$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft File: wUJMTMxZyaAxvhrN95gth6tX0Gg.mft (raw, json) Hash identifier: pO1FJIroLA1h+m6GcbevTGDD+h1+6TYEY9qEEjpk24o= Subject key identifier: 1B:6D:7C:7A:4F:66:EC:C3:88:FA:AF:D8:3D:F4:0F:B9:CA:0F:5E:C6 Authority key identifier: C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 Certificate issuer: /CN=A91139AB/serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft Manifest number: 0A11 Signing time: Tue 24 Mar 2026 20:59:03 +0000 Manifest this update: Tue 24 Mar 2026 20:59:02 +0000 Manifest next update: Tue 31 Mar 2026 20:59:02 +0000 Files and hashes: 1: wUJMTMxZyaAxvhrN95gth6tX0Gg.crl (hash: eDc3LwniRIfWZ+/bJk3Zr9WXyXaXQtG16iAyz0g60rI=) 2: 96AD16C6B5FA11F0A1583C84C4F9AE02.roa (hash: SXJt4LBTuAz2nJWEzDtyLdnG6MS+qN5y5TbtbC3BcFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:59:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=C1424C4CCC59C9A031BE1ACDF7982D87AB57D068 Validity Not Before: Mar 24 20:59:02 2026 GMT Not After : Mar 31 20:59:02 2026 GMT Subject: CN=69c2fb17-9d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:04:c9:98:4f:b2:ba:52:2e:ca:e5:45:16: 83:69:06:39:85:8e:33:28:90:d2:cc:8e:4c:0f:d1: d9:bb:33:7e:9e:04:25:d5:dd:6b:31:eb:db:66:37: f1:f6:00:2c:d4:67:5e:80:06:5c:41:82:5d:07:15: 10:c6:20:0b:3e:ea:48:53:ef:4b:15:a4:9e:7b:45: ed:ef:35:7d:0a:64:aa:0a:2b:1c:01:89:5f:b6:40: f0:85:94:b1:71:9e:d0:23:45:65:6f:74:dd:ca:1d: 2f:cc:e7:ca:55:65:03:fb:93:e4:73:95:49:93:c0: a1:85:00:42:87:ae:0e:a9:f6:31:c7:3b:6d:84:f4: 15:39:e2:d1:f8:5d:0c:be:33:37:ff:39:a3:1a:1e: 5f:0a:e4:d3:e4:14:39:91:e0:b6:00:f0:42:ce:ad: c1:dd:fb:09:46:68:4a:c9:55:63:46:f2:a0:46:30: 9c:75:80:06:b4:96:84:9b:17:ea:fc:bf:cb:bd:f9: bd:ad:76:4e:40:b3:83:21:1f:ba:1d:e8:5f:ae:2d: a6:46:0e:73:e1:82:76:17:11:18:5c:9c:b8:58:39: a6:71:b3:e4:fc:ca:b5:2e:b0:c2:c6:20:ae:b9:b5: 31:0f:a8:54:11:94:c9:66:9b:94:7c:4b:3d:15:4f: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6D:7C:7A:4F:66:EC:C3:88:FA:AF:D8:3D:F4:0F:B9:CA:0F:5E:C6 X509v3 Authority Key Identifier: keyid:C1:42:4C:4C:CC:59:C9:A0:31:BE:1A:CD:F7:98:2D:87:AB:57:D0:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUJMTMxZyaAxvhrN95gth6tX0Gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/wUJMTMxZyaAxvhrN95gth6tX0Gg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:24:81:68:6a:97:05:37:60:ef:fb:7d:93:2a:36:26:78:6d: 