:db:a2:db:55:5f:68:17:1a:93:54:54: 34:00:9d:3b:99:36:3a:72:c6:be:0c:05:db:51:3c: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5E:E7:14:BC:6E:2A:72:A8:F5:A9:2F:F0:1A:C2:35:5F:58:B8:45 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:01:cd:06:60:54:90:70:3f:2c:58:5d:6a:6f:18:ad:8c:b6: 67:b4:88:8e:4a:ee:9e:a4:cb:44:60:2d:3c:f5:84:00:a1:cf: 3c:04:84:ea:7c:b0:4d:a0:e2:14:12:03:81:3c:58:8b:05:11: 63:bd:1c:e6:e4:ea:ca:8f:14:92:35:c0:79:f8:22:a0:99:1b: e7:c6:21:15:d2:16:e9:f1:9e:0a:b7:d0:d8:5a:f8:fe:3d:1d: 4a:1a:83:70:fb:73:0b:ad:cc:a4:6a:24:8c:27:94:42:08:8f: b5:12:0c:c3:2e:07:76:0b:1e:26:77:cb:49:fd:6e:39:d9:d7: c6:06:0d:4e:dd:eb:92:c5:1c:19:81:d4:d4:c9:40:78:b3:55: 78:dc:10:35:80:19:a1:c0:73:c9:f4:46:da:dc:d1:bc:77:9e: ab:37:6c:2f:de:c8:74:b3:55:41:2a:e8:d0:d6:13:34:c2:4e: 01:fd:1a:e9:04:77:28:6d:5c:3f:a6:7d:17:1a:c4:33:5e:14: 75:bf:54:1c:cf:d8:f3:92:f0:52:58:59:ca:ca:b9:ec:b6:95: ba:dd:f5:bd:46:2f:6e:16:ad:3a:9b:49:3c:f7:2d:28:64:fa: 6b:5d:98:56:9d:e1:6a:39:ca:6f:b3:54:b7:f8:43:37:0f:e9: 49:a5:8c:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjYwMzAyMDI0ODU5WhcNMjYwMzA5MDI0ODU5WjAYMRYwFAYD VQQDEw02OWE0ZmE5Yy0yZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3P4RX95X/izqG8pivRze/dr6KOYfFlcuCC93rk24/KukGxlmu7TAmm5YC4f lNz0/z6O1vx1t1G9mevdN7jxrzFMki9L1sNsc6zAfIyyvczy2RzqlG9ESYans5hJ lsDo0jillkMHQBWClUnFH/Tt9YduJwCwo22hxkiMpaUKuBEWPWeYLLOABxUbkN/9 5oY7su8XEoRmCEpRMr744SGLDdXv7c6Tt22mOh01Pp7PtJ5aZJvnIQFo5LtmS/g3 bcIpUFiTwrDyHXJvFopZIhGz64IWoj7U6KbSpARztzcplPEYRfj726LbVV9oFxqT VFQ0AJ07mTY6csa+DAXbUTwJRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNde5xS8 bipyqPWpL/AawjVfWLhFMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3wHNBmBUkHA/LFhdam8YrYy2Z7SIjkrunqTLRGAtPPWEAKHPPASE6nywTaDi FBIDgTxYiwURY70c5uTqyo8UkjXAefgioJkb58YhFdIW6fGeCrfQ2Fr4/j0dShqD cPtzC63MpGokjCeUQgiPtRIMwy4HdgseJnfLSf1uOdnXxgYNTt3rksUcGYHU1MlA eLNVeNwQNYAZocBzyfRG2tzRvHeeqzdsL97IdLNVQSro0NYTNMJOAf0a6QR3KG1c P6Z9FxrEM14Udb9UHM/Y85LwUlhZysq57LaVut31vUYvbhatOptJPPctKGT6a12Y Vp3hajnKb7NUt/hDNw/pSaWM5Q== -----END CERTIFICATE-----Generated at Mon Mar 2 05:45:40 2026 by rpki-client