$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft File: Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft (raw, json) Hash identifier: /QEYhtoiUOIJF9KKtOJ2Ux+nwa36nVDFsmH7gpYv6aE= Subject key identifier: 3F:45:71:42:64:5C:DC:C8:66:3D:A9:2F:06:6E:32:D2:FD:E1:58:80 Authority key identifier: 5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 Certificate issuer: /CN=A9153AC4/serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Certificate serial: 0C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft Manifest number: 0C3B Signing time: Tue 24 Mar 2026 18:35:00 +0000 Manifest this update: Tue 24 Mar 2026 18:35:00 +0000 Manifest next update: Tue 31 Mar 2026 18:35:00 +0000 Files and hashes: 1: Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl (hash: zyFTirnBfoXu4mL+txBJfQnre+8ut/h+w++nZpvGQZY=) 2: 0E50DF10261311EAAD88B67EC4F9AE02.roa (hash: OXlRXctoNSDJ6TpM3+c7wRIDQ9aRsPHJbIj87+gWXqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3143 (0xc47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AC4, serialNumber=5A8FC6D9B992322F2D7C07734543F79897ED8037 Validity Not Before: Mar 24 18:35:00 2026 GMT Not After : Mar 31 18:35:00 2026 GMT Subject: CN=69c2d954-0866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:38:9d:cf:34:73:fb:3f:53:8f:01:39:00: 2a:25:1d:04:cc:2b:29:a9:09:ff:ce:5d:65:69:66: b6:b1:b0:7f:1b:1c:8c:c1:be:1a:eb:c8:77:e3:8a: 76:13:f8:92:81:83:4a:0a:7a:bd:78:22:9d:94:6f: 05:3a:eb:55:c2:81:67:4e:cd:ea:e1:b6:90:d3:fa: c5:3f:c9:dc:0b:7d:7a:64:28:95:f8:16:a1:64:e5: 5f:5b:4d:ab:07:f0:9c:0e:11:0b:65:59:69:2d:aa: 76:ad:72:02:48:91:34:9a:75:37:8a:5d:f9:41:1d: f7:d7:f7:2f:8f:c0:13:d9:04:32:32:ac:11:bd:19: 5b:6c:6d:fb:6c:f5:c8:ad:7f:a1:69:7c:6d:be:f6: 20:cd:4b:c9:54:d1:ad:ac:80:cd:6e:1a:af:77:0b: 57:51:26:95:bf:6e:e8:84:4d:d6:33:80:5b:49:b0: 2b:ae:c5:24:3f:93:9c:cf:1c:00:85:51:be:43:d1: bd:1f:30:a5:b4:7e:7f:e8:56:6e:7e:90:22:1d:66: cb:8f:1f:26:a5:40:3c:de:bb:b5:c4:18:bd:14:06: 07:d6:aa:0c:ac:7f:f6:53:12:94:ed:fb:8e:a6:8b: 0e:78:ea:06:7c:78:70:65:27:e2:63:d5:71:0c:65: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:45:71:42:64:5C:DC:C8:66:3D:A9:2F:06:6E:32:D2:FD:E1:58:80 X509v3 Authority Key Identifier: keyid:5A:8F:C6:D9:B9:92:32:2F:2D:7C:07:73:45:43:F7:98:97:ED:80:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wo_G2bmSMi8tfAdzRUP3mJftgDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AC4/3BF4A698261011EAAD746978C4F9AE02/Wo_G2bmSMi8tfAdzRUP3mJftgDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:65:21:91:e8:c3:0d:8b:dd:95:18:01:e4:5e:86:dd:53:aa: 