$ rpki-client -vvvf rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft File: WsdhXEWbeIEDfXXlZRpM7Db375E.mft (raw, json) Hash identifier: edcCEShSNDVg8VklN3bd3s0rVInnYCfsnGlNgVPZbWc= Subject key identifier: 6C:78:98:A2:CB:CC:67:D6:54:D4:22:25:6E:48:C3:07:D1:1B:62:E7 Authority key identifier: 5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 Certificate issuer: /CN=A915BFDA/serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Certificate serial: 0D5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft Manifest number: 0D0C Signing time: Thu 24 Sep 2026 18:18:37 +0000 Manifest this update: Thu 24 Sep 2026 18:18:36 +0000 Manifest next update: Thu 01 Oct 2026 18:18:36 +0000 Files and hashes: 1: WsdhXEWbeIEDfXXlZRpM7Db375E.crl (hash: mDSp7DhzibWWQVf6GCqFdxqmzDKHttBERVcfD5fI04s=) 2: 9888A21221DA11EBAA441F75C4F9AE02.roa (hash: 3FuLmxDCD+MP2E5xN50Lj/x322ZG9I8Yf6S6pBk1v9I=) 3: 998B917421DA11EBAA441F75C4F9AE02.roa (hash: AHwHR5P2unOzFbZF5/kMyWr9jBEmZP7l5z9TXIMdKwk=) 4: E1AF45B0232211EB8E8FB50AC4F9AE02.roa (hash: EvFkN9ZYuEFDBnjNtq9mVeqEYzT9yDvOX5AijaVncLY=) 5: 97EC93B821DA11EBAA441F75C4F9AE02.roa (hash: AHjXiMIEVnSzV4RLfQ08q+VyTYzKnjva9QjgZk6PmpU=) 6: 091F81047A5411EB9AC2283DC4F9AE02.roa (hash: ljKSat9M5iVgEMjN0irLGI7aCNi5tcJLeC8QiDxfwJM=) 7: 26F408FA027011EB98FEC44BC4F9AE02.roa (hash: 9QLph5XKLgZKwZp92nb4WN3QSXDopmzK9+Xmf9Dp/gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:18:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3418 (0xd5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BFDA, serialNumber=5AC7615C459B7881037D75E5651A4CEC36F7EF91 Validity Not Before: Sep 24 18:18:36 2026 GMT Not After : Oct 1 18:18:36 2026 GMT Subject: CN=6ab5697c-7f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9a:60:27:23:9f:46:db:c7:c1:fe:d4:b4:54: 47:7f:1f:aa:75:b4:09:e7:2c:83:da:c0:d9:2f:f2: f7:69:f8:5f:f5:86:0e:cb:2a:24:d1:7c:d6:50:ea: a7:64:21:ff:38:6f:26:3b:82:52:21:bd:34:2d:5b: 56:20:cc:04:1d:5b:ca:f9:b2:6d:85:82:d5:b7:24: a4:5c:24:5e:d3:6c:66:f2:b4:a5:08:9b:b6:bd:6d: 86:e8:3b:2d:57:31:0f:9b:47:7b:6a:97:bd:4b:9d: 0f:63:e7:9b:54:5d:b3:9b:41:d3:39:5c:46:29:8b: d6:83:70:30:49:47:a3:c7:f7:a0:92:52:6f:15:f9: 6c:31:e8:ef:e0:f7:b5:be:e3:b8:99:cf:91:2f:4c: 7c:cf:c3:fe:11:15:db:92:cb:c9:84:25:25:ee:99: 90:f8:97:7f:0e:76:ff:f2:b9:2f:34:f1:dc:4c:86: 14:87:90:74:66:57:21:13:0e:d2:c3:33:19:31:1d: ca:95:17:55:4e:a1:f1:e7:6c:36:75:64:86:4a:b8: 99:92:f9:d3:46:45:3a:8a:f8:91:fa:34:2c:49:6c: 06:d7:3a:cd:cf:8e:f5:52:78:a9:98:ad:61:42:51: 66:ed:9f:b8:40:4b:d5:a6:07:8a:08:91:84:97:4d: c2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:78:98:A2:CB:CC:67:D6:54:D4:22:25:6E:48:C3:07:D1:1B:62:E7 X509v3 Authority Key Identifier: keyid:5A:C7:61:5C:45:9B:78:81:03:7D:75:E5:65:1A:4C:EC:36:F7:EF:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WsdhXEWbeIEDfXXlZRpM7Db375E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BFDA/68127E200F4B11EAADA37977C4F9AE02/WsdhXEWbeIEDfXXlZRpM7Db375E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:21:ea:e4:7a:99:f6:c8:38:76:df:fb:ca:36:3b:fa:21:24: 93:36:e2:71:c0:fe:4d:76:04:91:68:93:8c:e1:5c:ea:d6:1a: 40:36:f5:6b:20:86:b7:62:b7:35:ea:88:bf:42:88:aa:3d:54: 72:58:40:9a:6d:e7:10:97:f7:a9:25:6d:d5:ab:e1:a5:9c:84: 5b:b2:ed:3b:8b:cd:f0:3b:f3:b8:a8:47:63:16:24:5b:4c:02: a4:7a:8b:d4:ea:06:ee:6b:22:56:cf:4b:54:70:99:84:35:d6: f3:d1:c5:5e:a4:71:20:fa:c1:47:89:12:3b:f0:a2:40:51:07: 33:8e:69:da:24:68:59:57:82:9d:49:41:3c:38:56:51:b2:48: 70:21:c0:76:1b:27:16:bd:95:67:24:5f:cd:90:ae:bc:3f:11: ff:1e:52:04:59:e9:ce:ba:76:08:ca:d6:c7:66:2e:e9:77:87: 0a:3e:47:61:5e:f9:96:db:5c:ca:76:13:99:98:5e:1e:97:ba: 8b:22:9d:39:42:4d:69:6b:e9:be:d4:48:12:25:db:48:62:b8: 6a:47:01:18:fe:0d:42:90:49:86:16:2a:9a:c5:ac:cc:a8:dc: 46:09:31:b1:d9:bd:a2:74:c4:38:43:61:39:72:cb:c2:ed:47: cd:84:61:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJGREExMTAvBgNVBAUTKDVBQzc2MTVDNDU5Qjc4ODEwMzdENzVFNTY1MUE0Q0VD MzZGN0VGOTEwHhcNMjYwOTI0MTgxODM2WhcNMjYxMDAxMTgxODM2WjAYMRYwFAYD VQQDEw02YWI1Njk3Yy03ZjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JpgJyOfRtvHwf7UtFRHfx+qdbQJ5yyD2sDZL/L3afhf9YYOyyok0XzWUOqn ZCH/OG8mO4JSIb00LVtWIMwEHVvK+bJthYLVtySkXCRe02xm8rSlCJu2vW2G6Dst VzEPm0d7ape9S50PY+ebVF2zm0HTOVxGKYvWg3AwSUejx/egklJvFflsMejv4Pe1 vuO4mc+RL0x8z8P+ERXbksvJhCUl7pmQ+Jd/Dnb/8rkvNPHcTIYUh5B0ZlchEw7S wzMZMR3KlRdVTqHx52w2dWSGSriZkvnTRkU6iviR+jQsSWwG1zrNz471UnipmK1h QlFm7Z+4QEvVpgeKCJGEl03CQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGx4mKLL zGfWVNQiJW5IwwfRG2LnMB8GA1UdIwQYMBaAFFrHYVxFm3iBA3115WUaTOw29++R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkZEQS82ODEyN0UyMDBG NEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJRURmWFhsWlJwTTdEYjM3 NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dzZGhYRVdiZUlFRGZYWGxaUnBNN0RiMzc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkZEQS82ODEyN0UyMDBGNEIxMUVBQURBMzc5NzdDNEY5QUUwMi9Xc2RoWEVXYmVJ RURmWFhsWlJwTTdEYjM3NUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3yHq5HqZ9sg4dt/7yjY7+iEkkzbiccD+TXYEkWiTjOFc6tYaQDb1ayCGt2K3 NeqIv0KIqj1UclhAmm3nEJf3qSVt1avhpZyEW7LtO4vN8DvzuKhHYxYkW0wCpHqL 1OoG7msiVs9LVHCZhDXW89HFXqRxIPrBR4kSO/CiQFEHM45p2iRoWVeCnUlBPDhW UbJIcCHAdhsnFr2VZyRfzZCuvD8R/x5SBFnpzrp2CMrWx2Yu6XeHCj5HYV75lttc ynYTmZheHpe6iyKdOUJNaWvpvtRIEiXbSGK4akcBGP4NQpBJhhYqmsWszKjcRgkx sdm9onTEOENhOXLLwu1HzYRhvQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:29:57 2026 by rpki-client