$ rpki-client -vvvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: phCxPcGo52qk+EvrCKr/9MB+2ZlYQ5+8hdS8k8km3VI= Subject key identifier: 06:7E:E0:2A:45:93:30:01:F4:74:24:52:6C:1C:BE:15:B1:16:18:41 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 064B Signing time: Tue 22 Sep 2026 22:36:11 +0000 Manifest this update: Tue 22 Sep 2026 22:36:10 +0000 Manifest next update: Tue 29 Sep 2026 22:36:10 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: 5Kcxevz7bYoBsMg/d1jwiAhyucjhEMvHXZnZPrCzaoM=) 2: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: ZABorRdOgk7wbU+CvLj5803xv1dV9HRIAI1lvnJcQOE=) 3: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=) 4: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=) 5: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=) 6: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=) 7: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=) 8: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=) 9: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: 39V53YzmDceqUazb8d3OVe2vw3wPvdKD2B/YmH5KoRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 22:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Sep 22 22:36:10 2026 GMT Not After : Sep 29 22:36:10 2026 GMT Subject: CN=6ab302db-c5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a3:1f:c2:61:60:c8:15:87:b0:5d:da:cf:67: 89:3e:77:e8:26:34:c2:a2:5f:ad:1e:7b:11:dd:97: 55:3c:1c:3a:02:e7:a8:5f:a5:56:49:11:e6:36:58: c2:91:24:61:d7:fb:67:6b:45:f6:78:a8:5a:cf:c1: 05:25:00:d3:53:9a:01:b5:be:17:8e:08:55:92:37: e0:a9:53:34:61:b1:73:f9:40:ec:ae:69:6b:84:cd: 1c:6b:82:3f:bd:0f:f4:21:58:ec:98:74:ee:35:30: a0:31:34:fc:27:ef:bb:95:48:7d:83:61:09:02:5c: 89:52:d6:11:14:3f:2e:d9:98:1a:61:6c:d8:a9:12: 83:87:9c:10:c4:38:cd:22:92:38:05:78:81:51:4a: f8:a7:f5:37:3c:d7:8d:c6:7b:6b:4e:c9:43:19:44: ac:c0:f6:bd:06:24:ac:72:ac:53:5d:15:51:14:54: 67:8d:19:7b:d2:1f:67:0c:51:ea:4a:99:84:15:35: 33:9c:53:74:58:b5:5f:8e:93:0f:45:cf:c3:dc:d0: 38:fc:4b:7a:39:94:17:99:26:b1:8b:2c:91:cb:e8: 96:0b:63:48:b9:ab:0f:45:cc:8b:1c:8a:6c:74:9b: 9c:aa:77:5c:46:fa:4a:cc:8a:77:09:c6:cb:75:04: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7E:E0:2A:45:93:30:01:F4:74:24:52:6C:1C:BE:15:B1:16:18:41 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d0:3e:11:42:f0:98:0f:0e:34:56:3e:30:2e:f4:76:64:2f: f9:85:e4:03:3f:6b:e5:74:15:81:1d:04:44:02:6f:21:65:9f: b7:97:30:a6:6a:bf:e2:1c:e0:9e:9d:b3:47:d3:c1:2e:b8:d3: 84:c2:86:74:bd:ae:95:eb:5a:ff:c3:4b:42:8e:5f:76:80:a0: a1:72:41:99:19:7d:72:47:1d:e5:9d:17:af:8b:5d:dc:17:e2: 75:b2:f4:6a:a3:e9:68:b9:8f:9b:36:66:4e:9d:6b:59:e3:4e: 5d:78:aa:51:b2:c5:cc:12:5a:1a:aa:41:d9:cf:35:9b:c1:b7: f8:35:cf:99:23:45:91:09:31:69:57:7c:39:58:e9:96:35:67: 05:d0:a7:57:35:2f:d8:fd:7b:55:2e:af:db:e6:2e:97:bf:6e: 11:1a:e3:34:73:b9:55:00:56:90:af:85:8a:60:3d:fb:8e:77: 78:1c:d4:b9:73:6e:21:ae:bd:8b:cd:f4:7a:df:a4:bc:dd:9f: 86:83:68:66:c6:ed:c1:3b:f6:18:47:ce:54:2d:8a:97:43:cc: 6b:24:fb:74:18:94:d5:a7:87:0d:34:e9:6f:d4:c1:f3:02:ed: 23:4d:a9:c7:47:07:13:56:e8:16:eb:36:34:bc:ac:be:9c:5e: 43:9b:c2:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwOTIyMjIzNjEwWhcNMjYwOTI5MjIzNjEwWjAYMRYwFAYD VQQDEw02YWIzMDJkYi1jNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KMfwmFgyBWHsF3az2eJPnfoJjTCol+tHnsR3ZdVPBw6AueoX6VWSRHmNljC kSRh1/tna0X2eKhaz8EFJQDTU5oBtb4XjghVkjfgqVM0YbFz+UDsrmlrhM0ca4I/ vQ/0IVjsmHTuNTCgMTT8J++7lUh9g2EJAlyJUtYRFD8u2ZgaYWzYqRKDh5wQxDjN IpI4BXiBUUr4p/U3PNeNxntrTslDGUSswPa9BiSscqxTXRVRFFRnjRl70h9nDFHq SpmEFTUznFN0WLVfjpMPRc/D3NA4/Et6OZQXmSaxiyyRy+iWC2NIuasPRcyLHIps dJucqndcRvpKzIp3CcbLdQT3VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZ+4CpF kzAB9HQkUmwcvhWxFhhBMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtA+EULwmA8ONFY+MC70dmQv+YXkAz9r5XQVgR0ERAJvIWWft5cwpmq/4hzg np2zR9PBLrjThMKGdL2uleta/8NLQo5fdoCgoXJBmRl9ckcd5Z0Xr4td3BfidbL0 aqPpaLmPmzZmTp1rWeNOXXiqUbLFzBJaGqpB2c81m8G3+DXPmSNFkQkxaVd8OVjp ljVnBdCnVzUv2P17VS6v2+Yul79uERrjNHO5VQBWkK+FimA9+453eBzUuXNuIa69 i830et+kvN2fhoNoZsbtwTv2GEfOVC2Kl0PMayT7dBiU1aeHDTTpb9TB8wLtI02p x0cHE1boFus2NLysvpxeQ5vCaQ== -----END CERTIFICATE-----Generated at Thu Sep 24 03:07:53 2026 by rpki-client