$ rpki-client -vvf rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft File: WfIhqdcBRydJAka2joLCl2fHDTg.mft (raw, json) Hash identifier: IGMlBcfuHAK7q/rKA+IiWCvtgh6Hu/xNkct90Gm2hM4= Subject key identifier: AA:EB:42:C3:79:01:67:9D:70:84:C7:C0:C9:23:5A:45:06:1A:DF:8D Authority key identifier: 59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 Certificate issuer: /CN=A912CE21/serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Certificate serial: 0361 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft Manifest number: 035B Signing time: Fri 27 Mar 2026 00:41:05 +0000 Manifest this update: Fri 27 Mar 2026 00:41:04 +0000 Manifest next update: Fri 03 Apr 2026 00:41:04 +0000 Files and hashes: 1: WfIhqdcBRydJAka2joLCl2fHDTg.crl (hash: +WhPn+bbznufI8QTLsVhISUmJeqynrjuw6yxq29tHes=) 2: A033FFB4F7F511ECADEAB528C4F9AE02.roa (hash: isEssEWm0725iSvQv15Srmh7ru8PYttLm9Qb+FYEb6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 00:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 865 (0x361) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CE21, serialNumber=59F221A9D7014727490246B68E82C29767C70D38 Validity Not Before: Mar 27 00:41:04 2026 GMT Not After : Apr 3 00:41:04 2026 GMT Subject: CN=69c5d220-c533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:12:cd:78:5e:5e:07:50:4c:56:8e:b7:cf:4b: 5b:26:57:8d:fe:0b:15:7e:29:4d:25:80:c6:a3:fb: 82:53:cb:b3:b8:22:8f:de:f4:01:41:3e:32:d9:fc: 2f:ed:16:9f:ba:b5:71:9d:20:27:66:23:79:a4:79: 85:f5:bb:22:57:ab:bd:e9:3d:d2:5d:b5:a3:3e:b5: f8:a1:ee:34:92:7b:be:2d:cc:40:3f:9c:48:45:d3: 22:84:53:02:99:2a:7d:75:95:5a:45:48:a3:a1:f6: b4:23:11:f2:5a:2c:ee:c2:cb:61:7e:d8:86:a1:dd: 8a:64:a2:3c:e6:97:c6:70:2e:c3:af:cc:f3:f3:f2: 74:0c:91:af:67:ee:61:20:4b:be:ef:c8:27:4b:ea: e0:8f:89:79:ba:e7:6d:e8:38:d5:90:d0:4f:89:91: bb:b3:e8:f8:eb:12:0a:45:42:09:fb:f3:2b:99:d4: 89:ea:f2:65:ff:43:07:7c:ae:e7:83:cf:82:5f:01: ad:ca:be:c3:0b:39:7f:77:af:27:cf:ab:8c:5d:06: 53:ef:b1:85:3c:d8:09:d3:35:75:07:66:0f:aa:36: 2e:db:e1:2f:5a:dc:82:70:57:f0:7e:07:29:0a:be: 0b:7f:da:2c:2d:80:b3:80:fc:6b:30:75:64:0b:76: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EB:42:C3:79:01:67:9D:70:84:C7:C0:C9:23:5A:45:06:1A:DF:8D X509v3 Authority Key Identifier: keyid:59:F2:21:A9:D7:01:47:27:49:02:46:B6:8E:82:C2:97:67:C7:0D:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WfIhqdcBRydJAka2joLCl2fHDTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CE21/CE48E7C8F19E11ECA9EE9B3DC4F9AE02/WfIhqdcBRydJAka2joLCl2fHDTg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2f:84:ec:ed:03:c0:1d:12:44:80:09:31:a4:ce:be:27:b1: 