$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft File: WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft (raw, json) Hash identifier: L70hePKILqR7PuXN69jds2/4nSanxJd2URiqy4M+vKk= Subject key identifier: 8B:01:47:52:61:0C:37:37:54:26:B0:B5:AF:DF:86:11:A6:BA:27:D2 Authority key identifier: 5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 Certificate issuer: /CN=A9137843/serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Certificate serial: 065B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft Manifest number: 0653 Signing time: Tue 22 Sep 2026 22:20:15 +0000 Manifest this update: Tue 22 Sep 2026 22:20:15 +0000 Manifest next update: Tue 29 Sep 2026 22:20:15 +0000 Files and hashes: 1: WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl (hash: pKsOx76xMYYY/GxkAyISM6TH9Yv1Tu1DNyRm5dby574=) 2: F2DDD4EEFB3211EB967B1759C4F9AE02.roa (hash: QnCIfaBwZolfnjhgtwAliuHrR1tHCV7ZzJ1Dz2+uA9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1627 (0x65b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137843, serialNumber=5A223B9C524FAAED872721A42B3C302D971E3804 Validity Not Before: Sep 22 22:20:15 2026 GMT Not After : Sep 29 22:20:15 2026 GMT Subject: CN=6ab2ff1f-04f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:09:2e:bb:d3:43:12:01:0b:d1:de:24:e9:54: c8:10:0e:2f:77:68:19:4b:01:dd:22:0c:41:8d:14: f3:c5:3f:f5:e6:59:7d:3b:ec:88:2e:b0:30:9e:4a: 17:ae:2a:80:c7:e3:b2:7c:9d:fb:f7:93:79:7d:d0: a7:0f:a0:d9:2c:59:f0:bf:6b:8a:d8:a0:5e:ca:89: 2d:cf:a3:e2:2d:15:55:5e:35:71:d3:9d:61:8c:1e: 1e:1b:52:a6:b7:aa:ca:0d:5e:94:22:43:4c:d4:c1: 6f:18:4d:7a:e1:72:23:b4:4a:61:25:a2:05:9b:2a: 19:0a:80:55:95:f1:54:59:02:05:b6:22:58:5e:10: a1:53:81:73:5b:d8:ed:2d:fb:25:ec:fb:49:c5:87: e6:ef:86:9f:2b:28:9b:6e:47:30:34:84:18:f0:6f: 81:2c:d6:fd:b9:3d:76:e8:8d:93:e0:5e:1a:64:3c: b6:63:75:5a:a6:b9:f3:6f:ca:fb:77:3b:4f:01:46: 92:bc:53:9e:78:2b:3f:be:9d:22:b1:0d:7b:ba:b3: 1f:55:15:04:20:b4:18:a0:91:3b:68:f2:db:6b:45: 30:c9:2a:ad:96:e6:b4:06:53:6a:c0:b3:54:33:ff: 75:ba:e4:9f:97:a5:4b:aa:f4:9b:55:74:9d:9a:dd: 2c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:01:47:52:61:0C:37:37:54:26:B0:B5:AF:DF:86:11:A6:BA:27:D2 X509v3 Authority Key Identifier: keyid:5A:22:3B:9C:52:4F:AA:ED:87:27:21:A4:2B:3C:30:2D:97:1E:38:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WiI7nFJPqu2HJyGkKzwwLZceOAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137843/36CAD808EA0F11EB88A54E2FC4F9AE02/WiI7nFJPqu2HJyGkKzwwLZceOAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:42:bf:89:9f:e5:78:3b:26:25:22:c7:8c:c3:44:4f:23: 