$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: qZGj/gbIYVs/0XkX2Yu5h5E1MBG7cva9QAmnCbH3/PI= Subject key identifier: AE:B6:76:36:E0:15:C4:AB:CD:8B:E7:40:88:B7:85:85:3A:9A:C9:BA Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0D1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0CFD Signing time: Tue 22 Sep 2026 18:17:08 +0000 Manifest this update: Tue 22 Sep 2026 18:17:07 +0000 Manifest next update: Tue 29 Sep 2026 18:17:07 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: HYP2cIgn6EGOI6/fv/Awbw7GernzJbBG0ZnQ0/Jt2rE=) 2: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=) 3: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=) 4: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Sep 22 18:17:07 2026 GMT Not After : Sep 29 18:17:07 2026 GMT Subject: CN=6ab2c623-5469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:ff:aa:f9:ea:43:57:3b:84:b1:7c:5b:31: 4a:d7:5e:79:c0:79:ce:47:11:7e:47:94:bd:e8:a1: f8:83:c4:58:92:52:87:0f:2d:8b:24:b2:ce:9f:88: 5c:a1:f3:5d:0e:70:b7:8c:65:83:3e:20:8f:b7:67: 20:6e:aa:96:97:50:33:f0:46:23:2a:3f:cd:fe:2f: 6d:5e:48:46:cd:6b:07:60:22:50:2b:90:92:71:9f: b8:1f:bc:1d:d5:82:f2:48:8d:c2:4c:45:15:ac:90: 07:7a:35:8f:75:7c:87:c7:95:6a:01:ce:bf:e2:d0: 73:52:87:2b:4e:79:41:87:08:dd:da:90:70:eb:ac: e0:3a:7b:74:fa:50:e9:8e:4c:ac:76:7b:51:59:00: df:bb:cf:17:c4:d4:53:d0:60:5d:6b:b6:0b:de:01: c4:1a:54:4f:9b:74:bd:df:85:2a:bc:af:a9:cf:16: dd:db:e7:f1:15:82:3b:ed:2b:1a:1d:44:24:30:d7: 91:bd:64:c6:d3:02:2d:ef:e1:40:6b:d3:ab:e7:c5: c9:2c:62:30:b6:56:f6:79:e1:4f:71:50:4d:c4:ba: ac:c8:95:12:ae:3d:36:2b:1e:81:60:2a:60:ee:8a: f6:35:90:21:92:c8:3e:1a:c2:d8:7a:f4:81:48:e9: 07:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B6:76:36:E0:15:C4:AB:CD:8B:E7:40:88:B7:85:85:3A:9A:C9:BA X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8f:65:33:6c:23:7d:6d:96:09:08:b8:67:d0:c4:c5:3f:90: b6:53:d6:f1:ac:bb:92:74:30:08:ad:f6:45:0e:b8:50:c9:82: f8:f1:80:dc:81:b7:9f:d1:27:b2:49:e7:33:ed:30:0b:fd:69: 64:3b:f7:3a:20:d0:e1:1e:b3:ee:f9:2e:a7:98:de:14:e3:9a: 57:f2:7c:c6:ca:35:23:3a:1c:6f:44:5d:54:ff:9c:f1:95:e4: 19:b1:d0:9d:19:52:df:0c:46:83:19:e8:82:1b:18:a6:0a:97: cb:f8:33:28:b3:50:63:e9:6c:e0:26:c7:6a:d1:f6:a0:22:33: 97:61:73:b2:86:eb:14:c5:0b:94:5e:1b:d6:fc:32:bd:18:96: f7:9c:78:10:37:59:40:1f:7c:5f:e4:94:c7:73:c3:21:a9:60: 90:95:81:4d:07:ba:f9:96:b8:0f:5f:d5:55:5c:00:79:60:13: 0b:a7:1e:c4:64:ad:7e:42:8a:d9:22:fb:da:36:7c:f5:93:2f: 0a:a3:83:14:a1:49:43:80:db:42:8f:54:08:ce:ec:03:1e:41: d8:a8:15:3d:4a:b9:59:e9:eb:28:80:99:f2:a4:9d:a5:65:cb: 64:1a:85:f2:bc:ed:6e:00:9a:3a:53:82:d1:b1:c4:d3:2b:af: cb:e5:e6:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjYwOTIyMTgxNzA3WhcNMjYwOTI5MTgxNzA3WjAYMRYwFAYD VQQDEw02YWIyYzYyMy01NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O3/qvnqQ1c7hLF8WzFK1155wHnORxF+R5S96KH4g8RYklKHDy2LJLLOn4hc ofNdDnC3jGWDPiCPt2cgbqqWl1Az8EYjKj/N/i9tXkhGzWsHYCJQK5CScZ+4H7wd 1YLySI3CTEUVrJAHejWPdXyHx5VqAc6/4tBzUocrTnlBhwjd2pBw66zgOnt0+lDp jkysdntRWQDfu88XxNRT0GBda7YL3gHEGlRPm3S934UqvK+pzxbd2+fxFYI77Ssa HUQkMNeRvWTG0wIt7+FAa9Or58XJLGIwtlb2eeFPcVBNxLqsyJUSrj02Kx6BYCpg 7or2NZAhksg+GsLYevSBSOkH6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK62djbg FcSrzYvnQIi3hYU6msm6MB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALo9lM2wjfW2WCQi4Z9DExT+QtlPW8ay7knQwCK32RQ64UMmC+PGA3IG3n9En sknnM+0wC/1pZDv3OiDQ4R6z7vkup5jeFOOaV/J8xso1Izocb0RdVP+c8ZXkGbHQ nRlS3wxGgxnoghsYpgqXy/gzKLNQY+ls4CbHatH2oCIzl2FzsobrFMULlF4b1vwy vRiW95x4EDdZQB98X+SUx3PDIalgkJWBTQe6+Za4D1/VVVwAeWATC6cexGStfkKK 2SL72jZ89ZMvCqODFKFJQ4DbQo9UCM7sAx5B2KgVPUq5WenrKICZ8qSdpWXLZBqF 8rztbgCaOlOC0bHE0yuvy+XmIg== -----END CERTIFICATE-----Generated at Tue Sep 22 23:41:16 2026 by rpki-client