$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft File: wHDviCxuSAhkJKm18UZuG3dKRJo.mft (raw, json) Hash identifier: uQZSDjSNT14cl8Uq1wyleLjvX/35NYh3QJDNvu//83M= Subject key identifier: E3:3B:7C:8B:5A:CD:C1:0D:E0:08:76:B7:48:18:C6:DB:27:80:33:F3 Authority key identifier: C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A Certificate issuer: /CN=A914EB9A/serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft Manifest number: 0152 Signing time: Wed 25 Mar 2026 04:19:27 +0000 Manifest this update: Wed 25 Mar 2026 04:19:26 +0000 Manifest next update: Wed 01 Apr 2026 04:19:26 +0000 Files and hashes: 1: wHDviCxuSAhkJKm18UZuG3dKRJo.crl (hash: QasBpv6Dkh9tdzRJ97AAXGoZWiBvUjrCXga7zdq7FAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=C070EF882C6E48086424A9B5F1466E1B774A449A Validity Not Before: Mar 25 04:19:26 2026 GMT Not After : Apr 1 04:19:26 2026 GMT Subject: CN=69c3624f-65fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:98:e3:6b:8d:e4:6c:6e:6d:b2:8c:98:ab: 3d:2c:b3:05:be:61:b2:b5:df:b2:a8:30:94:f2:bd: a8:8b:08:b5:bb:90:d5:a7:eb:9c:e5:4c:ad:64:17: 87:53:52:bc:04:e7:d1:3c:da:fb:70:f9:7b:0f:50: 9c:8a:7e:59:e3:a1:94:39:ba:c7:81:ac:00:59:30: 16:75:ad:f8:1d:bd:77:fc:bd:fe:62:9c:29:c0:f7: 72:4a:19:69:76:9e:29:ce:d0:8a:21:6d:70:6d:bb: 12:1f:f0:19:47:9a:15:cb:6d:da:a4:6f:c9:87:14: a8:12:53:fc:a9:c1:a8:bd:77:a0:08:3b:09:5f:bf: 4f:24:cd:00:02:fe:b0:6b:52:78:91:1a:fb:2f:a3: 49:7b:42:a2:bd:77:5d:16:4b:31:cb:7f:7d:be:62: ef:59:dd:af:16:65:25:b5:34:e1:38:59:b3:47:a9: 41:cb:f1:87:8b:19:86:63:da:8d:bc:09:59:e8:96: 89:69:03:c8:c1:f4:17:1a:a1:93:e6:c2:15:35:0b: 70:80:c8:8c:c8:b9:bd:3d:fb:49:87:cd:71:42:52: b5:4e:24:19:61:78:10:2e:01:44:42:4e:ff:e9:2c: b1:50:64:c9:f6:0f:42:0c:5a:ee:a9:69:1e:94:02: 6e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3B:7C:8B:5A:CD:C1:0D:E0:08:76:B7:48:18:C6:DB:27:80:33:F3 X509v3 Authority Key Identifier: keyid:C0:70:EF:88:2C:6E:48:08:64:24:A9:B5:F1:46:6E:1B:77:4A:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wHDviCxuSAhkJKm18UZuG3dKRJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/DA6907A023C311EF892DEB21C4F9AE02/wHDviCxuSAhkJKm18UZuG3dKRJo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:37:72:30:df:fb:0e:0e:42:2d:86:f8:e6:d6:7a:00:67:1f: 26:59:75:5f:b3:f2:a1:7a:88:4c:61:5d:d8:ee:92:b6:e1:73: 30:bb:80:fc:7c:b6:ac:96:70:66:a0:2c:66:e0:2d:ba:65:ed: fe:1a:c3:75:0c:5b:d1:17:e4:06:0f:74:6d:2e:22:a5:72:7d: 33:6a:6a:1d:e7:f3:4e:0e:b1:18:6a:ac:6b:aa:1f:98:6f:68: 13:4d:5d:36:36:89:d5:37:75:04:78:ce:8d:a3:af:e1:59:da: ba:bf:6e:7a:7c:5b:0e:53:f3:a9:01:61:72:fb:5b:3e:de:62: e9:b4:3f:fc:34:34:ca:2c:8f:6e:03:e3:65:5b:c1:3c:5a:66: 59:ed:41:7e:d4:41:66:fb:17:f0:6c:9d:33:db:8a:44:9b:bb: f6:a3:7b:3b:ea:09:fc:fb:d1:60:ee:b8:5b:f8:fd:be:09:54: 94:6b:a3:ea:8e:4c:0d:0d:42:e4:2d:68:00:87:a1:d8:8d:3c: 33:01:d4:7d:1a:b6:f0:a2:00:6c:e0:66:d0:e2:49:63:71:3f: 09:f5:c6:63:0c:fe:e4:bf:8f:ba:7a:fd:46:02:79:9b:d8:c0: 40:41:3e:8a:94:8a:b9:26:d8:5a:74:18:c5:43:d0:c4:c0:97: 6b:1e:49:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKEMwNzBFRjg4MkM2RTQ4MDg2NDI0QTlCNUYxNDY2RTFC Nzc0QTQ0OUEwHhcNMjYwMzI1MDQxOTI2WhcNMjYwNDAxMDQxOTI2WjAYMRYwFAYD VQQDEw02OWMzNjI0Zi02NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvhSY42uN5GxubbKMmKs9LLMFvmGytd+yqDCU8r2oiwi1u5DVp+uc5UytZBeH U1K8BOfRPNr7cPl7D1Ccin5Z46GUObrHgawAWTAWda34Hb13/L3+YpwpwPdyShlp dp4pztCKIW1wbbsSH/AZR5oVy23apG/JhxSoElP8qcGovXegCDsJX79PJM0AAv6w a1J4kRr7L6NJe0KivXddFksxy399vmLvWd2vFmUltTThOFmzR6lBy/GHixmGY9qN vAlZ6JaJaQPIwfQXGqGT5sIVNQtwgMiMyLm9PftJh81xQlK1TiQZYXgQLgFEQk7/ 6SyxUGTJ9g9CDFruqWkelAJuiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOM7fIta zcEN4Ah2t0gYxtsngDPzMB8GA1UdIwQYMBaAFMBw74gsbkgIZCSptfFGbht3SkSa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9EQTY5MDdBMDIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNBaGtKS20xOFVadUczZEtS Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dIRHZpQ3h1U0Foa0pLbTE4VVp1RzNkS1JKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9EQTY5MDdBMDIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi93SER2aUN4dVNB aGtKS20xOFVadUczZEtSSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAojdyMN/7Dg5CLYb45tZ6AGcfJll1X7PyoXqITGFd2O6StuFzMLuA/Hy2rJZw ZqAsZuAtumXt/hrDdQxb0RfkBg90bS4ipXJ9M2pqHefzTg6xGGqsa6ofmG9oE01d NjaJ1Td1BHjOjaOv4Vnaur9uenxbDlPzqQFhcvtbPt5i6bQ//DQ0yiyPbgPjZVvB PFpmWe1BftRBZvsX8GydM9uKRJu79qN7O+oJ/PvRYO64W/j9vglUlGuj6o5MDQ1C 5C1oAIeh2I08MwHUfRq28KIAbOBm0OJJY3E/CfXGYwz+5L+Punr9RgJ5m9jAQEE+ ipSKuSbYWnQYxUPQxMCXax5JxQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:04 2026 by rpki-client