2f:0c:cf:83:32:40:45:53:68:61:be:8c:1d:25:90:19:51:2a: 41:cd:e5:85:9b:d1:32:65:c0:8f:bc:8f:8b:60:23:6f:f2:ad: 58:5d:f2:67:55:88:6d:47:51:bc:87:4c:82:41:7c:13:6b:a1: 60:91:a4:6b:aa:a2:1e:02:eb:2f:be:44:c1:12:ca:1c:21:da: 72:36:52:e1:08:98:66:86:93:c2:05:e4:fb:5b:3a:99:d1:7c: f2:65:a0:0f:ef:3c:5a:01:4c:6e:12:06:eb:75:a9:a9:e3:ae: df:28:56:ed:91:3e:2e:5d:1e:c9:51:2a:61:ac:5a:61:ac:d2: ce:12:e1:2d:86:3e:d9:d8:cf:89:f1:fe:1a:92:0d:e2:79:d0: a8:3f:e6:5d:10:41:a0:f3:34:63:e7:f9:26:ea:1b:e2:e4:0c: c9:64:a0:c8:29:8f:e9:5d:a9:96:6e:86:8f:a8:1c:55:a3:2f: 4d:57:db:c1:b6:fb:e8:f6:45:3f:b5:f1:d4:1a:a2:2c:ea:5e: 02:a4:84:e1:55:ff:26:d9:8c:47:7d:f1:87:b9:80:16:aa:ae: 4b:db:ef:ec:32:de:e3:25:85:09:78:b1:78:9d:a5:39:d7:01: a9:a6:6a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc4NDMxMTAvBgNVBAUTKDVBMjIzQjlDNTI0RkFBRUQ4NzI3MjFBNDJCM0MzMDJE OTcxRTM4MDQwHhcNMjYwOTIyMjIyMDE1WhcNMjYwOTI5MjIyMDE1WjAYMRYwFAYD VQQDEw02YWIyZmYxZi0wNGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Akuu9NDEgEL0d4k6VTIEA4vd2gZSwHdIgxBjRTzxT/15ll9O+yILrAwnkoX riqAx+OyfJ3795N5fdCnD6DZLFnwv2uK2KBeyoktz6PiLRVVXjVx051hjB4eG1Km t6rKDV6UIkNM1MFvGE164XIjtEphJaIFmyoZCoBVlfFUWQIFtiJYXhChU4FzW9jt Lfsl7PtJxYfm74afKyibbkcwNIQY8G+BLNb9uT126I2T4F4aZDy2Y3Vaprnzb8r7 dztPAUaSvFOeeCs/vp0isQ17urMfVRUEILQYoJE7aPLba0UwySqtlua0BlNqwLNU M/91uuSfl6VLqvSbVXSdmt0sbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsBR1Jh DDc3VCawta/fhhGmuifSMB8GA1UdIwQYMBaAFFoiO5xST6rthychpCs8MC2XHjgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzg0My8zNkNBRDgwOEVB MEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1MkhKeUdrS3p3d0xaY2VP QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dpSTduRkpQcXUySEp5R2tLend3TFpjZU9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzg0My8zNkNBRDgwOEVBMEYxMUVCODhBNTRFMkZDNEY5QUUwMi9XaUk3bkZKUHF1 MkhKeUdrS3p3d0xaY2VPQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2FCv4mf5Xg7JiUix4zDRE8jLwzPgzJARVNoYb6MHSWQGVEqQc3lhZvRMmXA j7yPi2Ajb/KtWF3yZ1WIbUdRvIdMgkF8E2uhYJGka6qiHgLrL75EwRLKHCHacjZS 4QiYZoaTwgXk+1s6mdF88mWgD+88WgFMbhIG63WpqeOu3yhW7ZE+Ll0eyVEqYaxa YazSzhLhLYY+2djPifH+GpIN4nnQqD/mXRBBoPM0Y+f5Juob4uQMyWSgyCmP6V2p lm6Gj6gcVaMvTVfbwbb76PZFP7Xx1BqiLOpeAqSE4VX/JtmMR33xh7mAFqquS9vv 7DLe4yWFCXixeJ2lOdcBqaZqUg== -----END CERTIFICATE-----Generated at Thu Sep 24 15:33:45 2026 by rpki-client