$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: rxpdG3eIXCPtWVsWXKFGQSk2rHnzNRDWVdP2zFpP4Js= Subject key identifier: 7B:1F:C1:E0:E6:94:0B:42:6A:F3:CA:DC:CF:DA:A1:57:A1:2A:26:0B Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0D58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0D0A Signing time: Sun 20 Sep 2026 18:19:15 +0000 Manifest this update: Sun 20 Sep 2026 18:19:14 +0000 Manifest next update: Sun 27 Sep 2026 18:19:14 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: hFb61+sN8aIYfgf1/BFCTt4VKp9g7Y0ZfTMSk39MGkY=) 2: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=) 3: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=) 4: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=) 5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=) 6: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=) 7: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3416 (0xd58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Sep 20 18:19:14 2026 GMT Not After : Sep 27 18:19:14 2026 GMT Subject: CN=6ab023a3-d135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:a5:fc:c2:3b:b6:4c:88:8e:d0:47:62:a8: 46:9c:60:a0:01:d7:de:fe:6f:49:f5:4a:87:eb:17: 2c:47:8d:20:3e:1c:2f:75:b5:31:7f:59:cd:81:41: 00:7a:f9:cf:59:7b:a7:be:6d:e8:34:b9:1a:1f:c0: 08:f1:a0:d0:85:42:ff:da:f2:95:3c:b6:d0:75:86: 27:5c:39:cf:31:d4:62:8c:0f:dd:d5:60:07:df:7a: a7:b1:ce:a8:ef:de:3e:8c:47:f2:3d:62:ca:2c:d9: c7:7e:c1:ac:54:f4:7e:00:3e:bb:dc:e1:b2:97:10: 4b:0c:9f:7c:65:9b:4a:9f:7c:4a:1e:21:8d:ab:bc: 2d:db:17:80:99:69:46:cc:e4:f9:d1:b8:52:14:4f: 2f:c2:96:7d:06:81:c0:1d:f4:66:5c:7d:d3:9f:10: 28:9c:fa:11:ea:7e:60:a0:67:ce:0a:8c:9a:c6:d4: 03:12:22:9b:10:3e:7d:c7:61:ce:d9:a3:65:49:da: 55:ac:0c:74:7a:1f:2f:85:d9:8c:48:52:82:38:ff: 37:bd:88:00:6e:ce:b2:c6:a2:2a:26:eb:13:76:91: 75:5b:4f:af:b5:c8:82:e1:c8:2c:71:5e:ab:28:2c: b8:06:17:4e:6c:b4:d2:27:ea:75:7c:22:f7:47:5f: 83:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1F:C1:E0:E6:94:0B:42:6A:F3:CA:DC:CF:DA:A1:57:A1:2A:26:0B X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:12:57:b8:76:bc:b7:d6:80:13:93:1c:25:cf:4f:1f:d0:0f: ad:43:8a:ad:63:38:cb:54:9f:dd:2f:d4:4b:d7:93:2a:40:7e: ea:6e:d4:ba:bd:ca:80:bf:46:1c:fd:15:fd:20:fb:e8:11:d8: cd:cb:0c:ac:4e:bd:c1:d1:0b:c3:f5:fa:4c:cd:b0:80:8a:8c: 0d:91:c5:39:a7:b1:0c:21:24:2b:f0:74:0d:66:8f:c0:0e:1a: c8:bc:01:53:33:54:b1:e8:c1:aa:47:8c:5c:7c:89:e3:26:87: 45:e6:b2:72:df:d2:60:2f:d7:35:58:a6:10:31:94:2a:4c:d7: e0:58:ef:9e:7b:4e:fc:70:1a:43:59:a8:45:dd:87:1b:ad:fa: f2:e7:49:48:6e:ab:55:09:3d:68:f8:d9:9e:f7:7e:be:55:70: 6e:65:19:99:7d:47:98:f5:12:72:c3:6a:18:11:47:69:87:3c: f6:6a:72:6a:cf:fa:f9:13:c2:d6:92:72:1d:20:35:d3:1b:78: 9e:1e:ac:83:21:d8:47:95:94:6f:a1:03:de:96:63:3f:d4:f1: 7f:52:6b:77:e8:86:12:40:b6:08:db:c4:b1:ea:6c:f5:7e:ec: 23:28:00:39:6c:f9:a0:b9:f6:de:80:8b:b1:a9:b5:eb:b4:cb: 57:67:b3:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjYwOTIwMTgxOTE0WhcNMjYwOTI3MTgxOTE0WjAYMRYwFAYD VQQDEw02YWIwMjNhMy1kMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kWl/MI7tkyIjtBHYqhGnGCgAdfe/m9J9UqH6xcsR40gPhwvdbUxf1nNgUEA evnPWXunvm3oNLkaH8AI8aDQhUL/2vKVPLbQdYYnXDnPMdRijA/d1WAH33qnsc6o 794+jEfyPWLKLNnHfsGsVPR+AD673OGylxBLDJ98ZZtKn3xKHiGNq7wt2xeAmWlG zOT50bhSFE8vwpZ9BoHAHfRmXH3TnxAonPoR6n5goGfOCoyaxtQDEiKbED59x2HO 2aNlSdpVrAx0eh8vhdmMSFKCOP83vYgAbs6yxqIqJusTdpF1W0+vtciC4cgscV6r KCy4BhdObLTSJ+p1fCL3R1+DDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHsfweDm lAtCavPK3M/aoVehKiYLMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZxJXuHa8t9aAE5McJc9PH9APrUOKrWM4y1Sf3S/US9eTKkB+6m7Uur3KgL9G HP0V/SD76BHYzcsMrE69wdELw/X6TM2wgIqMDZHFOaexDCEkK/B0DWaPwA4ayLwB UzNUsejBqkeMXHyJ4yaHReayct/SYC/XNVimEDGUKkzX4FjvnntO/HAaQ1moRd2H G6368udJSG6rVQk9aPjZnvd+vlVwbmUZmX1HmPUScsNqGBFHaYc89mpyas/6+RPC 1pJyHSA10xt4nh6sgyHYR5WUb6ED3pZjP9Txf1Jrd+iGEkC2CNvEseps9X7sIygA OWz5oLn23oCLsam167TLV2ezjg== -----END CERTIFICATE-----Generated at Tue Sep 22 09:26:53 2026 by rpki-client