$ rpki-client -vvf rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft File: WfcM8WVJPKOohcgfFJYqhNv7-do.mft (raw, json) Hash identifier: HYTSkHH3d5im8ujT3wL6hFR1wGodbRDE7r4P5tIBMgs= Subject key identifier: 7C:3B:49:F1:D7:04:39:15:3C:3A:33:6B:04:40:7F:3C:D9:FB:CE:44 Authority key identifier: 59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA Certificate issuer: /CN=A917F9C3/serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft Manifest number: 04 Signing time: Mon 11 May 2026 09:26:29 +0000 Manifest this update: Mon 11 May 2026 09:26:29 +0000 Manifest next update: Mon 18 May 2026 09:26:29 +0000 Files and hashes: 1: WfcM8WVJPKOohcgfFJYqhNv7-do.crl (hash: 3w/MmOwi6BKlf5j8xjCTb2MkVlgS64AtKHY5Vu/r3Fw=) 2: 6BD47C4C4AB911F18A4D3DF6BB833773.roa (hash: ebv4da5ihfjLA6qrd11hFHVIha6XG9+Q5KSSUG/SzsI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F9C3, serialNumber=59F70CF165493CA3A885C81F14962A84DBFBF9DA Validity Not Before: May 11 09:26:29 2026 GMT Not After : May 18 09:26:29 2026 GMT Subject: CN=6a01a0c5-d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:86:b4:4c:97:1f:77:c3:6a:45:27:12:83:77: 4e:7f:cf:2f:9f:84:13:e0:d9:11:a4:0f:4c:77:5a: 96:93:12:e2:dd:50:3f:62:00:f5:5b:0f:34:d7:97: 34:df:64:4d:2d:51:e3:65:26:c6:b4:c0:05:71:30: 50:1d:fa:f3:1a:84:e1:75:3e:45:2a:2e:62:69:9b: 3c:e1:3d:de:2b:48:2c:2d:70:4c:67:17:44:7d:fa: 07:03:35:9b:2b:7d:e4:d9:45:b8:c0:47:00:1a:4b: 7a:2e:32:56:d6:e2:8e:85:c6:3f:cc:57:61:78:1e: e5:42:64:63:61:e5:5f:e7:2c:95:40:32:50:ce:67: 8f:d4:9c:9d:c6:43:e4:e0:c4:6f:d0:f2:37:4c:63: e1:01:0a:bd:de:0d:b3:d8:91:c0:9b:03:2a:0d:22: 71:d8:50:e9:d5:58:2d:32:d6:ac:19:ad:6a:1d:53: 39:e6:58:08:7f:1b:d0:44:f6:a1:8f:8d:2c:e8:11: 30:ec:de:0e:59:90:e3:78:ba:3e:a5:68:9a:59:2f: 66:50:b9:d6:b0:ff:25:a0:24:05:5d:5b:80:5c:b2: d7:e7:2b:9d:12:d6:48:2a:8b:85:53:7e:09:fa:b0: 04:01:e0:59:5e:b6:17:0a:fc:51:6e:d5:16:39:65: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:49:F1:D7:04:39:15:3C:3A:33:6B:04:40:7F:3C:D9:FB:CE:44 X509v3 Authority Key Identifier: keyid:59:F7:0C:F1:65:49:3C:A3:A8:85:C8:1F:14:96:2A:84:DB:FB:F9:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WfcM8WVJPKOohcgfFJYqhNv7-do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F9C3/6F288AB64AB711F186F27E3ABA833773/WfcM8WVJPKOohcgfFJYqhNv7-do.