$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft File: WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft (raw, json) Hash identifier: NnAgO2t15Ajd1hE5M7bR3ui31ZF/sXS8kH4U+k3rRY8= Subject key identifier: E4:80:7B:E6:A4:6D:47:77:CA:A6:AE:27:45:95:7E:87:2C:95:46:61 Authority key identifier: 59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 Certificate issuer: /CN=A917C909/serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft Manifest number: F8 Signing time: Wed 25 Mar 2026 05:35:55 +0000 Manifest this update: Wed 25 Mar 2026 05:35:54 +0000 Manifest next update: Wed 01 Apr 2026 05:35:54 +0000 Files and hashes: 1: WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl (hash: wWJKWHKdC1ucYb7Mvtv9M4tw5PNLTsjhlSuCrl4sFM8=) 2: 46C0C4E0770311F09B9D387BC4F9AE02.roa (hash: seNWkSzPB+y0QnMqGd7lzmRBQ9fM1nYcZLpQ+T55VyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=59F9D48DD916909783E31771D8AD7ECB30DC3BA2 Validity Not Before: Mar 25 05:35:54 2026 GMT Not After : Apr 1 05:35:54 2026 GMT Subject: CN=69c3743a-263e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:60:74:01:36:91:24:63:47:5c:e6:7a:10:c3: eb:e1:4f:ae:ec:e8:dc:0e:a2:ee:ee:4d:f3:c7:68: e5:56:dd:da:e4:75:44:8c:a7:4d:35:51:12:d4:22: 41:f6:0c:f7:a2:2a:86:02:99:d9:15:b8:c9:0f:a6: 14:4f:b3:0d:20:63:37:bb:da:21:32:39:f6:82:d8: a8:8b:09:da:4a:19:3c:df:2d:ac:2d:0a:6d:a2:d7: dd:4e:74:4e:87:de:44:26:d0:fe:e6:2f:9b:0a:d1: f1:1b:78:a9:be:14:e8:b3:d9:de:7e:b8:7f:df:36: e7:61:0f:8b:79:68:90:36:9c:8c:c4:4c:f3:69:c0: 15:80:99:61:32:64:45:a6:9a:1e:65:a9:b7:2a:49: f1:dc:52:7d:f2:35:0b:4b:41:5d:32:ad:74:2f:21: 8a:df:c8:08:c3:28:b6:36:f0:06:41:3b:71:17:df: 19:75:6f:cc:59:e6:af:03:a7:48:1d:c2:ca:bc:e2: cc:c5:31:46:41:df:0e:d9:d6:a3:e3:1e:77:7a:61: 0f:90:70:4e:e6:1b:68:db:5d:1a:92:d2:cd:09:08: b4:46:e9:e6:ce:82:d6:3a:58:02:e6:47:15:5f:57: 92:96:4c:71:c3:11:4d:78:54:96:8e:6a:e4:0c:0c: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:7B:E6:A4:6D:47:77:CA:A6:AE:27:45:95:7E:87:2C:95:46:61 X509v3 Authority Key Identifier: keyid:59:F9:D4:8D:D9:16:90:97:83:E3:17:71:D8:AD:7E:CB:30:DC:3B:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfnUjdkWkJeD4xdx2K1-yzDcO6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/FF7C5FDCC0DB11EF9E871844C4F9AE02/WfnUjdkWkJeD4xdx2K1-yzDcO6I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:81:92:14:4e:75:41:8c:48:c4:41:e7:d1:95:36:47:bb:25: 48:2e:a8:14:86:60:c6:75:e9:c6:5d:41:78:3e:07:f2:19:8a: 57:9e:41:a4:c1:ff:80:4a:e3:cb:2d:93:15:36:21:02:45:ac: 5d:49:6b:64:c9:1d:a4:5b:a2:8e:3c:7c:74:6b:40:48:d6:28: 08:89:b6:89:55:3b:73:3a:bc:ef:28:be:9e:b4:9a:e0:02:bf: c2:23:bd:72:38:94:96:b7:c7:6b:31:ff:22:1e:9a:db:1a:5c: 51:09:39:d8:10:14:a3:72:af:2a:42:70:ca:ea:56:e3:d1:af: 40:60:9a:f2:c9:b0:c0:0b:42:36:6a:92:72:c7:39:51:7f:f4: f1:7f:e2:fa:20:2a:65:bd:6d:81:3e:51:25:f4:04:58:b4:c9: 93:89:79:d9:64:b9:a0:f6:96:9c:4f:14:16:dd:cc:ac:6b:05: e7:00:4d:4b:9e:7b:f8:0e:92:1c:82:7b:61:15:6a:88:f4:9e: 04:80:d4:95:3d:6b:b7:04:83:bc:ab:b2:4b:41:bf:de:11:83: 57:8d:e7:4b:b9:c7:c3:9c:fc:64:aa:5b:3f:ad:20:6f:98:6d: 13:e2:04:25:02:da:e7:09:3b:ba:5b:a3:d3:c7:c3:2d:45:be: 9f:28:32:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKDU5RjlENDhERDkxNjkwOTc4M0UzMTc3MUQ4QUQ3RUNC MzBEQzNCQTIwHhcNMjYwMzI1MDUzNTU0WhcNMjYwNDAxMDUzNTU0WjAYMRYwFAYD VQQDEw02OWMzNzQzYS0yNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmB0ATaRJGNHXOZ6EMPr4U+u7OjcDqLu7k3zx2jlVt3a5HVEjKdNNVES1CJB 9gz3oiqGApnZFbjJD6YUT7MNIGM3u9ohMjn2gtioiwnaShk83y2sLQptotfdTnRO h95EJtD+5i+bCtHxG3ipvhTos9nefrh/3zbnYQ+LeWiQNpyMxEzzacAVgJlhMmRF ppoeZam3Kknx3FJ98jULS0FdMq10LyGK38gIwyi2NvAGQTtxF98ZdW/MWeavA6dI HcLKvOLMxTFGQd8O2daj4x53emEPkHBO5hto210aktLNCQi0RunmzoLWOlgC5kcV X1eSlkxxwxFNeFSWjmrkDAz7fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSAe+ak bUd3yqauJ0WVfocslUZhMB8GA1UdIwQYMBaAFFn51I3ZFpCXg+MXcditfssw3Dui MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS9GRjdDNUZEQ0Mw REIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tKZUQ0eGR4MksxLXl6RGNP NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dmblVqZGtXa0plRDR4ZHgySzEteXpEY082SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS9GRjdDNUZEQ0MwREIxMUVGOUU4NzE4NDRDNEY5QUUwMi9XZm5VamRrV2tK ZUQ0eGR4MksxLXl6RGNPNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACYGSFE51QYxIxEHn0ZU2R7slSC6oFIZgxnXpxl1BeD4H8hmKV55BpMH/gErj yy2TFTYhAkWsXUlrZMkdpFuijjx8dGtASNYoCIm2iVU7czq87yi+nrSa4AK/wiO9 cjiUlrfHazH/Ih6a2xpcUQk52BAUo3KvKkJwyupW49GvQGCa8smwwAtCNmqScsc5 UX/08X/i+iAqZb1tgT5RJfQEWLTJk4l52WS5oPaWnE8UFt3MrGsF5wBNS557+A6S HIJ7YRVqiPSeBIDUlT1rtwSDvKuyS0G/3hGDV43nS7nHw5z8ZKpbP60gb5htE+IE JQLa5wk7uluj08fDLUW+nygyzg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:27:49 2026 by rpki-client