$ rpki-client -vvf rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft File: wcRvxKcZaeWFBKc01JBKe9L_BUM.mft (raw, json) Hash identifier: YzHeKlHL/chF4VSlFjhWfPzhu7e9scbM+cOKddA9UrA= Subject key identifier: 42:AD:3E:FD:4B:C5:1A:F2:52:48:5B:7C:26:FC:54:CF:DF:E7:4B:5A Authority key identifier: C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 Certificate issuer: /CN=A913E32A/serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Certificate serial: 26AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft Manifest number: 2697 Signing time: Tue 24 Mar 2026 15:37:20 +0000 Manifest this update: Tue 24 Mar 2026 15:37:20 +0000 Manifest next update: Tue 31 Mar 2026 15:37:20 +0000 Files and hashes: 1: wcRvxKcZaeWFBKc01JBKe9L_BUM.crl (hash: 5bdaiSBYxhfucOf01KatbMtmMRMi4br3+lkMAy6pcmA=) 2: ACDC884E1C1511EF93C5F728C4F9AE02.roa (hash: QK4jcNalCqSQz4zkn7/hHg5Db02y0+HKNyrD6Gn5rmo=) 3: 665C2DFC1C1511EFB1AF8F28C4F9AE02.roa (hash: iWPjEnXjIzrm+5IZL3J0A09F9tdO53qvr62Qap7pWNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9900 (0x26ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E32A, serialNumber=C1C46FC4A71969E58504A734D4904A7BD2FF0543 Validity Not Before: Mar 24 15:37:20 2026 GMT Not After : Mar 31 15:37:20 2026 GMT Subject: CN=69c2afb0-3639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:29:97:08:70:f4:19:25:14:53:40:26:4d: 1d:df:15:27:c3:97:88:89:3c:59:81:f9:00:86:0b: 2b:f0:f2:3e:e8:50:38:cd:b2:e0:98:ba:a3:d6:93: 8d:16:07:b9:e5:cd:b5:ed:58:6a:2c:f3:69:fe:f9: 43:dc:55:d3:fb:03:a5:1c:5f:6a:12:c0:75:1b:2b: cd:b4:4c:d8:a3:b0:5a:e1:fd:61:6b:05:2e:c7:17: 34:28:f7:56:c3:72:1f:ae:13:aa:06:c4:1d:12:c4: b5:6f:95:c4:55:4b:21:7c:06:62:59:eb:f3:5f:34: ec:f8:c0:84:6d:81:83:ba:03:a9:81:9e:25:86:32: 0a:8b:6c:83:84:90:f3:9b:d7:c6:ed:b4:d6:7c:0d: 4e:df:17:c2:68:31:94:02:62:f4:7a:0d:fb:06:62: cf:97:4e:9c:cf:d3:e3:ed:c6:b2:99:c4:09:32:e5: 70:40:28:57:23:6b:cd:7f:8b:a6:09:6d:8c:76:1b: 86:dc:72:94:5f:ac:0d:e3:cf:ae:cb:98:91:5e:2a: 54:11:07:7a:94:38:af:bb:e4:b7:3b:15:60:18:fe: 1a:72:1d:88:ae:bf:c8:f3:39:0e:a2:74:9b:5d:aa: d5:23:41:af:17:16:52:9b:ed:0c:a7:0f:df:94:64: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AD:3E:FD:4B:C5:1A:F2:52:48:5B:7C:26:FC:54:CF:DF:E7:4B:5A X509v3 Authority Key Identifier: keyid:C1:C4:6F:C4:A7:19:69:E5:85:04:A7:34:D4:90:4A:7B:D2:FF:05:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wcRvxKcZaeWFBKc01JBKe9L_BUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E32A/1B4F9F96FAD311E496C6E80CC4F9AE02/wcRvxKcZaeWFBKc01JBKe9L_BUM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:7d:b7:4f:5c:4a:68:90:4e:c5:97:2c:c3:b2:55:98:97:26: 