33:ee:71:5c:a8:db:f4:a4:c1:c9:7a:5b:e4:6a:55:dd:57:d8: d8:af:fc:f0:f2:a3:f1:3d:aa:68:a0:dc:99:8d:13:19:53:90: 6b:bb:e8:7e:46:f8:10:64:2d:4c:67:5f:74:89:7c:a0:b3:29: 37:e2:9f:1a:f7:71:27:de:77:1d:36:54:8d:66:dc:72:15:67: ac:06:fe:12:e7:0d:24:36:c2:56:c8:d6:2c:8d:9b:ae:88:93: 9b:03:20:7c:a6:91:2e:48:73:22:5f:64:a7:c6:72:e2:54:69: 8d:57:60:7c:21:eb:9b:25:1d:2a:09:26:02:05:50:78:4c:6f: 9e:55:ec:33:23:cb:66:74:68:3d:f8:69:78:66:00:83:59:85: 3c:bb:a7:2d:c5:fc:cd:da:ae:2f:37:3e:75:b3:49:00:ce:66: 8e:b8:ea:02:69:60:c4:c2:46:53:ca:31:cd:55:f2:e8:f5:1b: 42:6a:48:76:9a:39:1e:49:87:12:dd:2c:58:2d:10:50:5b:35: d4:3d:cf:8d:c4:0e:05:67:ee:71:06:0f:2f:04:7b:a8:ee:59: 6e:3a:93:32:24:ed:3b:24:57:c7:22:66:3b:83:56:4a:5d:7f: 1b:8d:4c:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBQzQxMTAvBgNVBAUTKDVBOEZDNkQ5Qjk5MjMyMkYyRDdDMDc3MzQ1NDNGNzk4 OTdFRDgwMzcwHhcNMjYwMzI0MTgzNTAwWhcNMjYwMzMxMTgzNTAwWjAYMRYwFAYD VQQDEw02OWMyZDk1NC0wODY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphw4nc80c/s/U48BOQAqJR0EzCspqQn/zl1laWa2sbB/GxyMwb4a68h344p2 E/iSgYNKCnq9eCKdlG8FOutVwoFnTs3q4baQ0/rFP8ncC316ZCiV+BahZOVfW02r B/CcDhELZVlpLap2rXICSJE0mnU3il35QR331/cvj8AT2QQyMqwRvRlbbG37bPXI rX+haXxtvvYgzUvJVNGtrIDNbhqvdwtXUSaVv27ohE3WM4BbSbArrsUkP5OczxwA hVG+Q9G9HzCltH5/6FZufpAiHWbLjx8mpUA83ru1xBi9FAYH1qoMrH/2UxKU7fuO posOeOoGfHhwZSfiY9VxDGUbEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9FcUJk XNzIZj2pLwZuMtL94ViAMB8GA1UdIwQYMBaAFFqPxtm5kjIvLXwHc0VD95iX7YA3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FDNC8zQkY0QTY5ODI2 MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01pOHRmQWR6UlVQM21KZnRn RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dvX0cyYm1TTWk4dGZBZHpSVVAzbUpmdGdEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FDNC8zQkY0QTY5ODI2MTAxMUVBQUQ3NDY5NzhDNEY5QUUwMi9Xb19HMmJtU01p OHRmQWR6UlVQM21KZnRnRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALWUhkejDDYvdlRgB5F6G3VOqM+5xXKjb9KTByXpb5GpV3VfY2K/88PKj8T2q aKDcmY0TGVOQa7vofkb4EGQtTGdfdIl8oLMpN+KfGvdxJ953HTZUjWbcchVnrAb+ EucNJDbCVsjWLI2broiTmwMgfKaRLkhzIl9kp8Zy4lRpjVdgfCHrmyUdKgkmAgVQ eExvnlXsMyPLZnRoPfhpeGYAg1mFPLunLcX8zdquLzc+dbNJAM5mjrjqAmlgxMJG U8oxzVXy6PUbQmpIdpo5HkmHEt0sWC0QUFs11D3PjcQOBWfucQYPLwR7qO5ZbjqT MiTtOyRXxyJmO4NWSl1/G41Mkg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:38:21 2026 by rpki-client