$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft File: wLnBGxsWDzIbiuxM_N3a2JX8R94.mft (raw, json) Hash identifier: UDKJA03HiC1RdQxChGr8X8XHbkEYUH/J346iY2rZVzA= Subject key identifier: 9B:09:67:9B:B2:6D:3A:A3:2A:E3:A4:C6:2F:F0:3B:23:B5:0F:B4:7F Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Certificate serial: 0F2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft Manifest number: 0F07 Signing time: Tue 24 Mar 2026 17:29:04 +0000 Manifest this update: Tue 24 Mar 2026 17:29:04 +0000 Manifest next update: Tue 31 Mar 2026 17:29:04 +0000 Files and hashes: 1: wLnBGxsWDzIbiuxM_N3a2JX8R94.crl (hash: MdnwoU+tS/MpLjNcp2j1RATLeljZxoZO60j7xkM4/bc=) 2: 247099D084C611F09EBC052BC4F9AE02.roa (hash: bck0Cz+lMfFNk6rw8puMgHrMGrMhmzdTCk9wC+gqcMs=) 3: A2E6430C595F11EF8C3B3D31C4F9AE02.roa (hash: r73v/j3Pi1PsFFqeuE9PLyE/kQZzsl5EsRJ33NTzO4M=) 4: DC185D0CB0A111EE8C78834EC4F9AE02.roa (hash: XNImmACJgoKxFFAFbkf6Six9pQM8uanRw2/pmHlIZxs=) 5: A2369FBA595F11EF8C3B3D31C4F9AE02.roa (hash: 8C9LDupV6BTb73S5fdDupYh39mCxESKwTImywmqhv28=) 6: E54A88DE595F11EFB2BAB431C4F9AE02.roa (hash: Ey+GufoUI96FnTTJ85Tetyf6tWmwSdtvBWwRLD91y1c=) 7: 2569C82ADC2311F08AE4CDD5626F56BC.roa (hash: dV1q3hKs8X5N6nMqWd+23yBEXs6dRmnrwADaOuDZSJc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3885 (0xf2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE Validity Not Before: Mar 24 17:29:04 2026 GMT Not After : Mar 31 17:29:04 2026 GMT Subject: CN=69c2c9e0-7d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:1d:f6:5c:7f:c0:9e:4f:48:e7:ec:87:fd: 47:95:41:ad:df:8a:d0:af:2c:37:ff:c2:e3:88:e9: fb:d4:91:aa:0b:8b:9a:d8:a9:5f:c9:8a:6b:ae:b4: bb:53:7e:0d:75:16:97:22:b4:2f:4c:31:a3:21:a4: c4:4c:76:f7:7b:3f:14:66:c4:a4:c2:c8:32:f2:f9: 0e:d4:46:d3:0e:db:a9:86:79:cf:27:8a:26:a4:10: d4:18:b9:0e:d0:bc:1f:20:8f:70:ad:09:cc:96:6d: 3d:a6:dd:bd:6a:fd:ff:66:e2:7e:0f:27:03:08:b0: 27:af:2f:51:e4:6d:fb:a4:bf:d5:ea:3f:74:2a:0d: dc:0c:07:eb:9f:11:14:94:51:0f:db:af:49:59:59: 20:f5:09:3c:f3:1e:84:c6:42:c5:7b:8b:c5:49:8c: 56:70:b2:3f:d9:cf:49:5c:69:2b:12:b8:81:34:43: cc:cc:9e:47:19:1a:5c:20:b5:01:26:93:c3:2e:03: 72:b4:fd:48:b3:48:71:6d:8c:73:2a:33:0e:c0:01: d0:ea:ae:9b:f2:f0:52:f9:88:60:92:6d:4f:74:2a: 1b:e2:d5:25:f6:6a:40:7d:3e:ac:45:63:4f:62:c6: 