$ rpki-client -vvvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: Lw0aBm9FL4i8n0jCS7SY4QoPlhZs1LuTYP5VZoDoy8I= Subject key identifier: B3:60:BD:87:1C:D0:FA:2F:8E:F3:AE:B5:F5:FC:D4:27:E9:62:6E:5A Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 2A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 29D1 Signing time: Tue 22 Sep 2026 15:32:14 +0000 Manifest this update: Tue 22 Sep 2026 15:32:14 +0000 Manifest next update: Tue 29 Sep 2026 15:32:14 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: dl9U22iZz0slPj4arSWcFIm96CCxu8kHkzMR2t7WmF4=) 2: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=) 3: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=) 4: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10765 (0x2a0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Sep 22 15:32:14 2026 GMT Not After : Sep 29 15:32:14 2026 GMT Subject: CN=6ab29f7e-402a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:e5:52:d0:b1:72:d1:a6:91:02:60:68:81: 1b:37:ec:26:e6:3f:af:91:7c:29:cd:bb:a5:f7:f1: dd:40:e3:25:82:61:95:65:b2:07:f1:bb:1f:b5:ed: ce:90:e6:68:28:fe:ad:63:b3:e1:a2:e6:c8:7a:3e: ae:4b:33:4a:a0:4c:03:e9:b8:50:37:a7:07:c5:eb: 19:61:bf:d7:f7:e1:b6:c6:90:42:78:a6:3d:a8:bd: da:7a:09:2e:ee:6b:05:a8:d4:7a:ec:a9:78:7a:7d: 5e:fe:c6:9f:b3:9f:51:56:f6:dd:31:12:6a:01:10: 59:a4:5e:b7:a6:53:cb:0a:4c:87:82:e4:53:52:12: 4d:b0:ea:f2:39:08:0a:a8:91:21:83:14:9f:62:bc: 47:35:86:60:2b:ce:09:66:e9:31:9b:02:bf:d2:f2: 9e:f9:00:f5:89:9a:6c:57:ab:b3:23:3e:63:01:d2: d8:f7:8a:ff:ca:e0:5e:d7:e0:55:6a:12:48:83:57: 08:21:6c:cf:ba:0c:be:84:60:be:19:0e:e2:ec:2e: a6:52:c9:e8:49:fa:6f:5d:f8:03:68:4e:be:f3:8e: 9a:d7:fc:66:1b:90:a7:99:ba:bf:a7:96:a6:1d:31: e3:26:5e:aa:74:62:55:35:e8:e8:3f:ee:66:27:64: 62:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:60:BD:87:1C:D0:FA:2F:8E:F3:AE:B5:F5:FC:D4:27:E9:62:6E:5A X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:38:16:92:5b:56:78:a1:0a:64:80:42:21:ef:eb:27:a9:12: f0:50:29:73:95:58:96:8c:dd:19:ab:7d:d2:ea:f2:89:fd:99: a0:7a:0a:4a:22:fe:36:7a:fc:91:8e:b9:71:3a:bb:5b:14:59: ba:ea:e8:93:78:53:b6:dd:18:b2:68:96:36:ba:ee:1d:6a:d2: 94:8c:09:c9:9b:3b:47:f1:30:a1:67:0b:fb:50:e1:f6:7f:bb: 39:44:3c:be:27:d0:f5:71:7b:92:35:59:38:e8:ac:13:dc:6e: 49:2a:44:c7:1e:e6:a5:0c:6f:27:d0:8a:c8:32:c1:eb:3b:98: 5b:67:79:7e:a7:91:77:36:e4:82:1f:e8:c7:e9:82:dc:85:44: e1:c9:65:59:fb:df:a7:51:ce:ce:b3:86:5e:ff:b9:4c:8a:39: 2a:f1:f6:d2:7f:25:8d:77:a4:37:c5:41:da:a1:00:eb:ae:fa: 30:56:ab:eb:ee:c6:91:fe:40:a2:c1:b8:7a:a8:da:80:d3:47: db:87:cd:aa:80:0c:75:a9:71:c6:d7:f5:c7:65:15:40:5e:41: c7:ea:28:0d:12:3c:18:08:bc:fd:00:f0:18:96:d6:11:dd:47: d3:3c:2a:4d:6b:e0:5b:43:68:c3:8e:7a:47:d8:7d:b3:80:ac: e3:29:0d:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjYwOTIyMTUzMjE0WhcNMjYwOTI5MTUzMjE0WjAYMRYwFAYD VQQDEw02YWIyOWY3ZS00MDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8HlUtCxctGmkQJgaIEbN+wm5j+vkXwpzbul9/HdQOMlgmGVZbIH8bsfte3O kOZoKP6tY7PhoubIej6uSzNKoEwD6bhQN6cHxesZYb/X9+G2xpBCeKY9qL3aegku 7msFqNR67Kl4en1e/safs59RVvbdMRJqARBZpF63plPLCkyHguRTUhJNsOryOQgK qJEhgxSfYrxHNYZgK84JZukxmwK/0vKe+QD1iZpsV6uzIz5jAdLY94r/yuBe1+BV ahJIg1cIIWzPugy+hGC+GQ7i7C6mUsnoSfpvXfgDaE6+846a1/xmG5Cnmbq/p5am HTHjJl6qdGJVNejoP+5mJ2Ri3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNgvYcc 0PovjvOutfX81CfpYm5aMB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUTgWkltWeKEKZIBCIe/rJ6kS8FApc5VYlozdGat90uryif2ZoHoKSiL+Nnr8 kY65cTq7WxRZuurok3hTtt0YsmiWNrruHWrSlIwJyZs7R/EwoWcL+1Dh9n+7OUQ8 vifQ9XF7kjVZOOisE9xuSSpExx7mpQxvJ9CKyDLB6zuYW2d5fqeRdzbkgh/ox+mC 3IVE4cllWfvfp1HOzrOGXv+5TIo5KvH20n8ljXekN8VB2qEA6676MFar6+7Gkf5A osG4eqjagNNH24fNqoAMdalxxtf1x2UVQF5Bx+ooDRI8GAi8/QDwGJbWEd1H0zwq TWvgW0Now456R9h9s4Cs4ykNkQ== -----END CERTIFICATE-----Generated at Wed Sep 23 12:47:43 2026 by rpki-client