$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft File: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft (raw, json) Hash identifier: oH4Z5NwEqOldD7rPVWg+PeaEbf0d03f5FCdhIRkPExY= Subject key identifier: 84:8A:0C:2E:E0:87:C5:2A:E5:F6:ED:36:59:22:FC:B5:49:AE:D2:F2 Authority key identifier: 5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 Certificate issuer: /CN=A911F8BC/serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Certificate serial: 0684 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft Manifest number: 0670 Signing time: Wed 22 Jul 2026 23:18:13 +0000 Manifest this update: Wed 22 Jul 2026 23:18:12 +0000 Manifest next update: Wed 29 Jul 2026 23:18:12 +0000 Files and hashes: 1: Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl (hash: UmGHoeRK1H2I80zXz9nGED4iQ9JOtN/O0NKJzpVXiYs=) 2: 5284A644D3DC11EB9FCD6135C4F9AE02.roa (hash: 8jTO1g3DnI3Mc9HbbuIXEWUONxgdq2EyXq0caoNDXcA=) 3: 99B4BAA6D3E411EBB67F2616C4F9AE02.roa (hash: AVEGvtOF0iwaeq96YQ9QUqPUhESEUdl2ZAme82upoYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1668 (0x684) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8BC, serialNumber=5A07E6D8F7197E34A93944EAF69398E4AA7428E9 Validity Not Before: Jul 22 23:18:12 2026 GMT Not After : Jul 29 23:18:12 2026 GMT Subject: CN=6a614fb5-2880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:76:25:ce:11:a3:84:5e:1f:68:5a:3f:65: dc:20:27:df:65:4e:3a:8e:aa:9a:46:68:2b:6f:ad: 9b:28:69:78:48:d8:c4:af:84:be:05:48:49:1a:b3: 96:95:cc:74:a9:10:21:20:50:5c:a8:7e:1b:04:4d: 79:d4:68:54:1c:1e:91:1a:db:c3:bb:7b:c5:0e:c5: f0:8a:ed:53:8b:2a:39:76:10:5d:41:bc:4e:67:09: 62:81:7a:e9:62:e7:e7:a0:b8:b9:b3:61:c0:43:22: ae:68:2a:72:f9:40:e3:5a:c6:9f:aa:c0:37:9d:a1: 9b:ed:4c:62:d6:30:eb:be:c4:1e:7c:ab:46:23:90: fd:6e:72:bf:1f:99:79:c3:90:15:b8:eb:00:61:37: 3b:f9:f1:71:51:a3:9b:77:d7:28:98:eb:fb:01:cd: 9b:8e:6b:a3:2d:0e:c8:04:41:fb:87:63:0b:fc:c9: b0:86:c9:ef:81:88:2b:a0:2b:97:ca:6f:be:ee:82: c2:ad:22:89:26:ba:c8:03:d3:20:29:db:40:ae:20: 48:2d:74:1d:b8:ce:ab:a9:3e:e5:43:d4:a8:ff:08: a6:78:03:6d:fa:a2:8a:cd:69:00:51:ab:46:dd:c3: 1c:53:4a:2b:9c:a2:52:0b:4a:2a:1f:06:06:0b:52: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8A:0C:2E:E0:87:C5:2A:E5:F6:ED:36:59:22:FC:B5:49:AE:D2:F2 X509v3 Authority Key Identifier: keyid:5A:07:E6:D8:F7:19:7E:34:A9:39:44:EA:F6:93:98:E4:AA:74:28:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8BC/B1706F48D3D811EBAA1BF410C4F9AE02/Wgfm2PcZfjSpOUTq9pOY5Kp0KOk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5f:5c:a1:5c:02:a4:94:6a:d4:72:80:c7:23:df:fd:9f:77: