$ rpki-client -vvf rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft File: WghDEGDly0pzQThDpsLwBL78Mr8.mft (raw, json) Hash identifier: KrxmgwnscX5m473/3drF3GaegsxP0OSChRsnrMX9g/U= Subject key identifier: 01:FD:68:B6:17:38:88:E9:CD:1D:FC:F0:29:7F:E0:7C:BB:5B:D5:70 Authority key identifier: 5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF Certificate issuer: /CN=A9160DF1/serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Certificate serial: 0557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft Manifest number: 0551 Signing time: Tue 24 Mar 2026 23:06:14 +0000 Manifest this update: Tue 24 Mar 2026 23:06:14 +0000 Manifest next update: Tue 31 Mar 2026 23:06:14 +0000 Files and hashes: 1: WghDEGDly0pzQThDpsLwBL78Mr8.crl (hash: rKQz5urgWQa+wAEdEYevcGgQvZBPoV+O27vOOVEJqRo=) 2: 846935702CD911ECA528B744C4F9AE02.roa (hash: Rx8c2/nFV7enk7jXl4vzWbU4QjFW1Gfdl0mQ9/3oQuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1367 (0x557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160DF1, serialNumber=5A08431060E5CB4A73413843A6C2F004BEFC32BF Validity Not Before: Mar 24 23:06:14 2026 GMT Not After : Mar 31 23:06:14 2026 GMT Subject: CN=69c318e6-3b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:4b:c8:cf:69:b8:6f:2e:fc:e4:c7:27:c4: 37:a1:a9:31:8f:48:a6:25:7e:2a:57:8a:4f:85:e5: 4c:ba:72:3d:4f:c1:c5:0a:6c:f9:88:1d:f8:79:f1: c3:0e:e1:75:e3:51:5b:8f:3f:76:0b:99:d8:38:21: c8:b9:f0:f0:40:58:a8:b6:1b:bd:2d:90:77:15:3b: ef:1a:2b:1d:c9:7a:9d:4c:e6:f3:ba:f9:ae:63:ef: 2b:3e:e9:e7:e0:bd:c5:d5:d0:97:45:54:f1:60:57: b8:2e:cb:58:33:43:cc:23:ec:7e:14:64:c7:27:0d: e0:9f:d3:43:45:5f:80:e5:20:b2:c1:9d:9e:fa:2a: ba:6d:fa:df:e0:d3:cb:23:e6:b2:c6:87:8d:9b:a2: 3b:f9:da:7a:1c:fa:77:bd:88:fe:4c:2a:d7:fd:02: f8:b1:ab:be:8e:ec:cf:e2:5a:bd:b2:e6:64:45:e8: e9:df:f6:78:bd:85:24:6a:98:e1:2e:9b:b5:c3:5e: 70:24:d4:62:53:94:63:20:5b:0a:41:9a:73:58:73: 19:a9:b7:4a:bf:ce:7b:20:64:df:1a:d8:0a:71:4e: c4:b0:88:86:c9:90:97:3b:e8:48:e3:d8:81:fc:8d: 7a:0f:ca:c4:de:c9:7f:8e:eb:85:87:7e:0a:54:43: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FD:68:B6:17:38:88:E9:CD:1D:FC:F0:29:7F:E0:7C:BB:5B:D5:70 X509v3 Authority Key Identifier: keyid:5A:08:43:10:60:E5:CB:4A:73:41:38:43:A6:C2:F0:04:BE:FC:32:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WghDEGDly0pzQThDpsLwBL78Mr8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160DF1/E379D5A02CD511ECBB6C412BC4F9AE02/WghDEGDly0pzQThDpsLwBL78Mr8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c7:ec:18:99:45:c8:c4:d9:f5:34:c4:ef:40:6c:29:97:a8: 