$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json) Hash identifier: xfI7f4fT31PPvvCQQ72smG4H3QgroDDIDHz7ehsrG5o= Subject key identifier: D4:C5:FB:CF:3D:B4:42:52:B2:14:B9:7E:3F:B4:6F:80:FC:5C:FE:C0 Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft Manifest number: 37 Signing time: Thu 05 Nov 2026 09:01:52 +0000 Manifest this update: Thu 05 Nov 2026 09:01:52 +0000 Manifest next update: Thu 12 Nov 2026 09:01:52 +0000 Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: JW9QyxdMsMfjYvZju0kqUM7j/0aY8DLRv1u/G/G7MZI=) 2: C4573D8E8BDF11F19F45C2023611F970.roa (hash: SBR2qy/aOQNOlTNj4Guu+00B4uzU8KT7C033YFlfsww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 09:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Validity Not Before: Nov 5 09:01:52 2026 GMT Not After : Nov 12 09:01:52 2026 GMT Subject: CN=6aec4600-6a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:3d:97:35:42:c0:d0:d7:bf:9f:b9:f8:4a: cf:9c:0c:7b:7c:61:3a:7b:2d:14:1e:5f:49:a0:1d: 33:ef:03:a9:40:e6:24:85:3b:fa:4f:b7:9d:21:23: fa:66:29:bb:2f:4d:c3:56:b9:66:3c:bd:35:27:54: 3f:36:0c:fe:7d:5c:1d:c5:61:99:3e:13:5c:51:dd: 17:1d:af:ca:6e:e4:86:32:4b:54:a1:95:d3:e4:5c: b2:ca:96:42:de:b5:93:60:d9:dd:29:1f:84:57:29: cf:00:de:25:09:75:a5:69:97:c1:30:fc:bb:f9:c1: 55:84:48:78:e1:09:56:f3:13:27:79:92:84:0d:f9: 4c:6a:4a:11:a3:34:5e:6f:5a:e5:47:a2:ab:bf:8b: 38:c1:53:c6:06:54:b2:dd:8d:4f:08:51:23:f2:f1: a5:6f:8c:d9:55:8d:26:fe:b7:fc:f0:ac:17:46:4b: 40:f9:ac:da:cc:fc:9d:70:10:11:20:f0:89:5f:7e: ab:f2:19:af:81:6e:c9:af:9a:21:5a:f3:3e:93:e0: 46:96:a6:4e:e0:3e:97:86:63:cf:17:8e:54:cc:1a: ef:30:4b:84:69:03:f0:80:b6:c5:5d:7f:e4:6f:06: 13:91:af:08:11:fc:56:87:ed:06:bb:63:12:7e:3c: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C5:FB:CF:3D:B4:42:52:B2:14:B9:7E:3F:B4:6F:80:FC:5C:FE:C0 X509v3 Authority Key Identifier: keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:20:af:3b:b8:32:76:69:eb:e2:9d:21:00:08:f3:98:e1:45: b6:b7:a5:eb:c8:ef:6d:4f:dc:8e:8b:d7:28:34:f8:c6:3c:b6: ec:96:28:3e:66:d3:60:08:6b:98:53:0d:7e:37:fc:b5:55:a1: 3e:28:47:ac:18:fc:79:0b:61:4b:b5:1c:f1:c9:c7:84:de:47: 9a:1e:89:73:cc:a0:51:84:5c:c2:9a:8d:0a:9d:a5:b4:54:49: e8:5f:ce:71:79:80:99:74:76:db:49:6b:61:53:e3:a9:45:b1: 5e:3c:0e:80:8c:ba:5e:f8:90:c9:3b:fc:88:89:a4:9f:fe:85: 54:61:e8:c0:dd:fd:d7:cf:89:ac:21:b7:a9:bc:89:bd:79:7f: 4d:d3:59:92:bc:7c:86:fc:4b:ca:4c:07:f4:3a:6a:e7:12:f7: 0a:79:00:3c:ce:01:71:59:9f:e6:b7:46:43:52:fa:4f:5d:ba: 4a:3d:ed:15:d8:69:b9:78:7d:90:dd:15:f8:08:0d:be:b0:7a: 2e:f3:49:9e:b3:7f:08:76:79:01:e1:1a:b0:e5:e4:5d:6c:ed: b9:77:b4:51:ab:8c:53:91:ee:9b:09:ae:9f:02:24:67:e3:0a: e5:c8:43:78:01:5e:0b:38:53:2c:e4:bf:71:92:f8:32:bf:df: 9d:5e:4c:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzIyNzExMC8GA1UEBRMoNTg1RTRFQjU5NDBDRDgwN0ExRjc5NDUzMUIwNUExMERD N0U0MzNCMjAeFw0yNjExMDUwOTAxNTJaFw0yNjExMTIwOTAxNTJaMBgxFjAUBgNV BAMTDTZhZWM0NjAwLTZhM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFOD2XNULA0Ne/n7n4Ss+cDHt8YTp7LRQeX0mgHTPvA6lA5iSFO/pPt50hI/pm KbsvTcNWuWY8vTUnVD82DP59XB3FYZk+E1xR3Rcdr8pu5IYyS1ShldPkXLLKlkLe tZNg2d0pH4RXKc8A3iUJdaVpl8Ew/Lv5wVWESHjhCVbzEyd5koQN+UxqShGjNF5v WuVHoqu/izjBU8YGVLLdjU8IUSPy8aVvjNlVjSb+t/zwrBdGS0D5rNrM/J1wEBEg 8IlffqvyGa+BbsmvmiFa8z6T4EaWpk7gPpeGY88XjlTMGu8wS4RpA/CAtsVdf+Rv BhORrwgR/FaH7Qa7YxJ+PFVDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1MX7zz20 QlKyFLl+P7RvgPxc/sAwHwYDVR0jBBgwFoAUWF5OtZQM2Aeh95RTGwWhDcfkM7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMjI3L0Q4RERBQzlFOEEz RjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFlaDk1UlRHd1doRGNma003 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0Y1T3RaUU0yQWVoOTVSVEd3V2hEY2ZrTTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MjI3L0Q4RERBQzlFOEEzRjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFl aDk1UlRHd1doRGNma003SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCcIK87uDJ2aevinSEACPOY4UW2t6XryO9tT9yOi9coNPjGPLbslig+ZtNgCGuY Uw1+N/y1VaE+KEesGPx5C2FLtRzxyceE3keaHolzzKBRhFzCmo0KnaW0VEnoX85x eYCZdHbbSWthU+OpRbFePA6AjLpe+JDJO/yIiaSf/oVUYejA3f3Xz4msIbepvIm9 eX9N01mSvHyG/EvKTAf0OmrnEvcKeQA8zgFxWZ/mt0ZDUvpPXbpKPe0V2Gm5eH2Q 3RX4CA2+sHou80mes38IdnkB4Rqw5eRdbO25d7RRq4xTke6bCa6fAiRn4wrlyEN4 AV4LOFMs5L9xkvgyv9+dXkxJ -----END CERTIFICATE-----Generated at Thu Nov 5 18:58:41 2026 by rpki-client