$ rpki-client -vvvf rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft File: WAfnFR1ax7dL8iyZCSvS6S6mBig.mft (raw, json) Hash identifier: NLZ4tPEPjpQybWj413J23YBVz/gcd6G4HxngQpHDd3k= Subject key identifier: 64:10:B8:23:20:6D:53:C1:83:00:D7:16:0F:0F:AF:94:A0:F6:C6:A7 Authority key identifier: 58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 Certificate issuer: /CN=A9144EC5/serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft Manifest number: 06B9 Signing time: Thu 24 Sep 2026 22:16:47 +0000 Manifest this update: Thu 24 Sep 2026 22:16:46 +0000 Manifest next update: Thu 01 Oct 2026 22:16:46 +0000 Files and hashes: 1: WAfnFR1ax7dL8iyZCSvS6S6mBig.crl (hash: 7J7+gKXZUVcMfMAusjjnsFAhOHglkenwc2Yus51B47g=) 2: 9CCB30B0C5F411EB8A6F1525C4F9AE02.roa (hash: cW+l4MFWkFOTgr9/rmkM5v97HkQ3Gw2hu+8fduGLVYE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144EC5, serialNumber=5807E7151D5AC7B74BF22C99092BD2E92EA60628 Validity Not Before: Sep 24 22:16:46 2026 GMT Not After : Oct 1 22:16:46 2026 GMT Subject: CN=6ab5a14e-0b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c6:0f:0b:37:2d:fa:e6:b5:cd:e2:ce:18:8d: d0:42:76:d5:16:30:2b:64:57:ef:da:1f:ed:b6:ab: 32:0b:56:98:dd:5a:0b:03:01:01:48:09:30:9b:7e: 55:16:05:ed:35:cd:68:06:40:be:1b:32:96:20:12: c1:77:be:26:ff:39:10:83:d6:fa:de:d3:64:db:ee: da:2e:df:37:6d:db:5d:cc:0d:e4:93:1c:b3:2e:0d: 46:b7:25:f1:e1:c8:45:62:e2:6d:d3:59:17:57:3e: 41:72:d6:a8:2b:e6:c9:43:97:97:bd:a9:98:a6:11: 54:f8:ce:43:88:cd:5c:2f:ec:30:85:90:40:66:af: 2d:2c:8b:d6:bd:a6:fa:97:5f:6a:34:90:3a:83:9a: 16:22:ae:54:b4:52:ac:b8:8a:af:4d:f9:34:31:19: 40:ed:8e:26:de:46:19:8e:5e:16:c5:aa:b2:a0:a3: 0c:45:00:62:de:c8:34:67:e7:db:4e:46:0d:67:91: e5:4e:fb:ae:55:b3:6b:a5:38:dc:3b:2a:33:b8:1f: 33:cf:36:a2:91:12:59:d0:b1:9f:68:1f:31:86:d8: 33:b8:7a:ec:77:2e:f1:d6:fd:31:e3:3e:82:7e:57: 74:5d:9e:25:40:11:51:a0:83:4e:60:cd:26:01:d5: dd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:10:B8:23:20:6D:53:C1:83:00:D7:16:0F:0F:AF:94:A0:F6:C6:A7 X509v3 Authority Key Identifier: keyid:58:07:E7:15:1D:5A:C7:B7:4B:F2:2C:99:09:2B:D2:E9:2E:A6:06:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAfnFR1ax7dL8iyZCSvS6S6mBig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144EC5/439E3C28C51111EB91640C87C4F9AE02/WAfnFR1ax7dL8iyZCSvS6S6mBig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:96:20:6e:30:ae:df:e4:5d:35:1f:db:07:a6:05:09:44:fc: 