0e:1f:a5:4c:29:18:ce:4e:17:c2:b6:dc:15:c8:f7:ba:43:48: 6b:03:d6:5e:7d:56:85:75:be:25:db:5b:a1:0e:b2:8d:92:8e: e4:b3:aa:c7:1c:ae:d8:98:e6:8e:b9:a7:42:4a:b6:b6:5b:32: 3e:b8:50:e6:f7:84:4d:85:15:f1:e3:e2:e9:d6:9d:09:97:87: e5:e9:28:68:76:94:b8:b7:a4:32:80:04:e5:dc:ce:f4:df:eb: 87:e3:57:c8:21:fe:6b:0e:69:1d:b2:14:b6:1d:51:05:ad:cb: 82:70:0d:de:b1:ee:01:95:e9:0f:91:f7:03:74:a5:d2:7f:03: 40:04:e5:c1:06:78:18:85:29:8f:a2:ec:6d:ac:5e:55:24:3e: b1:8b:5a:f8:a2:4c:37:12:83:72:ac:00:07:e0:28:67:e0:65: 53:ee:e2:49:2b:f5:06:99:64:26:9c:70:5b:e4:ad:b3:ab:e4: 1a:32:11:0c:c8:92:24:48:f2:59:bd:f3:01:99:32:72:5a:1f: 6f:f2:d6:41:fd:61:3c:3d:a5:66:37:0a:8a:e9:e6:8c:0a:4c: f1:b0:6d:e6:bc:c9:92:ad:42:c7:09:8c:3d:22:8e:f4:4e:7c: 67:40:88:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBERjExMTAvBgNVBAUTKDVBMDg0MzEwNjBFNUNCNEE3MzQxMzg0M0E2QzJGMDA0 QkVGQzMyQkYwHhcNMjYwMzI0MjMwNjE0WhcNMjYwMzMxMjMwNjE0WjAYMRYwFAYD VQQDEw02OWMzMThlNi0zYjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvVLyM9puG8u/OTHJ8Q3oakxj0imJX4qV4pPheVMunI9T8HFCmz5iB34efHD DuF141Fbjz92C5nYOCHIufDwQFiothu9LZB3FTvvGisdyXqdTObzuvmuY+8rPunn 4L3F1dCXRVTxYFe4LstYM0PMI+x+FGTHJw3gn9NDRV+A5SCywZ2e+iq6bfrf4NPL I+ayxoeNm6I7+dp6HPp3vYj+TCrX/QL4sau+juzP4lq9suZkRejp3/Z4vYUkapjh Lpu1w15wJNRiU5RjIFsKQZpzWHMZqbdKv857IGTfGtgKcU7EsIiGyZCXO+hI49iB /I16D8rE3sl/juuFh34KVEPLZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAH9aLYX OIjpzR388Cl/4Hy7W9VwMB8GA1UdIwQYMBaAFFoIQxBg5ctKc0E4Q6bC8AS+/DK/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MERGMS9FMzc5RDVBMDJD RDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkwcHpRVGhEcHNMd0JMNzhN cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dnaERFR0RseTBwelFUaERwc0x3Qkw3OE1yOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MERGMS9FMzc5RDVBMDJDRDUxMUVDQkI2QzQxMkJDNEY5QUUwMi9XZ2hERUdEbHkw cHpRVGhEcHNMd0JMNzhNcjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbcfsGJlFyMTZ9TTE70BsKZeoDh+lTCkYzk4XwrbcFcj3ukNIawPWXn1WhXW+ JdtboQ6yjZKO5LOqxxyu2JjmjrmnQkq2tlsyPrhQ5veETYUV8ePi6dadCZeH5eko aHaUuLekMoAE5dzO9N/rh+NXyCH+aw5pHbIUth1RBa3LgnAN3rHuAZXpD5H3A3Sl 0n8DQATlwQZ4GIUpj6LsbaxeVSQ+sYta+KJMNxKDcqwAB+AoZ+BlU+7iSSv1Bplk JpxwW+Sts6vkGjIRDMiSJEjyWb3zAZkyclofb/LWQf1hPD2lZjcKiunmjApM8bBt 5rzJkq1CxwmMPSKO9E58Z0CI2g== -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:51 2026 by rpki-client