$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft File: WKIeeyP68huJ00Jw61b3RJwjmYY.mft (raw, json) Hash identifier: tYdJeolMxY32NG8sBa9V53saI0bbAXNkr9a33MgL+5Q= Subject key identifier: 34:DF:4B:82:D3:97:16:58:1E:18:31:EB:B8:A8:C6:25:D6:67:4D:D4 Authority key identifier: 58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 Certificate issuer: /CN=A91656C7/serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft Manifest number: 9D Signing time: Wed 15 Apr 2026 06:51:02 +0000 Manifest this update: Wed 15 Apr 2026 06:51:01 +0000 Manifest next update: Wed 22 Apr 2026 06:51:01 +0000 Files and hashes: 1: WKIeeyP68huJ00Jw61b3RJwjmYY.crl (hash: op+KYEdEGMMq6RmrX9u97pO21RKjlWnOA1/4JHmo+Fw=) 2: 559FC8C054F411F08DC15C53C4F9AE02.roa (hash: 0f4GSHCzNdKS9bURs+KpF8txlIHrkRwt0EzFhj9CMzQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91656C7, serialNumber=58A21E7B23FAF21B89D34270EB56F7449C239986 Validity Not Before: Apr 15 06:51:01 2026 GMT Not After : Apr 22 06:51:01 2026 GMT Subject: CN=69df3556-8b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:e7:3d:8a:f6:0d:2e:bc:e8:af:01:de:32: 53:73:6a:70:16:3d:3b:78:9f:17:b7:3d:75:d8:eb: cf:34:bc:b6:ca:f9:7b:67:09:71:39:82:78:df:3a: 6f:f8:99:6a:20:d5:ec:69:c8:7e:cc:d9:ae:90:33: 7c:9d:39:aa:33:d8:57:97:37:97:e4:84:42:28:31: 82:2c:19:7a:b3:72:81:fa:70:a6:72:61:29:92:28: fa:ce:0a:88:71:92:da:08:01:c4:a2:17:ba:20:b4: 5e:f3:db:61:49:e3:53:27:06:c1:66:d8:81:ba:61: 13:8f:3e:5b:7e:9f:03:eb:d0:31:28:a9:e2:a2:b0: b4:54:78:49:57:19:fa:0d:0b:54:1b:3e:01:5d:bb: 53:24:e5:31:1c:99:6d:be:bd:cd:98:6a:29:20:b6: 43:05:03:3d:3e:37:02:50:25:eb:81:79:27:13:2d: b0:d8:ef:05:e1:ac:61:04:35:32:aa:87:64:3a:b7: a3:9a:89:8e:49:19:6f:df:b0:21:69:30:bb:b5:1b: 50:ed:ce:5d:99:ed:04:41:c0:54:83:0e:82:dd:33: aa:cf:e8:e2:5c:53:f0:9b:73:f0:eb:ce:ee:aa:f2: 68:4f:46:71:8d:05:91:fd:f4:0f:d4:96:68:fd:05: 8b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DF:4B:82:D3:97:16:58:1E:18:31:EB:B8:A8:C6:25:D6:67:4D:D4 X509v3 Authority Key Identifier: keyid:58:A2:1E:7B:23:FA:F2:1B:89:D3:42:70:EB:56:F7:44:9C:23:99:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WKIeeyP68huJ00Jw61b3RJwjmYY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/85DEDAD850A511F0B2D1DE4FC4F9AE02/WKIeeyP68huJ00Jw61b3RJwjmYY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:02:47:63:76:54:28:7a:83:6b:ec:b9:f8:92:f0:df:fb: f6:d9:da:75:68:87:03:57:ec:e7:52:7c:71:8f:21:87:33:af: bd:72:3b:88:f8:62:dd:02:23:0c:81:2f:03:e9:e9:a2:24:a3: 9c:bb:d2:61:ae:c4:0a:6b:79:02:42:07:25:af:75:ab:04:f7: 91:30:2f:02:4e:3b:72:e0:21:5f:80:59:b2:7f:c4:34:cf:e4: 99:f8:eb:fb:6c:b1:f2:59:41:60:0e:5d:83:de:87:ee:46:e2: 63:48:b7:0f:87:9a:c2:f0:29:c1:a1:d1:9f:d1:22:2c:0c:41: 26:1d:70:8c:23:45:45:2f:b4:7e:42:2f:5f:05:d0:03:a4:01: c3:b3:79:62:93:e4:5a:66:0a:7c:24:5b:eb:e6:81:41:66:7f: 5b:af:8b:37:9e:44:4f:7d:c0:72:d5:78:8c:6b:bb:bf:f9:b4: ed:63:f3:0c:ee:5d:22:0a:02:bb:d0:69:71:7d:cd:8f:13:75: 5b:86:96:04:a8:94:e8:d8:ca:6e:9b:33:06:bd:4d:22:9c:de: f7:0a:09:3c:6b:86:98:b9:9d:00:19:07:1c:18:28:06:55:f8: 56:21:34:ec:92:ce:98:5d:b2:e8:9c:f0:6a:a6:14:f5:70:0c: 10:d2:d5:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU2QzcxMTAvBgNVBAUTKDU4QTIxRTdCMjNGQUYyMUI4OUQzNDI3MEVCNTZGNzQ0 OUMyMzk5ODYwHhcNMjYwNDE1MDY1MTAxWhcNMjYwNDIyMDY1MTAxWjAYMRYwFAYD VQQDEw02OWRmMzU1Ni04YjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrXnPYr2DS686K8B3jJTc2pwFj07eJ8Xtz112OvPNLy2yvl7ZwlxOYJ43zpv +JlqINXsach+zNmukDN8nTmqM9hXlzeX5IRCKDGCLBl6s3KB+nCmcmEpkij6zgqI cZLaCAHEohe6ILRe89thSeNTJwbBZtiBumETjz5bfp8D69AxKKniorC0VHhJVxn6 DQtUGz4BXbtTJOUxHJltvr3NmGopILZDBQM9PjcCUCXrgXknEy2w2O8F4axhBDUy qodkOrejmomOSRlv37AhaTC7tRtQ7c5dme0EQcBUgw6C3TOqz+jiXFPwm3Pw687u qvJoT0ZxjQWR/fQP1JZo/QWLPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDTfS4LT lxZYHhgx67ioxiXWZ03UMB8GA1UdIwQYMBaAFFiiHnsj+vIbidNCcOtW90ScI5mG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTZDNy84NURFREFEODUw QTUxMUYwQjJEMURFNEZDNEY5QUUwMi9XS0llZXlQNjhodUowMEp3NjFiM1JKd2pt WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dLSWVleVA2OGh1SjAwSnc2MWIzUkp3am1ZWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTZDNy84NURFREFEODUwQTUxMUYwQjJEMURFNEZDNEY5QUUwMi9XS0llZXlQNjho dUowMEp3NjFiM1JKd2ptWVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArdICR2N2VCh6g2vsufiS8N/79tnadWiHA1fs51J8cY8hhzOvvXI7iPhi3QIj DIEvA+npoiSjnLvSYa7ECmt5AkIHJa91qwT3kTAvAk47cuAhX4BZsn/ENM/kmfjr +2yx8llBYA5dg96H7kbiY0i3D4eawvApwaHRn9EiLAxBJh1wjCNFRS+0fkIvXwXQ A6QBw7N5YpPkWmYKfCRb6+aBQWZ/W6+LN55ET33ActV4jGu7v/m07WPzDO5dIgoC u9BpcX3NjxN1W4aWBKiU6NjKbpszBr1NIpze9woJPGuGmLmdABkHHBgoBlX4ViE0 7JLOmF2y6JzwaqYU9XAMENLVQw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:23:13 2026 by rpki-client