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:b4:22:f3:6b:f3:ad:3c:97:db:67:8b:d4:6c:20:d6:5d:eb: 74:c3:94:86:87:5c:da:05:a3:e8:a4:6d:65:75:f8:a7:0d:7c: f2:8a:b6:81:6d:ac:45:5b:bb:fd:22:5d:fd:ab:9d:1e:ff:b9: 8e:e0:93:b3:f0:a9:7b:a1:fe:4c:60:4d:23:47:4e:7d:9f:65: c8:10:e9:92:57:a0:03:19:84:9f:83:c6:d4:1a:3d:55:74:17: 9c:b1:a0:d9:7d:d3:db:35:cf:65:23:f6:46:d4:34:1f:a6:6c: 84:7e:b7:2e:7d:7e:62:bb:25:3e:79:47:90:13:ea:d6:1b:bd: 94:48:9d:fe:cd:03:da:5f:2e:b9:63:c8:93:06:9a:3f:6d:dd: 2e:d9:ea:2b:42:a2:bd:6b:a4:eb:90:33:c1:da:b4:9c:d2:e4: 19:59:af:4a:36:50:a0:ea:3f:0c:f9:0a:e3:1f:5d:e9:82:ec: 5b:5d:eb:d9:5c:d6:47:0c:2c:91:5b:15:f4:ff:d0:47:98:29: c4:a6:a0:9f:6a:f5:48:8b:c3:cc:6f:cf:c0:c0:ad:b8:37:0e: 87:ad:06:e6:eb:b5:06:80:f1:a2:5b:34:15:78:90:de:97:09: 7e:ca:5a:10:48:8b:a4:7f:e8:94:08:a5:3b:f2:ff:96:de:10: 64:ce:52:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjlDMzExMC8GA1UEBRMoNTlGNzBDRjE2NTQ5M0NBM0E4ODVDODFGMTQ5NjJBODRE QkZCRjlEQTAeFw0yNjA1MTEwOTI2MjlaFw0yNjA1MTgwOTI2MjlaMBgxFjAUBgNV BAMTDTZhMDFhMGM1LWQ3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmhrRMlx93w2pFJxKDd05/zy+fhBPg2RGkD0x3WpaTEuLdUD9iAPVbDzTXlzTf ZE0tUeNlJsa0wAVxMFAd+vMahOF1PkUqLmJpmzzhPd4rSCwtcExnF0R9+gcDNZsr feTZRbjARwAaS3ouMlbW4o6Fxj/MV2F4HuVCZGNh5V/nLJVAMlDOZ4/UnJ3GQ+Tg xG/Q8jdMY+EBCr3eDbPYkcCbAyoNInHYUOnVWC0y1qwZrWodUznmWAh/G9BE9qGP jSzoETDs3g5ZkON4uj6laJpZL2ZQudaw/yWgJAVdW4BcstfnK50S1kgqi4VTfgn6 sAQB4FlethcK/FFu1RY5ZaHdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfDtJ8dcE ORU8OjNrBEB/PNn7zkQwHwYDVR0jBBgwFoAUWfcM8WVJPKOohcgfFJYqhNv7+dow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGOUMzLzZGMjg4QUI2NEFC NzExRjE4NkYyN0UzQUJBODMzNzczL1dmY004V1ZKUEtPb2hjZ2ZGSllxaE52Ny1k by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2ZjTThXVkpQS09vaGNnZkZKWXFoTnY3LWRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG OUMzLzZGMjg4QUI2NEFCNzExRjE4NkYyN0UzQUJBODMzNzczL1dmY004V1ZKUEtP b2hjZ2ZGSllxaE52Ny1kby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQtCLza/OtPJfbZ4vUbCDWXet0w5SGh1zaBaPopG1ldfinDXzyiraBbaxFW7v9 Il39q50e/7mO4JOz8Kl7of5MYE0jR059n2XIEOmSV6ADGYSfg8bUGj1VdBecsaDZ fdPbNc9lI/ZG1DQfpmyEfrcufX5iuyU+eUeQE+rWG72USJ3+zQPaXy65Y8iTBpo/ bd0u2eorQqK9a6TrkDPB2rSc0uQZWa9KNlCg6j8M+QrjH13pguxbXevZXNZHDCyR WxX0/9BHmCnEpqCfavVIi8PMb8/AwK24Nw6HrQbm67UGgPGiWzQVeJDelwl+yloQ SIukf+iUCKU78v+W3hBkzlIz -----END CERTIFICATE-----Generated at Wed May 13 09:14:56 2026 by rpki-client