93:86:17:b3:b4:d8:44:2a:72:b1:36:04:cd:17:87: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:09:67:9B:B2:6D:3A:A3:2A:E3:A4:C6:2F:F0:3B:23:B5:0F:B4:7F X509v3 Authority Key Identifier: keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e4:68:87:c8:98:b9:67:4b:6e:fc:9e:f6:70:c3:0e:51:da: ae:9b:e3:21:8c:0d:7b:9c:22:23:cd:d9:2c:c0:a1:6b:43:f3: e6:74:4d:b6:3a:4d:ac:56:2e:93:a9:ca:dc:35:e1:68:5e:db: fb:cf:dd:29:a2:db:a0:2f:0c:11:a8:ab:58:cc:33:3a:6b:02: ac:87:78:51:0d:ba:7e:da:7c:db:ef:ae:fa:9d:5d:b9:0a:2a: ca:47:f9:ee:cc:a0:c2:6e:4c:17:f3:12:f8:94:1d:75:01:eb: 3d:a1:c0:fa:2a:ac:d8:9a:83:48:fc:5a:ad:f2:cb:59:82:5b: 7e:07:5a:b8:89:2c:ce:ff:8d:27:22:4e:ae:18:25:4e:4d:a1: d7:fe:31:72:53:c4:da:7c:cb:10:1f:73:62:70:70:93:c8:14: 27:32:80:57:e8:e8:37:fb:64:d0:bd:58:09:ec:34:0f:54:57: 0a:d9:58:a3:5a:1c:74:42:53:d7:22:61:7b:a8:b3:b9:86:dc: 5a:74:c9:c6:98:cf:74:ae:8b:8f:f8:2b:59:47:a4:fb:f1:dd: 25:c0:6d:8e:f4:8b:e2:23:9b:9f:ac:d7:7d:7c:27:e4:a3:b3: 6b:84:35:a1:0c:84:5b:cb:ca:7a:9a:49:64:4c:5e:26:07:89: 66:f2:34:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4 OTVGQzQ3REUwHhcNMjYwMzI0MTcyOTA0WhcNMjYwMzMxMTcyOTA0WjAYMRYwFAYD VQQDEw02OWMyYzllMC03ZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZAd9lx/wJ5PSOfsh/1HlUGt34rQryw3/8LjiOn71JGqC4ua2KlfyYprrrS7 U34NdRaXIrQvTDGjIaTETHb3ez8UZsSkwsgy8vkO1EbTDtuphnnPJ4ompBDUGLkO 0LwfII9wrQnMlm09pt29av3/ZuJ+DycDCLAnry9R5G37pL/V6j90Kg3cDAfrnxEU lFEP269JWVkg9Qk88x6ExkLFe4vFSYxWcLI/2c9JXGkrEriBNEPMzJ5HGRpcILUB JpPDLgNytP1Is0hxbYxzKjMOwAHQ6q6b8vBS+Yhgkm1PdCob4tUl9mpAfT6sRWNP YsaThheztNhEKnKxNgTNF4cG9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJsJZ5uy bTqjKuOkxi/wOyO1D7R/MB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Njk4RS9GMTlBN0M5NDlDMUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6 SWJpdXhNX04zYTJKWDhSOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA+Roh8iYuWdLbvye9nDDDlHarpvjIYwNe5wiI83ZLMCha0Pz5nRNtjpNrFYu k6nK3DXhaF7b+8/dKaLboC8MEairWMwzOmsCrId4UQ26ftp82++u+p1duQoqykf5 7sygwm5MF/MS+JQddQHrPaHA+iqs2JqDSPxarfLLWYJbfgdauIkszv+NJyJOrhgl Tk2h1/4xclPE2nzLEB9zYnBwk8gUJzKAV+joN/tk0L1YCew0D1RXCtlYo1ocdEJT 1yJhe6izuYbcWnTJxpjPdK6Lj/grWUek+/HdJcBtjvSL4iObn6zXfXwn5KOza4Q1 oQyEW8vKeppJZExeJgeJZvI06Q== -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:29 2026 by rpki-client