03:2f:fe:06:11:2a:6d:18:2c:95:52:59:79:51:dd:5f:99:21: 73:93:36:49:25:d6:c1:3f:4b:cd:e1:07:e0:ba:cd:d7:c3:af: 20:94:50:e6:68:30:25:56:d9:79:0d:c2:80:08:09:99:67:71: d9:dc:92:f2:98:2c:6d:5a:55:38:39:a7:d6:ff:7e:ba:2f:37: d5:5a:91:31:67:fb:19:3c:c7:5d:b9:c3:7d:c0:c6:f0:90:aa: f0:39:4b:df:01:27:27:b4:5a:dd:84:53:57:a8:1b:00:ca:a6: a4:35:66:ce:b3:0e:e5:f4:c4:4a:ed:9e:e7:b0:c5:1c:3e:42: ed:49:ca:12:26:6d:6e:99:0d:a7:cc:bf:ed:02:2a:d1:eb:09: 3c:ab:47:51:23:68:a5:b3:a1:d7:e2:f9:cc:ff:11:a0:e6:47: 21:e6:37:85:90:a3:fd:74:b4:4b:df:b3:c6:23:78:89:71:1f: 40:be:39:a3:0a:32:f3:f8:2a:c9:1b:ac:11:32:f9:48:ee:4b: 4b:44:7a:c2:a1:81:fc:ad:7d:8d:9a:be:5e:99:c4:cd:74:37: e3:03:4e:a0:25:06:89:8b:8a:c3:aa:1a:0a:a0:e8:2b:74:85: ce:49:a7:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFMjExMTAvBgNVBAUTKDU5RjIyMUE5RDcwMTQ3Mjc0OTAyNDZCNjhFODJDMjk3 NjdDNzBEMzgwHhcNMjYwMzI3MDA0MTA0WhcNMjYwNDAzMDA0MTA0WjAYMRYwFAYD VQQDEw02OWM1ZDIyMC1jNTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtBLNeF5eB1BMVo63z0tbJleN/gsVfilNJYDGo/uCU8uzuCKP3vQBQT4y2fwv 7RafurVxnSAnZiN5pHmF9bsiV6u96T3SXbWjPrX4oe40knu+LcxAP5xIRdMihFMC mSp9dZVaRUijofa0IxHyWizuwsthftiGod2KZKI85pfGcC7Dr8zz8/J0DJGvZ+5h IEu+78gnS+rgj4l5uudt6DjVkNBPiZG7s+j46xIKRUIJ+/MrmdSJ6vJl/0MHfK7n g8+CXwGtyr7DCzl/d68nz6uMXQZT77GFPNgJ0zV1B2YPqjYu2+EvWtyCcFfwfgcp Cr4Lf9osLYCzgPxrMHVkC3aOJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrrQsN5 AWedcITHwMkjWkUGGt+NMB8GA1UdIwQYMBaAFFnyIanXAUcnSQJGto6Cwpdnxw04 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0UyMS9DRTQ4RTdDOEYx OUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5ZEpBa2Eyam9MQ2wyZkhE VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dmSWhxZGNCUnlkSkFrYTJqb0xDbDJmSERUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0UyMS9DRTQ4RTdDOEYxOUUxMUVDQTlFRTlCM0RDNEY5QUUwMi9XZklocWRjQlJ5 ZEpBa2Eyam9MQ2wyZkhEVGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWi+E7O0DwB0SRIAJMaTOviexAy/+BhEqbRgslVJZeVHdX5khc5M2SSXWwT9L zeEH4LrN18OvIJRQ5mgwJVbZeQ3CgAgJmWdx2dyS8pgsbVpVODmn1v9+ui831VqR MWf7GTzHXbnDfcDG8JCq8DlL3wEnJ7Ra3YRTV6gbAMqmpDVmzrMO5fTESu2e57DF HD5C7UnKEiZtbpkNp8y/7QIq0esJPKtHUSNopbOh1+L5zP8RoOZHIeY3hZCj/XS0 S9+zxiN4iXEfQL45owoy8/gqyRusETL5SO5LS0R6wqGB/K19jZq+XpnEzXQ34wNO oCUGiYuKw6oaCqDoK3SFzkmn5Q== -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:07 2026 by rpki-client