$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json) Hash identifier: dHmJD8v6vEe0rreN4VNadsOY4zBExuu5STHUSR+G37Q= Subject key identifier: 4C:F5:78:97:89:D9:0C:9B:BA:C8:22:32:E8:98:6E:29:66:F8:F5:F7 Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft Manifest number: 1F Signing time: Sat 19 Sep 2026 08:22:10 +0000 Manifest this update: Sat 19 Sep 2026 08:22:09 +0000 Manifest next update: Sat 26 Sep 2026 08:22:09 +0000 Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: PDlrwRia8M3vdgcdx8uV0ZLtV5jjq3DSxfh9iarahG0=) 2: C4573D8E8BDF11F19F45C2023611F970.roa (hash: SBR2qy/aOQNOlTNj4Guu+00B4uzU8KT7C033YFlfsww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Validity Not Before: Sep 19 08:22:09 2026 GMT Not After : Sep 26 08:22:09 2026 GMT Subject: CN=6aae4632-d94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:86:f6:77:3f:fc:d3:ba:9b:3d:2b:e4:c5: a9:08:34:95:9b:00:81:ab:d8:9b:39:2b:8c:b9:17: d8:e9:5f:2c:bb:d7:78:da:5a:be:7d:98:d0:77:da: c2:92:f0:d6:b4:a3:6c:e3:6b:20:07:b6:7e:88:c6: bb:9f:ab:73:7f:10:31:6b:63:07:3b:53:fd:c3:df: ef:88:6f:cb:36:fc:3b:4e:56:0f:7c:3d:ba:89:6d: 5e:81:8c:86:02:4d:51:f0:4a:92:9e:f9:e9:22:e0: 57:9d:eb:3a:74:6d:5f:54:7d:90:8f:2a:75:55:24: d7:17:0d:a0:47:f2:f8:72:50:d6:1f:9f:c3:19:11: d5:e5:ac:ad:59:03:69:25:ef:51:a8:e1:61:df:ec: 12:e6:d0:b0:73:bd:e4:b9:fb:17:58:cb:45:cb:11: bc:b8:89:51:f1:c5:29:61:11:74:fc:cb:2f:ac:38: 90:c1:27:11:ca:ea:ec:86:5f:f3:b6:9d:71:5e:e7: 8b:26:90:1c:68:c9:12:b1:28:78:16:c0:e4:c8:b1: 2d:a2:c9:a3:eb:16:ff:5f:ed:a8:e8:8b:86:6b:9c: 52:9c:81:f0:d0:e4:9b:19:eb:f5:76:f5:cf:cf:77: a4:96:92:ff:dd:52:54:bb:44:f7:70:81:c5:8d:ff: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:78:97:89:D9:0C:9B:BA:C8:22:32:E8:98:6E:29:66:F8:F5:F7 X509v3 Authority Key Identifier: keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:db:77:b5:83:a7:60:88:9e:ca:7d:ab:de:da:d3:79:b6:29: ef:25:71:c1:f2:4d:72:bd:32:26:3f:11:75:65:f2:87:18:07: a6:53:7a:31:5a:17:06:cd:29:b0:c6:bf:59:e9:0b:4d:d6:4e: ce:f5:1b:ff:f9:8a:e9:64:70:c2:33:3b:48:84:af:90:11:59: 5e:45:38:37:55:5b:b5:7a:3c:fb:ab:59:b7:ae:67:0a:69:9b: 39:51:a0:70:26:be:20:0e:2e:a2:77:aa:d5:f7:18:00:f3:79: 42:ed:91:9a:37:e8:d8:6a:58:2b:4e:ba:40:8f:5b:40:59:2c: 63:7c:a1:90:f0:f8:2d:4b:71:ae:97:c4:f2:0e:ed:e4:48:f5: 04:39:66:ec:71:91:37:6e:13:92:f9:8c:f7:61:47:8b:f9:0d: 18:cc:52:50:e8:bd:ef:12:21:01:5c:71:76:42:b1:80:de:88: 73:0b:1e:f5:02:9c:ec:34:1a:93:d1:2b:de:c9:6f:01:23:d1: f7:a9:08:73:c5:bd:57:b6:b8:bf:2c:22:84:a6:06:28:38:f7: 42:e1:ec:60:d6:99:b0:05:e0:3d:be:06:d3:1e:96:82:d9:4d: 32:90:5c:1c:04:3b:a9:7f:64:a3:34:78:32:f9:61:12:fc:87: 11:86:dc:d9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzIyNzExMC8GA1UEBRMoNTg1RTRFQjU5NDBDRDgwN0ExRjc5NDUzMUIwNUExMERD N0U0MzNCMjAeFw0yNjA5MTkwODIyMDlaFw0yNjA5MjYwODIyMDlaMBgxFjAUBgNV BAMTDTZhYWU0NjMyLWQ5NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsUIb2dz/807qbPSvkxakINJWbAIGr2Js5K4y5F9jpXyy713jaWr59mNB32sKS 8Na0o2zjayAHtn6Ixrufq3N/EDFrYwc7U/3D3++Ib8s2/DtOVg98PbqJbV6BjIYC TVHwSpKe+eki4Fed6zp0bV9UfZCPKnVVJNcXDaBH8vhyUNYfn8MZEdXlrK1ZA2kl 71Go4WHf7BLm0LBzveS5+xdYy0XLEby4iVHxxSlhEXT8yy+sOJDBJxHK6uyGX/O2 nXFe54smkBxoyRKxKHgWwOTIsS2iyaPrFv9f7ajoi4ZrnFKcgfDQ5JsZ6/V29c/P d6SWkv/dUlS7RPdwgcWN/5yhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTPV4l4nZ DJu6yCIy6JhuKWb49fcwHwYDVR0jBBgwFoAUWF5OtZQM2Aeh95RTGwWhDcfkM7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMjI3L0Q4RERBQzlFOEEz RjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFlaDk1UlRHd1doRGNma003 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0Y1T3RaUU0yQWVoOTVSVEd3V2hEY2ZrTTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MjI3L0Q4RERBQzlFOEEzRjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFl aDk1UlRHd1doRGNma003SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA523e1g6dgiJ7Kfave2tN5tinvJXHB8k1yvTImPxF1ZfKHGAemU3oxWhcGzSmw xr9Z6QtN1k7O9Rv/+YrpZHDCMztIhK+QEVleRTg3VVu1ejz7q1m3rmcKaZs5UaBw Jr4gDi6id6rV9xgA83lC7ZGaN+jYalgrTrpAj1tAWSxjfKGQ8PgtS3Gul8TyDu3k SPUEOWbscZE3bhOS+Yz3YUeL+Q0YzFJQ6L3vEiEBXHF2QrGA3ohzCx71ApzsNBqT 0SveyW8BI9H3qQhzxb1Xtri/LCKEpgYoOPdC4exg1pmwBeA9vgbTHpaC2U0ykFwc BDupf2SjNHgy+WES/IcRhtzZ -----END CERTIFICATE-----Generated at Sun Sep 20 19:36:52 2026 by rpki-client