$ rpki-client -vvf rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft File: wvKOnRiEOcT-afY6TKptpCSWKR0.mft (raw, json) Hash identifier: pKjzBQCbkcbM2G2Q8RPRzHo0B8LTSyJ5rihHdKtrmro= Subject key identifier: FA:42:69:48:29:A3:A6:4B:61:84:DE:B4:97:A8:47:D4:39:8D:FF:17 Authority key identifier: C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D Certificate issuer: /CN=A9145D25/serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Certificate serial: 0637 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft Manifest number: 05EB Signing time: Thu 26 Mar 2026 22:58:41 +0000 Manifest this update: Thu 26 Mar 2026 22:58:41 +0000 Manifest next update: Thu 02 Apr 2026 22:58:41 +0000 Files and hashes: 1: wvKOnRiEOcT-afY6TKptpCSWKR0.crl (hash: xs4iUEQjqYRivWkEoqCmr4TJWzxzJbXk27XcZIYWoSw=) 2: 0E33CCCADB0911F0A26F2FDC81D3641D.roa (hash: wRUqj1U1lm/c7GaruMVl1h/KaQXgprhVdKwDeDAwvxY=) 3: 35A768B8563B11EC94608B5BC4F9AE02.roa (hash: l7BnLnchZpy3V0jQTXDCx9KU7qJONYm3aNxaqwd5cQs=) 4: 85B13C3299CE11F087D1450FC4F9AE02.roa (hash: x1M/zagdNVIvwZQzDJ/coWbKF0sT48jPU3tB0Z3LiO8=) 5: 131FA4B092AD11F0AF4F4C85C4F9AE02.roa (hash: ipyTnc82ut8pZyRx4sDro4mSJHvZJZYQ7p6XZ0S5TUo=) 6: 2379396E35DA11F08BAAE414C4F9AE02.roa (hash: wqvssZr8KniDppUjZkMFtJ/Vcm4eodrzwIwq5W5awEw=) 7: C08B939607D911EDA41A0B25C4F9AE02.roa (hash: 5mOXYDCuxkdq/XEQwoY69lXUcjkoAmJ8AwIjsdZITME=) 8: DE6603CAEBD711F092381BAE6B6F56BC.roa (hash: 7MSjFuhWPk6nWpPHBFrMgveqrJSXQoiVW5E6LTrh718=) 9: BFFF6C4A07D911EDA41A0B25C4F9AE02.roa (hash: hGESD+bTFhyy/XzxOz7JzM12GktK/1TWm0cZpyKC/pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1591 (0x637) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145D25, serialNumber=C2F28E9D188439C4FE69F63A4CAA6DA42496291D Validity Not Before: Mar 26 22:58:41 2026 GMT Not After : Apr 2 22:58:41 2026 GMT Subject: CN=69c5ba21-ee9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0d:34:32:82:ba:ef:03:f1:8b:54:71:d5:27: ba:98:2d:80:ce:a0:f9:44:37:21:16:e1:e9:66:7e: 18:1c:8b:e1:1e:3d:b1:47:41:af:c7:31:06:b6:32: 85:32:5e:e3:68:8a:1b:b1:81:46:65:cf:14:38:24: 0c:b7:e4:be:18:a5:44:af:65:28:0d:13:9e:6f:bf: 7a:c5:ab:d7:f8:48:b8:aa:77:e6:9a:02:73:b7:50: 17:3e:6e:e7:94:08:69:e2:03:8d:6e:63:79:49:8e: 64:1e:0e:f0:bb:d0:12:7c:24:9e:fc:8f:07:83:a8: 6d:5b:43:82:68:92:b2:86:40:65:4a:1e:75:a0:e6: 2d:c6:82:70:4c:5e:d4:31:0f:e8:42:1b:c8:2a:72: bb:5c:50:e0:3d:b5:0e:81:4d:f7:de:bf:53:d8:6d: 52:96:0b:a6:07:b3:31:e3:79:7d:6e:b7:4c:22:30: 1f:0c:26:f4:5c:dd:22:0d:4c:19:7a:6a:9f:5b:ca: 15:c2:f4:3b:e1:e1:84:c1:c4:89:e8:59:d0:f1:8e: 08:27:d3:41:91:cc:56:50:ec:d9:ec:90:b0:c9:e7: 9b:39:35:92:d8:d4:5d:59:b9:a8:9d:45:b5:b3:6b: b0:de:66:54:fc:bb:1d:be:82:35:36:40:e0:18:65: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:69:48:29:A3:A6:4B:61:84:DE:B4:97:A8:47:D4:39:8D:FF:17 