9f:a7:22:91:cc:7e:c4:31:bd:a3:34:1f:bd:49:fb:89:93:1f: 4e:3a:31:50:b8:9c:3f:11:fa:6f:93:06:f2:37:29:f9:cc:68: 14:c3:0a:9a:bb:3a:c5:a8:72:15:97:d2:82:2e:28:03:6f:45: 22:d7:c3:68:64:13:1a:40:e5:83:91:65:7e:0c:52:4a:35:9e: 5f:ea:f7:7f:f6:87:d8:14:bb:ec:10:2d:11:fd:3c:64:ba:c7: 72:c7:74:a8:50:26:17:3c:36:21:97:10:26:28:1d:80:8c:f0: 17:1f:49:d3:b8:d3:52:f7:80:13:76:73:56:38:68:18:f4:79: 40:50:51:ea:47:54:05:7a:c2:e7:25:90:c0:f6:0c:be:de:26: b1:37:0c:c3:03:87:03:83:32:88:a8:d8:14:a1:0f:ca:a9:1b: 95:6d:7f:8a:a4:7c:fa:e3:47:a4:28:46:9d:31:3d:07:48:45: 84:18:ee:b9:79:d6:94:13:d2:ec:19:4d:06:c1:d4:7d:91:fa: 07:7f:e6:16:bf:8c:e0:75:05:3f:9d:ea:73:f0:9e:17:9e:2c: 42:f5:ce:eb:43:c4:40:48:32:db:91:05:41:c0:47:e4:a3:4c: 8a:4b:95:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFQzUxMTAvBgNVBAUTKDU4MDdFNzE1MUQ1QUM3Qjc0QkYyMkM5OTA5MkJEMkU5 MkVBNjA2MjgwHhcNMjYwOTI0MjIxNjQ2WhcNMjYxMDAxMjIxNjQ2WjAYMRYwFAYD VQQDEw02YWI1YTE0ZS0wYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsYPCzct+ua1zeLOGI3QQnbVFjArZFfv2h/ttqsyC1aY3VoLAwEBSAkwm35V FgXtNc1oBkC+GzKWIBLBd74m/zkQg9b63tNk2+7aLt83bdtdzA3kkxyzLg1GtyXx 4chFYuJt01kXVz5BctaoK+bJQ5eXvamYphFU+M5DiM1cL+wwhZBAZq8tLIvWvab6 l19qNJA6g5oWIq5UtFKsuIqvTfk0MRlA7Y4m3kYZjl4WxaqyoKMMRQBi3sg0Z+fb TkYNZ5HlTvuuVbNrpTjcOyozuB8zzzaikRJZ0LGfaB8xhtgzuHrsdy7x1v0x4z6C fld0XZ4lQBFRoINOYM0mAdXd7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQQuCMg bVPBgwDXFg8Pr5Sg9sanMB8GA1UdIwQYMBaAFFgH5xUdWse3S/IsmQkr0ukupgYo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEVDNS80MzlFM0MyOEM1 MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3ZEw4aXlaQ1N2UzZTNm1C aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBZm5GUjFheDdkTDhpeVpDU3ZTNlM2bUJpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEVDNS80MzlFM0MyOEM1MTExMUVCOTE2NDBDODdDNEY5QUUwMi9XQWZuRlIxYXg3 ZEw4aXlaQ1N2UzZTNm1CaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC5YgbjCu3+RdNR/bB6YFCUT8n6cikcx+xDG9ozQfvUn7iZMfTjoxULicPxH6 b5MG8jcp+cxoFMMKmrs6xahyFZfSgi4oA29FItfDaGQTGkDlg5FlfgxSSjWeX+r3 f/aH2BS77BAtEf08ZLrHcsd0qFAmFzw2IZcQJigdgIzwFx9J07jTUveAE3ZzVjho GPR5QFBR6kdUBXrC5yWQwPYMvt4msTcMwwOHA4MyiKjYFKEPyqkblW1/iqR8+uNH pChGnTE9B0hFhBjuuXnWlBPS7BlNBsHUfZH6B3/mFr+M4HUFP53qc/CeF54sQvXO 60PEQEgy25EFQcBH5KNMikuV1w== -----END CERTIFICATE-----Generated at Sat Sep 26 14:21:04 2026 by rpki-client