$ rpki-client -vvvf rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft File: WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft (raw, json) Hash identifier: xJ4rz06Pu9Nm8Dyi/yH/IdHILUHxjDZJth3v6WRZ/kY= Subject key identifier: D9:ED:01:5A:FF:39:8D:25:9B:4E:05:5D:E1:64:0E:DF:F2:CF:48:02 Authority key identifier: 58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 Certificate issuer: /CN=A9193227/serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft Manifest number: 20 Signing time: Mon 21 Sep 2026 08:18:47 +0000 Manifest this update: Mon 21 Sep 2026 08:18:46 +0000 Manifest next update: Mon 28 Sep 2026 08:18:46 +0000 Files and hashes: 1: WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl (hash: mZF6g11z9nXIpISkPtAF6OH7D2iUj1JwIqGmFlzbyM0=) 2: C4573D8E8BDF11F19F45C2023611F970.roa (hash: SBR2qy/aOQNOlTNj4Guu+00B4uzU8KT7C033YFlfsww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193227, serialNumber=585E4EB5940CD807A1F794531B05A10DC7E433B2 Validity Not Before: Sep 21 08:18:46 2026 GMT Not After : Sep 28 08:18:46 2026 GMT Subject: CN=6ab0e867-2dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:86:03:91:fd:8f:d4:ea:31:bb:01:3d:d2:11: a8:2f:eb:cf:e8:03:9c:41:e5:96:55:33:52:bd:9d: bc:af:7b:50:3d:39:21:8c:3f:56:31:3a:60:c0:28: ea:9f:09:33:fd:77:ab:d2:4d:b9:69:fd:78:f0:44: c4:4f:7d:4b:99:bd:e2:f7:5c:72:6a:b6:6d:3b:f1: 82:ac:7e:40:63:d0:40:f1:a2:a2:d3:16:7b:8c:cf: 60:b8:51:63:b2:1d:b1:63:19:8b:fd:6b:bd:b2:6f: dd:90:fd:dd:82:4a:39:3b:47:7b:65:c7:b5:03:7f: 69:b7:e6:84:e2:72:43:32:b8:96:2a:63:57:88:bf: ce:cd:2b:ec:ca:e7:a2:ee:35:1b:e0:2f:56:1b:3d: 0c:ca:ff:4f:b9:23:93:b7:48:85:dc:2c:a1:79:ba: 0e:36:b6:f3:61:2c:98:e7:1c:08:7b:bd:d1:98:c1: 0a:46:4a:1f:22:5f:39:a7:b9:29:08:e0:3e:59:60: 6a:ab:2d:fd:c2:30:b4:4d:48:87:62:45:08:0a:db: 2c:e0:10:fa:3b:b6:ac:fa:c7:37:e1:68:0c:09:a7: e0:c2:36:39:51:ff:18:5b:8b:e9:cf:4b:80:22:3a: d3:e8:69:1a:3f:78:e2:5f:ed:0f:14:1e:eb:ba:f1: a7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:01:5A:FF:39:8D:25:9B:4E:05:5D:E1:64:0E:DF:F2:CF:48:02 X509v3 Authority Key Identifier: keyid:58:5E:4E:B5:94:0C:D8:07:A1:F7:94:53:1B:05:A1:0D:C7:E4:33:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WF5OtZQM2Aeh95RTGwWhDcfkM7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/D8DDAC9E8A3F11F183072B9D3211F970/WF5OtZQM2Aeh95RTGwWhDcfkM7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:73:51:c6:48:e4:e2:d6:b0:3f:a5:45:58:0b:35:60:27:eb: 