$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: yqPaFjTzIxUO+q/ESB2mJEHWDomznMqZrca/PhgCPpg= Subject key identifier: E0:E9:72:12:D5:BB:77:2C:DF:BA:71:FC:14:C6:15:31:3A:FA:1B:E0 Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 0145 Signing time: Fri 17 Apr 2026 04:57:57 +0000 Manifest this update: Fri 17 Apr 2026 04:57:57 +0000 Manifest next update: Fri 24 Apr 2026 04:57:57 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: SfNrdXkQMD3oB7quCRGLJva3LWLyitHNs0wVn4tlX30=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: clS3RHmScKkM+hzQIw2kWZ7VMnwlrU8+cVWCy3qYMaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Apr 17 04:57:57 2026 GMT Not After : Apr 24 04:57:57 2026 GMT Subject: CN=69e1bdd5-cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:93:8e:7b:ef:4a:3b:49:42:c2:56:af:63: 6d:90:2b:8a:87:eb:16:e9:88:64:79:cf:02:5d:1f: 3c:3c:5a:6b:d4:13:81:c6:0b:e5:e2:89:4e:c3:2b: 9c:7f:97:0b:4b:97:f5:34:4e:5c:3c:b4:42:41:a9: 39:9d:28:4c:43:75:ef:c6:b7:78:ac:85:47:c2:eb: a2:00:aa:e1:90:45:be:13:d2:32:3f:ba:a8:02:f0: d7:6d:c8:d9:95:bb:9f:59:04:64:e5:3c:08:2c:9f: ed:dd:b6:39:e4:95:2d:35:17:19:9b:7b:a7:a9:47: ae:3e:fb:df:9c:47:ef:9d:1c:64:07:a2:7c:c4:83: 1a:68:03:b6:27:b1:89:b2:3f:ef:61:e8:be:0c:a0: 83:73:bd:e4:ea:58:2d:95:c6:a7:8f:07:14:14:0f: 40:4d:c0:6b:d7:da:79:00:bb:41:27:7a:23:9a:05: 5f:d4:8e:d5:eb:f3:83:14:1d:3a:a6:68:cf:4f:08: ee:7a:e7:e1:9e:86:47:d4:fc:8e:f9:35:91:0f:5d: 20:8d:55:fe:4d:77:4a:30:49:ec:13:bb:19:c0:d3: 9a:71:26:a4:cd:c4:88:cd:e9:3d:a4:2f:d9:f0:89: a5:e7:69:3d:40:8c:b4:c6:15:3a:83:16:01:1b:cb: b3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:72:12:D5:BB:77:2C:DF:BA:71:FC:14:C6:15:31:3A:FA:1B:E0 X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:15:bc:19:34:1d:c5:87:4f:41:a0:e8:24:4d:1a:7a:ed:94: 6d:51:4e:2f:34:33:52:d9:13:bf:ee:4e:09:ea:8c:a4:92:9c: 5a:49:d8:84:4b:9a:a5:75:0f:16:be:ca:76:d7:35:fc:59:93: 6c:78:30:3f:aa:f9:60:7d:cd:18:12:58:40:51:7e:4c:c3:d7: 9c:ab:56:ac:e1:26:33:ff:2c:cb:35:82:3b:8d:38:50:ba:89: d2:17:76:ee:32:3b:b6:01:b3:df:df:fe:39:26:a4:a4:78:e3: 12:9a:62:63:00:ba:d7:72:ae:86:3e:89:7b:6e:81:cc:ce:73: d7:5b:48:a0:86:bb:36:ae:47:a7:73:f7:15:5e:62:c8:7d:c9: cc:16:4f:c2:a2:3d:d8:f7:26:84:98:a1:7c:2e:2d:68:8e:07: 50:af:07:7c:2a:50:6f:e2:b1:6d:22:7d:5b:6c:32:fe:a8:9b: ff:5f:c5:94:14:03:57:c0:ec:ee:f2:74:24:fa:07:68:78:40: 39:75:f2:3f:3e:b2:df:c1:7c:59:f3:9f:52:f2:57:64:65:7c: 06:ef:79:6a:cf:cf:81:43:e8:dd:6f:31:c1:25:a3:38:5f:fa: 9b:c0:55:49:1d:64:d5:3c:ed:3d:3c:59:9f:8a:3e:e7:56:7a: d4:18:79:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjYwNDE3MDQ1NzU3WhcNMjYwNDI0MDQ1NzU3WjAYMRYwFAYD VQQDEw02OWUxYmRkNS1jZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiGTjnvvSjtJQsJWr2NtkCuKh+sW6Yhkec8CXR88PFpr1BOBxgvl4olOwyuc f5cLS5f1NE5cPLRCQak5nShMQ3Xvxrd4rIVHwuuiAKrhkEW+E9IyP7qoAvDXbcjZ lbufWQRk5TwILJ/t3bY55JUtNRcZm3unqUeuPvvfnEfvnRxkB6J8xIMaaAO2J7GJ sj/vYei+DKCDc73k6lgtlcanjwcUFA9ATcBr19p5ALtBJ3ojmgVf1I7V6/ODFB06 pmjPTwjueufhnoZH1PyO+TWRD10gjVX+TXdKMEnsE7sZwNOacSakzcSIzek9pC/Z 8Iml52k9QIy0xhU6gxYBG8uzcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODpchLV u3cs37px/BTGFTE6+hvgMB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALhW8GTQdxYdPQaDoJE0aeu2UbVFOLzQzUtkTv+5OCeqMpJKcWknYhEuapXUP Fr7Kdtc1/FmTbHgwP6r5YH3NGBJYQFF+TMPXnKtWrOEmM/8syzWCO404ULqJ0hd2 7jI7tgGz39/+OSakpHjjEppiYwC613Kuhj6Je26BzM5z11tIoIa7Nq5Hp3P3FV5i yH3JzBZPwqI92PcmhJihfC4taI4HUK8HfCpQb+KxbSJ9W2wy/qib/1/FlBQDV8Ds 7vJ0JPoHaHhAOXXyPz6y38F8WfOfUvJXZGV8Bu95as/PgUPo3W8xwSWjOF/6m8BV SR1k1TztPTxZn4o+51Z61Bh5Zw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:13 2026 by rpki-client