$ rpki-client -vvf rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft File: W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft (raw, json) Hash identifier: EwOIrLpSkHGiZWw27BS9s6tqXioGcpxBt5iQetD4Rvo= Subject key identifier: A0:53:D3:81:2A:55:BC:D5:4D:D3:C8:EA:26:F3:83:16:46:CC:AC:8A Authority key identifier: 5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD Certificate issuer: /CN=A9122DC4/serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft Manifest number: 01CF Signing time: Wed 13 May 2026 04:00:40 +0000 Manifest this update: Wed 13 May 2026 04:00:39 +0000 Manifest next update: Wed 20 May 2026 04:00:39 +0000 Files and hashes: 1: W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl (hash: qbeU/kZzQRPrla3pm7SVCQJY9X+Qkpyncl9OlUCaQqA=) 2: 2D55C84C25CE11F0A36ACB18C4F9AE02.roa (hash: ubJqUF2IGrFRV6LySQWZVQd1AO/BSkWfNqfrHnBZLZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122DC4, serialNumber=5B4300FE49AEE0E415CC61976C02B5B9C0204AAD Validity Not Before: May 13 04:00:39 2026 GMT Not After : May 20 04:00:39 2026 GMT Subject: CN=6a03f768-f791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:58:09:0a:35:74:34:5f:0c:a9:74:a9:35:80: 6a:bc:16:16:f6:27:e6:68:3d:40:de:83:fb:d8:1f: 56:69:e4:9f:d5:c2:50:e0:ad:d3:ca:c2:d4:b7:44: 23:b0:c1:63:1b:a1:a3:f5:59:59:f5:01:82:18:1b: ea:ed:b8:b4:64:81:ce:7f:7c:0b:43:f9:bf:36:2c: 8c:73:5c:82:79:10:f5:c6:03:88:c0:49:f5:ab:7d: 97:e4:06:e4:bb:e6:4c:6c:75:75:fb:a7:c4:83:98: 69:a6:ca:27:19:4f:d2:74:e0:b6:15:38:5e:9c:84: ef:1f:ec:1d:88:c7:f9:65:37:c7:42:10:7b:7d:28: b2:9f:68:58:da:4e:54:65:df:c5:d7:2d:76:9d:3e: c9:1c:d2:7a:a9:9e:b5:a7:57:ae:ed:db:d8:ae:9c: cf:a3:0a:7b:f8:b9:a6:7c:bb:04:6b:64:7b:76:2f: 2a:9d:53:54:64:dc:fc:57:9e:2c:d9:61:27:58:f7: d0:e7:72:6e:14:63:8d:0d:0d:18:35:7c:18:b7:33: 91:b4:b3:e4:8a:8a:a2:9f:29:59:8d:0a:69:64:e5: ba:5a:d7:2b:78:2a:51:9e:a9:4e:7c:b7:68:f8:cb: c5:b2:cd:2d:0f:2b:fd:28:7e:c7:f0:22:50:9b:c9: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:53:D3:81:2A:55:BC:D5:4D:D3:C8:EA:26:F3:83:16:46:CC:AC:8A X509v3 Authority Key Identifier: keyid:5B:43:00:FE:49:AE:E0:E4:15:CC:61:97:6C:02:B5:B9:C0:20:4A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W0MA_kmu4OQVzGGXbAK1ucAgSq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122DC4/5BEDD054B31611EEA8BCC624C4F9AE02/W0MA_kmu4OQVzGGXbAK1ucAgSq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:20:a9:ee:fb:f2:f0:fd:2c:5d:88:0f:12:94:05:75:8f:4d: a1:24:38:3b:7d:5a:00:9e:c1:9d:2c:89:66:1e:96:bb:24:33: ac:10:25:c0:a2:01:d3:47:cf:3b:a2:57:70:b8:71:03:4c:3c: 72:d6:c8:20:9c:d4:02:56:5e:58:b8:9b:dc:fe:63:34:c1:a1: 0d:3b:16:65:16:c6:d5:c5:65:c2:57:ee:ce:e6:a8:e0:b9:06: 59:9b:18:85:0a:3d:07:cf:2c:45:91:7e:8a:f2:c3:c4:f0:58: 7c:f4:61:b8:d6:fe:d5:16:77:17:85:a8:c4:f3:cc:53:47:c1: d6:3f:78:5a:c4:47:1f:80:62:94:f3:3e:b0:90:91:e9:19:f5: 8d:fd:9b:ff:6f:33:2a:9b:af:89:db:c7:69:f0:c8:72:19:60: ce:f3:38:75:be:54:cf:1c:fb:44:46:32:0f:91:28:45:71:1e: 32:c3:0b:b5:1a:f1:6a:6a:82:e4:d6:7b:d6:56:d9:d7:d9:85: 3e:94:e5:ea:0a:e8:17:9a:ad:3e:07:22:10:e0:5a:d2:39:76: 63:c3:91:4b:85:5c:08:06:e1:41:06:03:5f:fe:12:1f:9e:f0: 97:74:43:72:12:e6:6e:3c:b7:0d:ca:43:2b:09:96:10:79:f0: 58:df:7a:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEQzQxMTAvBgNVBAUTKDVCNDMwMEZFNDlBRUUwRTQxNUNDNjE5NzZDMDJCNUI5 QzAyMDRBQUQwHhcNMjYwNTEzMDQwMDM5WhcNMjYwNTIwMDQwMDM5WjAYMRYwFAYD VQQDEw02YTAzZjc2OC1mNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1gJCjV0NF8MqXSpNYBqvBYW9ifmaD1A3oP72B9WaeSf1cJQ4K3TysLUt0Qj sMFjG6Gj9VlZ9QGCGBvq7bi0ZIHOf3wLQ/m/NiyMc1yCeRD1xgOIwEn1q32X5Abk u+ZMbHV1+6fEg5hppsonGU/SdOC2FThenITvH+wdiMf5ZTfHQhB7fSiyn2hY2k5U Zd/F1y12nT7JHNJ6qZ61p1eu7dvYrpzPowp7+LmmfLsEa2R7di8qnVNUZNz8V54s 2WEnWPfQ53JuFGONDQ0YNXwYtzORtLPkioqinylZjQppZOW6WtcreCpRnqlOfLdo +MvFss0tDyv9KH7H8CJQm8kRkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKBT04Eq VbzVTdPI6ibzgxZGzKyKMB8GA1UdIwQYMBaAFFtDAP5JruDkFcxhl2wCtbnAIEqt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkRDNC81QkVERDA1NEIz MTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRPUVZ6R0dYYkFLMXVjQWdT cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1cwTUFfa211NE9RVnpHR1hiQUsxdWNBZ1NxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkRDNC81QkVERDA1NEIzMTYxMUVFQThCQ0M2MjRDNEY5QUUwMi9XME1BX2ttdTRP UVZ6R0dYYkFLMXVjQWdTcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcSCp7vvy8P0sXYgPEpQFdY9NoSQ4O31aAJ7BnSyJZh6WuyQzrBAlwKIB00fP O6JXcLhxA0w8ctbIIJzUAlZeWLib3P5jNMGhDTsWZRbG1cVlwlfuzuao4LkGWZsY hQo9B88sRZF+ivLDxPBYfPRhuNb+1RZ3F4WoxPPMU0fB1j94WsRHH4BilPM+sJCR 6Rn1jf2b/28zKpuvidvHafDIchlgzvM4db5Uzxz7REYyD5EoRXEeMsMLtRrxamqC 5NZ71lbZ19mFPpTl6groF5qtPgciEOBa0jl2Y8ORS4VcCAbhQQYDX/4SH57wl3RD chLmbjy3DcpDKwmWEHnwWN96Bw== -----END CERTIFICATE-----Generated at Wed May 13 13:14:47 2026 by rpki-client