58:eb:84:64:d9:53:c4:7d:0e:b0:4d:5c:90:67:80:23:1f:a4: a6:1e:ec:f5:9d:61:92:1d:78:6b:b7:37:e8:e4:bc:8a:73:da: 38:fa:b5:f7:b3:ff:2b:73:29:b5:df:46:61:b9:4b:6f:73:77: d2:f8:2c:e9:09:53:66:00:ff:bc:a4:de:32:c8:fd:1a:07:06: d2:12:71:fe:4b:fa:30:bb:08:48:98:3d:91:fc:cf:39:e6:51: 03:4d:0e:73:a2:55:72:3f:43:88:8d:47:91:3b:f1:0c:b0:7f: 65:3c:70:e2:e7:45:57:bf:f4:ea:e9:89:0d:21:bc:fa:8f:7a: 13:fe:c2:97:d3:be:e1:04:d3:ae:9c:4b:78:5a:5b:09:2c:c4: 0d:3c:68:f2:bd:49:09:a9:13:76:b8:9f:1b:7d:45:0c:b6:0c: aa:cf:8e:b9:31:07:0a:02:a4:ac:9f:ab:6c:22:b4:61:63:f4: bc:1b:19:6d:c3:9c:51:22:a5:55:51:1a:13:74:03:e6:de:99: 2b:8a:90:6e:b5:a2:9a:f6:b4:b6:fb:3b:27:a9:45:9f:db:cf: 7e:98:d0:aa:08:c4:73:a1:ef:10:ec:17:3a:8b:a2:32:8b:80: e5:b9:e7:85 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MzIyNzExMC8GA1UEBRMoNTg1RTRFQjU5NDBDRDgwN0ExRjc5NDUzMUIwNUExMERD N0U0MzNCMjAeFw0yNjA5MjEwODE4NDZaFw0yNjA5MjgwODE4NDZaMBgxFjAUBgNV BAMTDTZhYjBlODY3LTJkZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCQhgOR/Y/U6jG7AT3SEagv68/oA5xB5ZZVM1K9nbyve1A9OSGMP1YxOmDAKOqf CTP9d6vSTblp/XjwRMRPfUuZveL3XHJqtm078YKsfkBj0EDxoqLTFnuMz2C4UWOy HbFjGYv9a72yb92Q/d2CSjk7R3tlx7UDf2m35oTickMyuJYqY1eIv87NK+zK56Lu NRvgL1YbPQzK/0+5I5O3SIXcLKF5ug42tvNhLJjnHAh7vdGYwQpGSh8iXzmnuSkI 4D5ZYGqrLf3CMLRNSIdiRQgK2yzgEPo7tqz6xzfhaAwJp+DCNjlR/xhbi+nPS4Ai OtPoaRo/eOJf7Q8UHuu68adpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2e0BWv85 jSWbTgVd4WQO3/LPSAIwHwYDVR0jBBgwFoAUWF5OtZQM2Aeh95RTGwWhDcfkM7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzMjI3L0Q4RERBQzlFOEEz RjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFlaDk1UlRHd1doRGNma003 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV0Y1T3RaUU0yQWVoOTVSVEd3V2hEY2ZrTTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz MjI3L0Q4RERBQzlFOEEzRjExRjE4MzA3MkI5RDMyMTFGOTcwL1dGNU90WlFNMkFl aDk1UlRHd1doRGNma003SS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYc1HGSOTi1rA/pUVYCzVgJ+tY64Rk2VPEfQ6wTVyQZ4AjH6SmHuz1nWGSHXhr tzfo5LyKc9o4+rX3s/8rcym130ZhuUtvc3fS+CzpCVNmAP+8pN4yyP0aBwbSEnH+ S/owuwhImD2R/M855lEDTQ5zolVyP0OIjUeRO/EMsH9lPHDi50VXv/Tq6YkNIbz6 j3oT/sKX077hBNOunEt4WlsJLMQNPGjyvUkJqRN2uJ8bfUUMtgyqz465MQcKAqSs n6tsIrRhY/S8Gxltw5xRIqVVURoTdAPm3pkripButaKa9rS2+zsnqUWf289+mNCq CMRzoe8Q7Bc6i6Iyi4DlueeF -----END CERTIFICATE-----Generated at Wed Sep 23 09:14:57 2026 by rpki-client