3c:7a:1d:44:c2:49:0f:c1:b5:56:19:3c:65:6c:ed:d6:7f:98: 2a:37:5e:fb:40:5c:8d:e6:06:41:0f:74:9e:b7:70:4f:7c:8d: 4d:b2:51:0a:33:29:82:cb:f2:5f:57:89:cc:4c:66:b8:f9:a3: f3:7f:44:c0:ef:22:7e:54:d1:35:f6:47:88:67:25:d5:a7:6e: 4c:c4:3c:28:b6:38:93:ba:17:a2:9c:e3:72:9f:aa:5f:c8:59: 77:8a:c7:51:76:b2:07:c5:dd:53:13:e7:da:2c:bf:e9:15:d7: 0e:b5:ec:bf:47:e5:ba:19:ed:76:01:5f:74:92:c1:e7:7f:c4: 0c:ac:ef:ad:e3:4e:7a:2f:86:bc:23:9e:8d:e0:4b:0a:f2:68: 11:c9:fb:2d:48:23:ac:5c:c2:3b:91:5a:2c:65:3e:ff:a7:02: b8:26:99:d9:70:ef:f2:f8:81:43:67:a2:8a:b3:ea:3e:c4:7f: e1:5b:87:31:60:8e:3d:d3:b2:0a:73:55:96:aa:93:81:1b:c3: 46:9e:1d:41:c1:97:61:46:bb:39:f2:7f:57:e5:42:fe:3a:32: f9:3c:40:69:18:8a:21:d5:2e:46:24:91:a2:b6:19:3e:bf:27: 0f:55:d7:75 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MzlBQjExMC8GA1UEBRMoQzE0MjRDNENDQzU5QzlBMDMxQkUxQUNERjc5ODJEODdB QjU3RDA2ODAeFw0yNjAzMjQyMDU5MDJaFw0yNjAzMzEyMDU5MDJaMBgxFjAUBgNV BAMTDTY5YzJmYjE3LTlkODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxwgTJmE+yulIuyuVFFoNpBjmFjjMokNLMjkwP0dm7M36eBCXV3Wsx69tmN/H2 ACzUZ16ABlxBgl0HFRDGIAs+6khT70sVpJ57Re3vNX0KZKoKKxwBiV+2QPCFlLFx ntAjRWVvdN3KHS/M58pVZQP7k+RzlUmTwKGFAEKHrg6p9jHHO22E9BU54tH4XQy+ Mzf/OaMaHl8K5NPkFDmR4LYA8ELOrcHd+wlGaErJVWNG8qBGMJx1gAa0loSbF+r8 v8u9+b2tdk5As4MhH7od6F+uLaZGDnPhgnYXERhcnLhYOaZxs+T8yrUusMLGIK65 tTEPqFQRlMlmm5R8Sz0VT6gNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG218ek9m 7MOI+q/YPfQPucoPXsYwHwYDVR0jBBgwFoAUwUJMTMxZyaAxvhrN95gth6tX0Ggw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzOUFCLzE1OEQ0OTA2MjU1 QjExRUJBOUY1NjAxQUM0RjlBRTAyL3dVSk1UTXhaeWFBeHZock45NWd0aDZ0WDBH Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd1VKTVRNeFp5YUF4dmhyTjk1Z3RoNnRYMEdnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEz OUFCLzE1OEQ0OTA2MjU1QjExRUJBOUY1NjAxQUM0RjlBRTAyL3dVSk1UTXhaeWFB eHZock45NWd0aDZ0WDBHZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAIJIFoapcFN2Dv+32TKjYmeG08eh1EwkkPwbVWGTxlbO3Wf5gqN177QFyN5gZB D3Set3BPfI1NslEKMymCy/JfV4nMTGa4+aPzf0TA7yJ+VNE19keIZyXVp25MxDwo tjiTuheinONyn6pfyFl3isdRdrIHxd1TE+faLL/pFdcOtey/R+W6Ge12AV90ksHn f8QMrO+t4056L4a8I56N4EsK8mgRyfstSCOsXMI7kVosZT7/pwK4JpnZcO/y+IFD Z6KKs+o+xH/hW4cxYI4907IKc1WWqpOBG8NGnh1BwZdhRrs58n9X5UL+OjL5PEBp GIoh1S5GJJGithk+vycPVdd1 -----END CERTIFICATE-----Generated at Thu Mar 26 15:08:41 2026 by rpki-client