ec:29:36:e8:3a:b3:0f:2c:d2:10:72:d2:e4:90:fb:00:2d:7a: e9:e4:f4:4d:aa:08:c2:12:9f:92:5a:7d:54:95:81:5a:7d:42: 88:96:7d:8b:58:28:2d:c2:d1:31:56:18:72:dd:bf:8d:62:ec: a8:09:0f:98:a2:f0:2f:75:71:85:75:c4:d2:49:0a:c6:fa:f6: a1:d8:f2:da:cb:6d:24:bb:8d:c0:ac:87:21:a4:54:94:20:e0: 16:8e:51:cc:32:3c:de:68:63:45:fa:94:48:18:00:8d:f2:c9: f6:07:72:b2:32:6b:79:20:3d:f5:93:e0:fc:c7:8b:39:de:1f: d9:b4:d4:02:6b:6b:49:56:43:57:a3:96:88:f1:8c:0a:4e:dd: 24:c8:09:4d:82:f0:35:71:b2:79:b5:11:85:8b:2b:ba:6e:b9: f5:f5:a4:50:61:c7:2a:c0:e6:01:03:ef:3b:c8:bc:2f:b0:76: de:17:65:ba:58:9d:a2:5e:1b:d9:0a:db:d0:02:93:26:87:5d: 28:98:d2:fe:af:b1:40:9c:58:f7:32:79:10:64:cc:da:02:e0: 1c:04:e2:db:6b:e1:48:52:d9:ed:ee:6a:3a:d7:7c:dd:df:68: 1b:b5:90:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QkMxMTAvBgNVBAUTKDVBMDdFNkQ4RjcxOTdFMzRBOTM5NDRFQUY2OTM5OEU0 QUE3NDI4RTkwHhcNMjYwNzIyMjMxODEyWhcNMjYwNzI5MjMxODEyWjAYMRYwFAYD VQQDEw02YTYxNGZiNS0yODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvx2Jc4Ro4ReH2haP2XcICffZU46jqqaRmgrb62bKGl4SNjEr4S+BUhJGrOW lcx0qRAhIFBcqH4bBE151GhUHB6RGtvDu3vFDsXwiu1Tiyo5dhBdQbxOZwligXrp YufnoLi5s2HAQyKuaCpy+UDjWsafqsA3naGb7Uxi1jDrvsQefKtGI5D9bnK/H5l5 w5AVuOsAYTc7+fFxUaObd9comOv7Ac2bjmujLQ7IBEH7h2ML/MmwhsnvgYgroCuX ym++7oLCrSKJJrrIA9MgKdtAriBILXQduM6rqT7lQ9So/wimeANt+qKKzWkAUatG 3cMcU0ornKJSC0oqHwYGC1LECQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFISKDC7g h8Uq5fbtNlki/LVJrtLyMB8GA1UdIwQYMBaAFFoH5tj3GX40qTlE6vaTmOSqdCjp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhCQy9CMTcwNkY0OEQz RDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZqU3BPVVRxOXBPWTVLcDBL T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnZm0yUGNaZmpTcE9VVHE5cE9ZNUtwMEtPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhCQy9CMTcwNkY0OEQzRDgxMUVCQUExQkY0MTBDNEY5QUUwMi9XZ2ZtMlBjWmZq U3BPVVRxOXBPWTVLcDBLT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQF9coVwCpJRq1HKAxyPf/Z937Ck26DqzDyzSEHLS5JD7AC166eT0TaoIwhKf klp9VJWBWn1CiJZ9i1goLcLRMVYYct2/jWLsqAkPmKLwL3VxhXXE0kkKxvr2odjy 2sttJLuNwKyHIaRUlCDgFo5RzDI83mhjRfqUSBgAjfLJ9gdysjJreSA99ZPg/MeL Od4f2bTUAmtrSVZDV6OWiPGMCk7dJMgJTYLwNXGyebURhYsrum659fWkUGHHKsDm AQPvO8i8L7B23hdlulidol4b2Qrb0AKTJoddKJjS/q+xQJxY9zJ5EGTM2gLgHATi 22vhSFLZ7e5qOtd83d9oG7WQBQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:54 2026 by rpki-client