$ rpki-client -vvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: NQ93PgEyXprP1hjFV38YHtOTBoveYoKRC5cz369RZ30= Subject key identifier: 03:E0:99:0D:07:CE:B0:E0:C7:5C:EA:DD:C1:DF:8D:BF:14:DF:54:77 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 0698 Signing time: Wed 22 Jul 2026 23:11:04 +0000 Manifest this update: Wed 22 Jul 2026 23:11:04 +0000 Manifest next update: Wed 29 Jul 2026 23:11:04 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 5QUAUmcc1x9t92IbaHFamuEM6NveQT+uIAqGqXMIoPs=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Jul 22 23:11:04 2026 GMT Not After : Jul 29 23:11:04 2026 GMT Subject: CN=6a614e08-3997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:fb:7d:23:84:7f:cc:bc:07:0f:96:31:95: 6b:b1:f6:f0:2d:0e:83:64:f3:76:18:8b:c8:c7:70: 35:4c:66:df:77:59:cc:88:6b:87:be:97:2a:d6:3d: 80:33:c8:5c:e9:0c:ad:1e:88:98:a0:cb:bd:bc:69: 9d:0b:d7:d2:3d:b8:df:6e:74:6d:03:c8:c2:5d:46: 2b:e8:94:2d:4d:93:e2:c2:15:b9:a8:bc:88:ec:94: a7:85:fb:80:9b:6a:bc:59:91:75:23:1b:b6:2d:96: 8b:ff:aa:98:81:9e:39:dd:ee:a8:68:09:d5:20:34: 01:f9:79:9f:6f:af:22:a8:d1:9b:e2:46:97:57:af: ed:71:65:5f:6f:a6:8e:5f:2e:da:47:c0:7c:28:bf: 50:35:c9:3c:1e:02:15:83:57:db:21:f7:71:24:6d: 8b:32:48:7b:57:9a:a8:45:3a:22:c2:47:3f:9f:e9: fa:c2:65:2b:bc:09:b2:c9:02:30:04:4b:be:48:e2: 22:1b:47:85:6b:98:d8:f8:3d:5c:c2:b7:1d:4f:9d: a7:e5:b5:18:af:2c:5b:49:63:1c:fa:59:3f:1b:07: 28:fa:2a:84:58:84:81:22:b8:f0:5c:69:0f:51:85: 76:8e:64:ae:e7:eb:8f:83:0e:48:8a:95:cf:30:6f: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E0:99:0D:07:CE:B0:E0:C7:5C:EA:DD:C1:DF:8D:BF:14:DF:54:77 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cd:4a:eb:59:c9:50:e6:8e:93:41:c1:13:6b:12:83:63:7d: 2b:e0:40:cb:51:fc:2b:f6:bd:c4:f9:be:65:02:62:7d:f1:2d: 80:a9:fe:ad:b1:8c:f6:0d:58:73:1a:23:84:55:fa:69:d7:b3: 59:8a:6b:8f:cc:d1:28:68:a3:37:e6:7a:40:7c:0d:84:bc:82: 5b:00:67:b3:07:61:12:3d:cd:5b:f6:f0:b9:b1:75:a5:39:18: 48:77:83:0d:e5:39:4f:55:43:27:a4:d2:01:91:e6:5a:f1:38: 72:0d:a6:80:6f:81:6f:1b:46:06:1b:57:bc:1d:57:fb:3e:27: ed:b3:a3:26:78:55:bb:c1:3e:40:2b:30:3b:2f:65:44:38:02: 49:94:3a:51:9e:ac:4e:26:0c:5f:cd:db:50:e5:35:f5:33:51: 44:f2:9f:cd:3f:02:21:e1:85:8d:47:6f:40:9e:23:0a:2d:4e: 3b:2b:e2:1e:44:2f:97:a3:e4:1a:50:04:e7:3c:b5:3d:52:bc: 1b:8e:be:43:61:2c:37:5a:4c:0a:ef:08:3b:3f:c3:6d:36:d7: 5e:85:9a:e9:3a:f9:46:c4:7d:f9:3e:67:6b:9c:6a:35:05:d6: 30:d7:eb:6e:0e:c3:c1:92:2f:5a:8e:90:41:2a:f0:9f:3a:c7: 3d:c1:f1:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwNzIyMjMxMTA0WhcNMjYwNzI5MjMxMTA0WjAYMRYwFAYD VQQDEw02YTYxNGUwOC0zOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbT7fSOEf8y8Bw+WMZVrsfbwLQ6DZPN2GIvIx3A1TGbfd1nMiGuHvpcq1j2A M8hc6QytHoiYoMu9vGmdC9fSPbjfbnRtA8jCXUYr6JQtTZPiwhW5qLyI7JSnhfuA m2q8WZF1Ixu2LZaL/6qYgZ453e6oaAnVIDQB+Xmfb68iqNGb4kaXV6/tcWVfb6aO Xy7aR8B8KL9QNck8HgIVg1fbIfdxJG2LMkh7V5qoRToiwkc/n+n6wmUrvAmyyQIw BEu+SOIiG0eFa5jY+D1cwrcdT52n5bUYryxbSWMc+lk/Gwco+iqEWISBIrjwXGkP UYV2jmSu5+uPgw5IipXPMG8wOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAPgmQ0H zrDgx1zq3cHfjb8U31R3MB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMM1K61nJUOaOk0HBE2sSg2N9K+BAy1H8K/a9xPm+ZQJiffEtgKn+rbGM9g1Y cxojhFX6adezWYprj8zRKGijN+Z6QHwNhLyCWwBnswdhEj3NW/bwubF1pTkYSHeD DeU5T1VDJ6TSAZHmWvE4cg2mgG+BbxtGBhtXvB1X+z4n7bOjJnhVu8E+QCswOy9l RDgCSZQ6UZ6sTiYMX83bUOU19TNRRPKfzT8CIeGFjUdvQJ4jCi1OOyviHkQvl6Pk GlAE5zy1PVK8G46+Q2EsN1pMCu8IOz/DbTbXXoWa6Tr5RsR9+T5na5xqNQXWMNfr bg7DwZIvWo6QQSrwnzrHPcHxAQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:59 2026 by rpki-client