41:32:dd:45:54:53:fe:f0:d4:b5:9f:c2:c1:a5:04:da:35:9d: 53:e5:03:78:1a:62:78:59:07:95:4f:6e:ad:cc:15:41:8e:a7: 7f:a2:aa:27:d6:e3:5b:9b:67:d3:61:10:4b:78:3d:02:1d:3d: b4:e9:54:7d:ef:07:6f:87:a6:66:41:0a:dd:c4:b7:37:21:cf: 36:e8:b0:1b:16:8d:ae:83:81:a8:d4:07:62:ca:64:3f:96:04: 3b:3a:0f:b5:eb:b5:13:c1:0c:66:d7:7d:c6:b7:7d:08:75:c8: 99:27:50:9d:81:d2:af:af:ff:00:27:8a:7c:55:94:9c:3d:ef: f7:f5:98:92:a6:f0:c7:be:91:9a:fb:ea:fc:d5:8a:0b:56:bf: 2f:24:44:e2:40:8e:88:9c:fe:75:d7:bf:d3:01:f9:eb:7e:ed: 26:4c:64:47:0b:07:0a:fa:d0:32:a5:6b:f9:b2:47:9f:72:24: f3:7e:86:81:89:9f:5d:00:18:aa:65:3f:51:27:f9:22:e0:f7: b8:84:69:2f:f7:cd:b7:42:47:ca:01:75:7d:5b:ef:12:e8:14: 10:83:62:ce:ba:2a:e1:e4:1f:f2:1a:a8:31:8f:f1:de:a2:02: f5:aa:57:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzMkExMTAvBgNVBAUTKEMxQzQ2RkM0QTcxOTY5RTU4NTA0QTczNEQ0OTA0QTdC RDJGRjA1NDMwHhcNMjYwMzI0MTUzNzIwWhcNMjYwMzMxMTUzNzIwWjAYMRYwFAYD VQQDEw02OWMyYWZiMC0zNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO0plwhw9BklFFNAJk0d3xUnw5eIiTxZgfkAhgsr8PI+6FA4zbLgmLqj1pON Fge55c217VhqLPNp/vlD3FXT+wOlHF9qEsB1GyvNtEzYo7Ba4f1hawUuxxc0KPdW w3IfrhOqBsQdEsS1b5XEVUshfAZiWevzXzTs+MCEbYGDugOpgZ4lhjIKi2yDhJDz m9fG7bTWfA1O3xfCaDGUAmL0eg37BmLPl06cz9Pj7caymcQJMuVwQChXI2vNf4um CW2MdhuG3HKUX6wN48+uy5iRXipUEQd6lDivu+S3OxVgGP4ach2Irr/I8zkOonSb XarVI0GvFxZSm+0Mpw/flGQ/hwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKtPv1L xRryUkhbfCb8VM/f50taMB8GA1UdIwQYMBaAFMHEb8SnGWnlhQSnNNSQSnvS/wVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTMyQS8xQjRGOUY5NkZB RDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFlV0ZCS2MwMUpCS2U5TF9C VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3djUnZ4S2NaYWVXRkJLYzAxSkJLZTlMX0JVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTMyQS8xQjRGOUY5NkZBRDMxMUU0OTZDNkU4MENDNEY5QUUwMi93Y1J2eEtjWmFl V0ZCS2MwMUpCS2U5TF9CVU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAz323T1xKaJBOxZcsw7JVmJcmQTLdRVRT/vDUtZ/CwaUE2jWdU+UDeBpieFkH lU9urcwVQY6nf6KqJ9bjW5tn02EQS3g9Ah09tOlUfe8Hb4emZkEK3cS3NyHPNuiw GxaNroOBqNQHYspkP5YEOzoPteu1E8EMZtd9xrd9CHXImSdQnYHSr6//ACeKfFWU nD3v9/WYkqbwx76Rmvvq/NWKC1a/LyRE4kCOiJz+dde/0wH5637tJkxkRwsHCvrQ MqVr+bJHn3Ik836GgYmfXQAYqmU/USf5IuD3uIRpL/fNt0JHygF1fVvvEugUEINi zroq4eQf8hqoMY/x3qIC9apXwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:36:36 2026 by rpki-client