X509v3 Authority Key Identifier: keyid:C2:F2:8E:9D:18:84:39:C4:FE:69:F6:3A:4C:AA:6D:A4:24:96:29:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvKOnRiEOcT-afY6TKptpCSWKR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145D25/67F2B0D80BD211ECBAA4806AC4F9AE02/wvKOnRiEOcT-afY6TKptpCSWKR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:80:67:51:23:9d:fc:25:c3:c6:bd:bc:d4:c7:51:9d:70:d6: 2d:87:42:15:aa:8d:67:be:17:d2:22:40:1b:97:06:bd:f8:6b: 8e:e3:6b:21:81:d2:08:7f:bb:b6:43:e8:f7:2d:f5:5a:a7:2d: 37:f1:49:74:93:b7:29:de:d0:5c:5e:15:c8:e5:ca:7b:00:ad: 94:c6:c5:d4:93:50:c5:84:6c:36:74:f5:81:1e:ad:a8:03:19: ee:b7:d9:12:e2:c0:75:b5:b5:a8:7b:43:0e:08:50:f5:86:e4: 78:cf:a2:e3:fd:40:22:28:0f:9c:4e:1f:23:f7:68:cd:e8:65: bc:4a:06:4a:9e:fa:70:66:92:99:fd:ab:4a:6f:90:00:71:fb: 3b:44:39:be:44:f9:c3:6c:75:8d:08:49:5d:9d:21:89:a7:6a: bb:ca:bc:1d:db:74:c4:4b:fe:3d:69:a4:33:6e:6e:4f:d7:87: 94:3a:dc:6c:45:bb:54:37:a9:5b:c1:1f:42:fb:29:f4:68:75: 1d:71:7b:ae:75:f6:56:dc:07:1f:25:22:44:a8:c2:bf:fa:a6: f0:09:6d:86:e2:d8:67:3c:35:7e:d3:4e:7a:1e:35:5c:48:19: 4a:dc:b9:d9:99:12:29:f2:8b:ea:6c:86:47:10:d5:1c:a8:51: 3a:8f:61:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVEMjUxMTAvBgNVBAUTKEMyRjI4RTlEMTg4NDM5QzRGRTY5RjYzQTRDQUE2REE0 MjQ5NjI5MUQwHhcNMjYwMzI2MjI1ODQxWhcNMjYwNDAyMjI1ODQxWjAYMRYwFAYD VQQDEw02OWM1YmEyMS1lZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g00MoK67wPxi1Rx1Se6mC2AzqD5RDchFuHpZn4YHIvhHj2xR0GvxzEGtjKF Ml7jaIobsYFGZc8UOCQMt+S+GKVEr2UoDROeb796xavX+Ei4qnfmmgJzt1AXPm7n lAhp4gONbmN5SY5kHg7wu9ASfCSe/I8Hg6htW0OCaJKyhkBlSh51oOYtxoJwTF7U MQ/oQhvIKnK7XFDgPbUOgU333r9T2G1SlgumB7Mx43l9brdMIjAfDCb0XN0iDUwZ emqfW8oVwvQ74eGEwcSJ6FnQ8Y4IJ9NBkcxWUOzZ7JCwyeebOTWS2NRdWbmonUW1 s2uw3mZU/LsdvoI1NkDgGGVkcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPpCaUgp o6ZLYYTetJeoR9Q5jf8XMB8GA1UdIwQYMBaAFMLyjp0YhDnE/mn2OkyqbaQklikd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUQyNS82N0YyQjBEODBC RDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9jVC1hZlk2VEtwdHBDU1dL UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d2S09uUmlFT2NULWFmWTZUS3B0cENTV0tSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUQyNS82N0YyQjBEODBCRDIxMUVDQkFBNDgwNkFDNEY5QUUwMi93dktPblJpRU9j VC1hZlk2VEtwdHBDU1dLUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqYBnUSOd/CXDxr281MdRnXDWLYdCFaqNZ74X0iJAG5cGvfhrjuNrIYHSCH+7 tkPo9y31WqctN/FJdJO3Kd7QXF4VyOXKewCtlMbF1JNQxYRsNnT1gR6tqAMZ7rfZ EuLAdbW1qHtDDghQ9YbkeM+i4/1AIigPnE4fI/dozehlvEoGSp76cGaSmf2rSm+Q AHH7O0Q5vkT5w2x1jQhJXZ0hiadqu8q8Hdt0xEv+PWmkM25uT9eHlDrcbEW7VDep W8EfQvsp9Gh1HXF7rnX2VtwHHyUiRKjCv/qm8AlthuLYZzw1ftNOeh41XEgZSty5 2ZkSKfKL6myGRxDVHKhROo9hpw== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:22 2026 by rpki-client