$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: JQGHKKbSBLV/bPlvQEwZtyOXwTQf9jBPSR/qfm4BKU8= Subject key identifier: 88:05:85:DA:B1:18:7A:CF:5D:2D:D6:0A:46:CC:F0:3D:00:D5:B8:EC Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 29C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 298D Signing time: Tue 12 May 2026 15:35:44 +0000 Manifest this update: Tue 12 May 2026 15:35:43 +0000 Manifest next update: Tue 19 May 2026 15:35:43 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: DfcnLpyuAlfHfD6Ia8QDCBZ42yxFzFySy5b+mzvY4TA=) 2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=) 3: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=) 4: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10697 (0x29c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: May 12 15:35:43 2026 GMT Not After : May 19 15:35:43 2026 GMT Subject: CN=6a0348d0-215b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:c0:4f:24:b4:8b:4c:79:de:c0:4e:3a:99: bf:6e:54:fd:2d:aa:02:88:2f:fb:03:02:24:3f:36: 05:b7:4b:fc:8f:a7:34:18:71:be:d2:14:aa:20:2d: e7:d8:a2:e3:1b:82:43:1b:31:ff:17:81:63:d6:61: 53:4f:9d:52:e0:74:92:73:1d:de:56:e1:1f:b2:cd: 0b:c7:3b:01:87:64:34:51:3f:51:b9:1a:ab:57:e8: 4f:a2:58:ee:7e:a4:68:ca:8d:29:ea:04:e9:65:6f: 74:eb:db:b6:32:dd:57:55:66:59:12:dd:99:26:f0: 93:48:12:3f:5b:d0:99:cc:50:5f:d4:90:d4:98:f2: bb:c6:c7:c9:43:01:82:a4:c7:6e:51:ad:96:13:43: 65:16:41:19:15:2b:d1:cb:c7:32:94:19:25:b6:bf: 6d:ec:24:8e:f8:81:d6:1b:28:1f:22:88:99:fd:68: d3:62:f8:3f:b6:5e:5f:3a:aa:ce:55:23:b8:e7:32: 91:d7:d3:5f:99:d4:ae:cb:57:79:2f:c4:e5:05:f1: 02:49:2c:72:83:99:f1:c9:0e:37:19:5f:c3:32:6b: e4:b7:2b:b7:8b:70:16:26:d5:5b:bd:57:48:21:f9: 04:df:57:e0:27:27:ef:f5:7f:62:78:3c:47:0f:33: 43:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:05:85:DA:B1:18:7A:CF:5D:2D:D6:0A:46:CC:F0:3D:00:D5:B8:EC X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c7:c9:64:d5:8e:f1:34:ac:d4:f7:a9:30:dc:a3:94:1f:4c: 97:d5:b5:23:08:f2:5c:e3:e6:af:4b:dc:d6:e9:46:c1:21:02: e3:a6:c8:f4:fb:4b:8a:10:bb:29:01:45:dd:b1:77:70:f6:82: 19:23:63:9c:57:5f:78:f8:89:20:5f:6c:13:8f:8e:a7:37:a9: 0a:60:cc:c0:e5:f7:72:91:68:13:ae:9a:a1:36:34:89:df:a2: 29:39:fe:dd:a0:1f:f1:d1:a6:9a:aa:62:9b:5d:21:e4:c2:d3: f0:aa:85:2c:de:80:bc:c7:a6:e3:30:0f:30:1f:b2:b9:98:6e: 10:48:8c:26:d6:b1:81:98:a9:11:58:8d:2e:31:d3:ae:58:9b: 03:fb:21:73:e9:2a:ac:4c:93:af:fd:b4:0a:ee:da:35:3f:17: 05:63:94:88:dc:c7:46:47:d2:61:8e:50:67:65:7f:e9:df:1e: 0d:f7:2f:e9:54:07:5c:4f:14:6c:2e:da:41:14:59:f3:0a:30: fd:7d:2f:39:75:26:44:51:bc:29:57:62:b6:6e:2a:dd:08:59: d8:ae:4e:07:3f:7d:17:ed:1b:7a:dd:4a:84:0d:89:cb:34:6b: 3f:39:a4:14:75:5e:d0:73:42:a8:df:37:85:32:70:a6:b9:a4: b9:a8:5c:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjYwNTEyMTUzNTQzWhcNMjYwNTE5MTUzNTQzWjAYMRYwFAYD VQQDEw02YTAzNDhkMC0yMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/jATyS0i0x53sBOOpm/blT9LaoCiC/7AwIkPzYFt0v8j6c0GHG+0hSqIC3n 2KLjG4JDGzH/F4Fj1mFTT51S4HSScx3eVuEfss0LxzsBh2Q0UT9RuRqrV+hPolju fqRoyo0p6gTpZW9069u2Mt1XVWZZEt2ZJvCTSBI/W9CZzFBf1JDUmPK7xsfJQwGC pMduUa2WE0NlFkEZFSvRy8cylBkltr9t7CSO+IHWGygfIoiZ/WjTYvg/tl5fOqrO VSO45zKR19NfmdSuy1d5L8TlBfECSSxyg5nxyQ43GV/DMmvktyu3i3AWJtVbvVdI IfkE31fgJyfv9X9ieDxHDzNDmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgFhdqx GHrPXS3WCkbM8D0A1bjsMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAocfJZNWO8TSs1PepMNyjlB9Ml9W1IwjyXOPmr0vc1ulGwSEC46bI9PtLihC7 KQFF3bF3cPaCGSNjnFdfePiJIF9sE4+OpzepCmDMwOX3cpFoE66aoTY0id+iKTn+ 3aAf8dGmmqpim10h5MLT8KqFLN6AvMem4zAPMB+yuZhuEEiMJtaxgZipEViNLjHT rlibA/shc+kqrEyTr/20Cu7aNT8XBWOUiNzHRkfSYY5QZ2V/6d8eDfcv6VQHXE8U bC7aQRRZ8wow/X0vOXUmRFG8KVditm4q3QhZ2K5OBz99F+0bet1KhA2JyzRrPzmk FHVe0HNCqN83hTJwprmkuahctg== -----END CERTIFICATE-----Generated at Wed May 13 04:30:17 2026 by rpki-client