$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft File: wzct4f6eU8GLMFFtlkxDZyLrPss.mft (raw, json) Hash identifier: wnSQ3krnIxKlpcr7MC6QFTHoeW7NrHZNJvnkitlrc/I= Subject key identifier: 18:1B:E3:BA:F6:1E:EB:34:9C:D4:63:0E:E6:D1:9E:E6:A2:AA:43:B1 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft Manifest number: 0191 Signing time: Fri 25 Sep 2026 04:32:33 +0000 Manifest this update: Fri 25 Sep 2026 04:32:32 +0000 Manifest next update: Fri 02 Oct 2026 04:32:32 +0000 Files and hashes: 1: wzct4f6eU8GLMFFtlkxDZyLrPss.crl (hash: mV1ZJQEXa4MxV761jtjVcnMcLRCDQG6gkQdwjxWXfBw=) 2: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (hash: nfTKSNk8+JIF1suVRpltXmeig8lRuHVZl1vGZQqNkWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Sep 25 04:32:32 2026 GMT Not After : Oct 2 04:32:32 2026 GMT Subject: CN=6ab5f961-6aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:f9:52:3d:d3:85:f7:3c:9f:d7:1a:98:6b: 9f:28:da:59:e2:e4:98:38:fc:94:63:e8:5c:9b:fa: 39:88:79:1f:8a:96:a0:07:b6:43:0f:27:4a:fd:71: 42:d4:0d:27:e6:57:28:fe:c7:07:8c:19:37:c4:6c: e3:97:58:26:85:9a:47:66:5b:e9:ae:f1:a7:05:8c: 07:d5:6a:15:c5:1c:1f:2d:ec:e0:a4:39:64:70:07: ce:89:92:2e:28:4c:d5:cb:42:4b:ec:41:c5:e7:80: 46:8b:1d:06:76:7c:af:e7:56:43:49:f5:77:a0:84: c1:94:8a:a0:b1:7e:91:a2:c7:d6:bd:f1:16:92:63: 86:c8:8b:e4:02:67:01:54:08:f6:df:6b:40:96:35: 4d:e3:4f:fd:d8:d9:99:ff:ff:51:95:31:77:02:30: f8:11:45:5b:ed:61:6b:8c:c3:e6:42:91:21:82:3a: 32:86:27:5b:7a:91:6b:0f:62:b7:4f:21:a9:b8:e7: f2:26:d4:1c:45:ea:eb:f5:b2:4d:35:59:7b:69:7d: 4f:32:3c:db:a7:5b:31:97:62:3c:30:7f:bc:1c:ab: c1:6b:32:d1:11:47:ea:7e:d4:48:63:40:ac:c2:24: 82:86:35:1d:ba:f0:71:7e:c6:c9:85:a9:0c:8a:41: de:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:E3:BA:F6:1E:EB:34:9C:D4:63:0E:E6:D1:9E:E6:A2:AA:43:B1 X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:11:47:a1:0d:6f:bc:8a:7e:66:0e:93:3b:40:7d:13:e0:b6: 9e:a0:3a:8f:e8:1a:c3:1b:fe:43:53:a1:ad:ec:cd:fe:e2:15: d6:b3:f9:fb:ff:28:2c:0f:ad:dd:1a:7a:2d:ab:b1:6d:e6:bc: 1b:b1:ab:1e:91:66:3c:92:38:b7:24:18:d4:8e:0b:55:7e:11: 20:41:60:86:ed:93:10:74:bc:14:11:d0:3a:72:84:61:5f:79: 40:46:1f:0b:71:e1:2e:5c:bc:a9:1c:1e:3b:81:01:57:36:d8: 8e:c5:ce:16:a7:4f:80:db:7a:97:5b:0d:af:08:d6:4b:b5:31: a9:e2:40:ef:87:a3:89:0e:ea:42:e5:2f:62:d5:0b:6f:4d:6c: 43:c6:e6:02:46:25:4d:96:23:54:63:89:03:da:51:de:88:3d: 89:3e:2b:5f:df:2c:b4:92:31:39:57:e9:4d:d6:d7:a9:3a:3b: f8:c7:9d:4b:18:eb:b5:a0:c0:ba:4e:83:82:e4:01:52:62:5e: 0a:e7:95:ab:53:92:54:00:d4:69:a8:90:ba:8a:85:59:1b:5e: 74:3f:9d:db:37:2e:3c:d0:3b:61:27:08:55:e1:59:ee:be:8b: eb:17:f7:48:81:c0:03:c4:fc:df:e8:84:ae:0f:55:2b:31:d9: 74:1c:7b:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjYwOTI1MDQzMjMyWhcNMjYxMDAyMDQzMjMyWjAYMRYwFAYD VQQDEw02YWI1Zjk2MS02YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQT5Uj3Thfc8n9camGufKNpZ4uSYOPyUY+hcm/o5iHkfipagB7ZDDydK/XFC 1A0n5lco/scHjBk3xGzjl1gmhZpHZlvprvGnBYwH1WoVxRwfLezgpDlkcAfOiZIu KEzVy0JL7EHF54BGix0Gdnyv51ZDSfV3oITBlIqgsX6RosfWvfEWkmOGyIvkAmcB VAj232tAljVN40/92NmZ//9RlTF3AjD4EUVb7WFrjMPmQpEhgjoyhidbepFrD2K3 TyGpuOfyJtQcRerr9bJNNVl7aX1PMjzbp1sxl2I8MH+8HKvBazLREUfqftRIY0Cs wiSChjUduvBxfsbJhakMikHe3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgb47r2 Hus0nNRjDubRnuaiqkOxMB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ENjRBMUZCNDVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4 R0xNRkZ0bGt4RFp5THJQc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAihFHoQ1vvIp+Zg6TO0B9E+C2nqA6j+gawxv+Q1OhrezN/uIV1rP5+/8oLA+t 3Rp6Lauxbea8G7GrHpFmPJI4tyQY1I4LVX4RIEFghu2TEHS8FBHQOnKEYV95QEYf C3HhLly8qRweO4EBVzbYjsXOFqdPgNt6l1sNrwjWS7UxqeJA74ejiQ7qQuUvYtUL b01sQ8bmAkYlTZYjVGOJA9pR3og9iT4rX98stJIxOVfpTdbXqTo7+MedSxjrtaDA uk6DguQBUmJeCueVq1OSVADUaaiQuoqFWRtedD+d2zcuPNA7YScIVeFZ7r6L6xf3 SIHAA8T83+iErg9VKzHZdBx7NA== -----END CERTIFICATE-----Generated at Fri Sep 25 12:49:17 2026 by rpki-client