$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: TpHAg1VyPd4Y+/ko37mZZ1+lI3YrktGlM7dPeWxR1nM= Subject key identifier: 40:D5:9B:2C:8E:D1:CF:2B:E1:EC:AD:97:81:23:8B:4F:77:0F:9A:EF Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: 0154 Signing time: Wed 23 Sep 2026 05:08:06 +0000 Manifest this update: Wed 23 Sep 2026 05:08:06 +0000 Manifest next update: Wed 30 Sep 2026 05:08:06 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: jZupGQ8B00iJa9pjAiiZ5kKU+puJg5CHwCHue+EKYGA=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: seNWkSzPB+y0QnMqGd7lzmRBQ9fM1nYcZLpQ+T55VyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 05:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Sep 23 05:08:06 2026 GMT Not After : Sep 30 05:08:06 2026 GMT Subject: CN=6ab35eb6-0da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:c6:50:7f:80:22:bc:7a:6b:fa:9c:a3:1d: 61:f5:97:20:ef:4d:03:b4:31:a8:3a:7d:41:da:9f: 2f:94:b5:ba:37:6b:4b:f2:16:f2:f4:a4:c3:4f:ce: 46:39:55:35:9d:cc:09:66:14:eb:ba:fe:ad:81:95: 61:6d:1b:e9:39:33:b7:f1:d4:a2:ba:d7:32:9e:dc: d4:74:a5:4f:43:54:57:c2:e5:cd:a6:82:a7:9e:1b: 46:fd:2d:1e:f3:28:57:da:a0:0a:62:ea:b4:ec:0c: 29:7e:2c:6c:2d:2a:af:d9:1e:38:c0:c1:11:d4:e3: bf:41:a1:3e:5d:23:0f:fd:16:d2:d7:ac:41:77:68: 75:77:e1:4f:61:b4:19:5f:ce:43:ab:53:63:25:02: 1c:e9:a8:70:4d:b1:a2:2e:54:31:a9:0f:2c:7a:bc: 60:76:ab:ce:0c:11:56:58:3a:10:5c:17:1f:0f:41: 87:75:57:a3:17:6e:22:ef:44:72:a6:b0:71:03:af: ff:0a:83:46:ed:a7:12:93:3d:ea:5b:6e:30:3d:d1: c4:4f:a0:5d:43:61:e1:91:2c:ec:1f:ab:e4:36:8e: 64:bb:03:dc:ed:7c:51:04:b6:c1:af:c4:ba:3f:3a: b6:9e:55:6d:8c:6e:3e:1a:cb:7e:1b:75:ff:3f:db: 4b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:9B:2C:8E:D1:CF:2B:E1:EC:AD:97:81:23:8B:4F:77:0F:9A:EF X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:a5:a2:33:81:ee:4d:04:b6:a0:78:dc:0d:e5:af:62:b2:84: b1:51:12:c0:ca:56:c9:1e:d4:fc:c6:6f:1c:52:02:9a:96:48: e0:ac:df:44:29:27:0e:d1:0c:31:1e:d0:e3:a6:e8:db:d2:fb: 60:f7:76:c0:28:8e:67:46:43:ab:cc:73:f6:62:1f:e3:cd:e9: 21:a1:cd:b5:1e:cf:96:f4:dd:6a:5c:1e:2e:be:85:f7:ee:02: 80:cf:cb:f2:6f:45:74:71:03:39:16:7d:f3:6b:d8:58:5b:f4: c4:9b:7f:28:d0:3a:77:c9:89:dd:51:b0:d3:2f:78:51:e3:b0: b0:08:b2:5f:72:fb:5e:ba:ff:7a:f0:1d:15:ca:24:c0:8c:dc: f6:e7:57:11:d7:1b:6a:5f:f1:9f:2d:b4:0e:52:58:68:60:0d: 15:f0:6e:43:a3:a9:47:64:ad:b3:de:b9:61:4c:63:51:d8:38: ed:64:af:de:1a:f8:e1:c3:e3:7d:72:77:74:98:08:e7:3e:0c: 70:c1:e6:43:5a:7e:af:d7:43:a8:1a:c6:3d:3d:97:38:44:98: 7c:4f:2f:a4:a3:9b:b7:87:5b:8e:04:a9:7f:27:1c:43:d3:33: 6d:a4:01:7f:c5:f3:5b:17:b1:52:89:41:34:10:a4:d2:95:bc: 7f:25:25:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjYwOTIzMDUwODA2WhcNMjYwOTMwMDUwODA2WjAYMRYwFAYD VQQDEw02YWIzNWViNi0wZGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZzGUH+AIrx6a/qcox1h9Zcg700DtDGoOn1B2p8vlLW6N2tL8hby9KTDT85G OVU1ncwJZhTruv6tgZVhbRvpOTO38dSiutcyntzUdKVPQ1RXwuXNpoKnnhtG/S0e 8yhX2qAKYuq07AwpfixsLSqv2R44wMER1OO/QaE+XSMP/RbS16xBd2h1d+FPYbQZ X85Dq1NjJQIc6ahwTbGiLlQxqQ8serxgdqvODBFWWDoQXBcfD0GHdVejF24i70Ry prBxA6//CoNG7acSkz3qW24wPdHET6BdQ2HhkSzsH6vkNo5kuwPc7XxRBLbBr8S6 Pzq2nlVtjG4+Gst+G3X/P9tLvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDVmyyO 0c8r4eytl4Eji093D5rvMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhaWiM4HuTQS2oHjcDeWvYrKEsVESwMpWyR7U/MZvHFICmpZI4KzfRCknDtEM MR7Q46bo29L7YPd2wCiOZ0ZDq8xz9mIf483pIaHNtR7PlvTdalweLr6F9+4CgM/L 8m9FdHEDORZ982vYWFv0xJt/KNA6d8mJ3VGw0y94UeOwsAiyX3L7Xrr/evAdFcok wIzc9udXEdcbal/xny20DlJYaGANFfBuQ6OpR2Sts965YUxjUdg47WSv3hr44cPj fXJ3dJgI5z4McMHmQ1p+r9dDqBrGPT2XOESYfE8vpKObt4dbjgSpfyccQ9MzbaQB f8XzWxexUolBNBCk0pW8fyUlkg== -----END CERTIFICATE-----Generated at Thu Sep 24 02:16:47 2026 by rpki-client