$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: QHUucwP57a6Qy9jFK0I/usBOYAL5N03cPAEIp5XDhZA= Subject key identifier: AD:ED:71:E7:E0:7F:A4:D3:7F:C2:8F:A0:88:C1:BA:B1:29:1E:AD:8C Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 012B Signing time: Sun 01 Mar 2026 06:36:13 +0000 Manifest this update: Sun 01 Mar 2026 06:36:12 +0000 Manifest next update: Sun 08 Mar 2026 06:36:12 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: a8uUzbDqT5eE8H4OG8TAg1B28MGQ/3DQmCk2gTqFSfM=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: R4BuH0z4o97i8tZeyVvIgqOfDLo2IBdC5O5u6V1sdyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Mar 1 06:36:12 2026 GMT Not After : Mar 8 06:36:12 2026 GMT Subject: CN=69a3de5d-b51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:0d:7a:99:7d:55:1c:49:c9:db:a2:f2:09: 4c:e7:70:27:3e:f2:5b:c3:9a:24:34:8e:cf:98:96: 8a:55:17:2a:4b:6b:4b:cc:c8:51:db:07:0b:af:91: b1:09:c5:81:46:73:f6:e1:4d:1c:20:fe:c4:bb:07: 7d:ed:e8:ce:68:ec:6b:73:85:73:28:52:9f:1b:ff: 72:cd:cd:5b:11:e2:6e:bd:6d:90:b0:76:82:e9:b0: 37:57:b4:85:ff:22:1e:a0:2a:7a:3d:60:25:29:8e: 50:18:8b:ef:2e:ed:bb:e3:9d:1c:b4:4d:ab:09:64: 71:25:cf:0e:04:7f:06:29:9e:d5:6b:83:6a:b3:bb: fc:be:0e:5b:86:6c:63:3b:47:13:ea:e2:b1:8d:41: 46:72:cc:bd:4f:56:c9:ee:2f:4c:7c:d3:40:0d:29: 2f:fe:bd:7c:ad:b4:de:0f:cd:9a:18:6d:f5:f6:91: 13:16:b0:17:ab:13:73:f8:3d:36:5a:2a:38:0b:5a: 3f:e8:9e:95:29:d9:ce:cc:c7:ab:2a:ec:9b:57:6a: 7d:46:cb:44:6f:07:e1:cf:50:50:eb:fe:e4:1f:8a: 6f:fd:60:13:d4:88:28:a1:74:7f:4c:1e:4a:75:40: c1:7e:7c:1e:2b:0c:b9:a3:0d:c9:f8:83:fb:a3:9e: 8b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:ED:71:E7:E0:7F:A4:D3:7F:C2:8F:A0:88:C1:BA:B1:29:1E:AD:8C X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0c:65:8c:7f:46:36:6b:f9:9b:ba:07:f2:ca:7a:3f:71:f4: 3d:d8:8a:ff:b1:24:5d:ff:1d:32:30:74:d6:41:10:af:e6:bd: 47:4b:7c:27:eb:34:91:36:f6:ce:f0:2f:f6:84:03:5e:72:0d: 27:52:6e:0d:9f:70:8d:7f:e0:06:d2:1e:b3:54:43:2c:7b:d6: 92:c0:48:90:b6:f5:50:3b:0e:ad:63:f4:75:93:79:7a:d0:75: ee:f4:ff:94:de:2b:09:70:2d:61:fa:e9:0b:66:69:89:b9:b1: 92:1b:ed:66:d3:10:6c:65:3e:32:d4:d9:d2:20:fa:da:54:c4: ef:ea:12:d1:2d:3c:1e:de:d5:bb:f1:07:03:b1:a4:71:f3:e9: 53:55:0d:3f:22:ae:87:53:74:d9:5b:e0:7c:e3:d6:fe:29:92: aa:db:85:fe:f7:a8:a1:4f:c2:62:79:09:ce:c5:ca:a1:a7:79: 8c:ac:26:91:7b:7a:39:c4:a9:08:ea:44:b3:87:c0:e7:a8:88: f8:88:56:b4:8a:97:b4:bb:53:88:21:e9:32:4a:66:fa:f3:73: 01:f8:18:2b:53:f1:db:ba:25:48:4a:dc:a7:29:77:2f:dc:2b: 42:c8:ff:b4:f1:e0:79:09:71:60:8a:71:6b:f1:cd:cf:46:d1: 9c:a0:7f:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjYwMzAxMDYzNjEyWhcNMjYwMzA4MDYzNjEyWjAYMRYwFAYD VQQDEw02OWEzZGU1ZC1iNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uINepl9VRxJydui8glM53AnPvJbw5okNI7PmJaKVRcqS2tLzMhR2wcLr5Gx CcWBRnP24U0cIP7Euwd97ejOaOxrc4VzKFKfG/9yzc1bEeJuvW2QsHaC6bA3V7SF /yIeoCp6PWAlKY5QGIvvLu27450ctE2rCWRxJc8OBH8GKZ7Va4Nqs7v8vg5bhmxj O0cT6uKxjUFGcsy9T1bJ7i9MfNNADSkv/r18rbTeD82aGG319pETFrAXqxNz+D02 Wio4C1o/6J6VKdnOzMerKuybV2p9RstEbwfhz1BQ6/7kH4pv/WAT1IgooXR/TB5K dUDBfnweKwy5ow3J+IP7o56LyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3tcefg f6TTf8KPoIjBurEpHq2MMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmQxljH9GNmv5m7oH8sp6P3H0PdiK/7EkXf8dMjB01kEQr+a9R0t8J+s0kTb2 zvAv9oQDXnINJ1JuDZ9wjX/gBtIes1RDLHvWksBIkLb1UDsOrWP0dZN5etB17vT/ lN4rCXAtYfrpC2ZpibmxkhvtZtMQbGU+MtTZ0iD62lTE7+oS0S08Ht7Vu/EHA7Gk cfPpU1UNPyKuh1N02VvgfOPW/imSqtuF/veooU/CYnkJzsXKoad5jKwmkXt6OcSp COpEs4fA56iI+IhWtIqXtLtTiCHpMkpm+vNzAfgYK1Px27olSErcpyl3L9wrQsj/ tPHgeQlxYIpxa/HNz0bRnKB/iA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:46 2026 by rpki-client