$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: uqbr3I1nj57HGWdywHiH1R6oB4Nvp4qf9ntAtfjOpek= Subject key identifier: 8C:AA:4D:C7:3F:94:8D:CA:AE:84:9F:BA:FE:F4:FC:F2:46:CA:5D:4A Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 0155 Signing time: Fri 25 Sep 2026 05:22:17 +0000 Manifest this update: Fri 25 Sep 2026 05:22:17 +0000 Manifest next update: Fri 02 Oct 2026 05:22:17 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: H689TsVE00zG7RfIMob4XsPp4PLETWhf6r+UzIWPHIg=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: seNWkSzPB+y0QnMqGd7lzmRBQ9fM1nYcZLpQ+T55VyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 05:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Sep 25 05:22:17 2026 GMT Not After : Oct 2 05:22:17 2026 GMT Subject: CN=6ab60509-7f7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:9f:d7:25:e9:b4:79:07:6c:38:0f:a8:a1: e0:95:5a:f5:8e:b2:3e:71:18:94:16:59:ad:c7:a5: 2d:2c:4d:15:a9:4d:be:30:2a:41:d0:48:bb:ce:ed: 0a:2a:d6:a1:6e:6f:d6:48:74:c2:41:a5:d8:71:58: 32:22:32:fe:3f:64:6b:37:c8:dc:17:4f:26:46:aa: c7:62:e6:29:f0:a0:82:af:b1:26:fa:77:77:9e:82: af:48:d9:64:17:64:03:ce:e7:e1:c7:c2:25:22:76: 60:58:67:b3:1e:46:65:06:87:fe:a3:0f:92:71:5d: 8a:db:e3:3e:6b:98:af:5a:ce:71:0b:20:f8:d6:61: 8f:a2:6d:a3:ed:3c:4b:ee:25:59:97:19:d8:9c:41: 43:d4:e5:1a:b0:c5:be:cb:39:db:f8:06:6b:8c:19: 53:b0:07:51:9c:78:ad:5c:cc:8c:54:96:63:b3:f8: 97:12:d7:50:8c:b8:30:b5:43:de:b5:af:1d:94:6b: a5:84:52:27:05:da:58:89:b1:c4:a1:44:00:7b:00: cb:df:e0:76:c0:4c:4a:83:b3:8d:e0:c3:f1:6a:26: c5:f1:2a:73:8f:e1:e1:a5:32:55:e1:28:2a:0a:98: c5:70:23:41:b0:8c:f3:61:ea:cd:73:19:99:2c:f3: da:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:4D:C7:3F:94:8D:CA:AE:84:9F:BA:FE:F4:FC:F2:46:CA:5D:4A X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d1:3b:c4:30:b3:18:2c:5c:f2:2c:e7:8b:f4:aa:6e:70:70: 6a:70:b8:15:f2:0b:7a:a1:ba:07:31:f1:52:1d:b3:80:cb:6f: fd:fd:19:ff:98:91:c6:e6:48:8d:43:d5:44:66:ab:41:cc:cb: 8a:23:45:bb:71:e8:71:e4:de:54:fd:15:b7:9f:49:4e:7f:a1: 69:2d:f1:5f:f8:a8:e0:6d:72:da:82:a1:6f:85:37:76:15:dc: d2:65:0b:dc:a7:7c:41:44:a7:cb:aa:c2:33:08:1b:47:3d:65: dd:38:34:36:4a:4b:a6:c7:46:e0:eb:88:0a:2c:f0:10:cc:7a: c8:69:f3:f7:0c:ef:a2:b8:50:58:c0:7f:f5:d0:31:29:9e:fa: 5f:91:49:0e:c1:fd:bd:ba:b0:ac:bb:48:8d:43:40:aa:39:06: 8a:80:4a:77:6c:ac:47:0f:d5:bd:8b:7a:7d:d5:d9:32:d8:2c: e3:3b:3b:d4:f6:3f:79:a5:f9:3a:69:df:a0:d1:b0:be:61:14: 26:ed:0e:63:31:f2:1a:10:0c:bc:ae:c0:29:6f:61:5b:a3:fd: 53:f0:41:f1:22:48:ae:8f:b3:cd:31:3d:76:69:05:d8:e3:69: 99:f6:b6:a4:b3:2d:99:97:03:ce:71:2c:25:96:3c:32:36:f3: b6:ea:52:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjYwOTI1MDUyMjE3WhcNMjYxMDAyMDUyMjE3WjAYMRYwFAYD VQQDEw02YWI2MDUwOS03ZjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtayf1yXptHkHbDgPqKHglVr1jrI+cRiUFlmtx6UtLE0VqU2+MCpB0Ei7zu0K Ktahbm/WSHTCQaXYcVgyIjL+P2RrN8jcF08mRqrHYuYp8KCCr7Em+nd3noKvSNlk F2QDzufhx8IlInZgWGezHkZlBof+ow+ScV2K2+M+a5ivWs5xCyD41mGPom2j7TxL 7iVZlxnYnEFD1OUasMW+yznb+AZrjBlTsAdRnHitXMyMVJZjs/iXEtdQjLgwtUPe ta8dlGulhFInBdpYibHEoUQAewDL3+B2wExKg7ON4MPxaibF8Spzj+HhpTJV4Sgq CpjFcCNBsIzzYerNcxmZLPPaCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIyqTcc/ lI3KroSfuv70/PJGyl1KMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAu9E7xDCzGCxc8izni/SqbnBwanC4FfILeqG6BzHxUh2zgMtv/f0Z/5iRxuZI jUPVRGarQczLiiNFu3HoceTeVP0Vt59JTn+haS3xX/io4G1y2oKhb4U3dhXc0mUL 3Kd8QUSny6rCMwgbRz1l3Tg0NkpLpsdG4OuICizwEMx6yGnz9wzvorhQWMB/9dAx KZ76X5FJDsH9vbqwrLtIjUNAqjkGioBKd2ysRw/VvYt6fdXZMtgs4zs71PY/eaX5 OmnfoNGwvmEUJu0OYzHyGhAMvK7AKW9hW6P9U/BB8SJIro+zzTE9dmkF2ONpmfa2 pLMtmZcDznEsJZY8MjbztupS9g== -----END CERTIFICATE-----Generated at Sun Sep 27 07:41:17 2026 by rpki-client