$ rpki-client -vvf rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft File: wjPS8-bItp15WL9NhpD1aLnjVPo.mft (raw, json) Hash identifier: zMOA30ObGlboq0lF7duyjrfK5YGB/mPthF6lXXwuM9M= Subject key identifier: 1D:2E:BE:10:EE:98:52:1F:93:32:4E:6A:36:FD:04:D9:04:3D:62:CD Authority key identifier: C2:33:D2:F3:E6:C8:B6:9D:79:58:BF:4D:86:90:F5:68:B9:E3:54:FA Certificate issuer: /CN=A9197B7B/serialNumber=C233D2F3E6C8B69D7958BF4D8690F568B9E354FA Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:02:31 +0000 Manifest this update: Wed 25 Mar 2026 08:02:31 +0000 Manifest next update: Wed 01 Apr 2026 08:02:31 +0000 Files and hashes: 1: wjPS8-bItp15WL9NhpD1aLnjVPo.crl (hash: fJMJrfGQ3A2Pc2IW2UN5UJtYozfS1sX1/ZxnXg19boE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.crl rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197B7B, serialNumber=C233D2F3E6C8B69D7958BF4D8690F568B9E354FA Validity Not Before: Mar 25 08:02:31 2026 GMT Not After : Apr 1 08:02:31 2026 GMT Subject: CN=69c39697-2e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:05:de:77:11:f4:cf:86:e1:50:c5:90:0d: 55:cc:70:6c:70:37:d5:4d:37:a8:69:ab:7e:11:dd: 41:cd:2e:55:2e:f7:cc:dd:06:b5:7b:89:95:b1:21: 5f:83:1e:26:b9:d0:92:51:0d:31:a1:a4:dd:b7:87: 65:72:a9:47:57:f7:a4:7a:83:8d:9a:ee:f7:cc:a5: 94:e1:26:47:60:89:c7:cb:ec:1b:95:fe:f9:09:6a: 2c:96:d0:d1:fc:a2:76:f2:58:cf:0b:ff:0e:f2:d3: 57:ee:8f:32:48:7e:64:37:24:a6:f9:d5:3d:34:9b: fa:bf:b3:e9:f3:30:26:98:9f:ba:65:dd:73:e7:6e: bd:ff:5c:da:e5:12:47:7e:6f:64:a0:ff:fb:35:39: c1:bf:d3:15:e7:62:a5:ac:4e:dc:3d:bc:67:a6:1b: 60:df:0c:e0:3a:86:ee:f9:3d:0f:59:a9:0a:14:75: 63:30:8d:7c:50:47:4d:a1:a7:64:3e:26:10:fb:09: 3d:ca:30:9b:24:b4:ff:10:84:90:09:a9:e8:41:85: cb:0a:c0:62:95:27:4e:10:c8:0a:85:36:e8:be:36: 37:37:3a:83:72:5e:83:0f:50:8a:50:da:f2:b7:a1: 1c:7a:d7:49:8a:25:4f:1b:f9:e0:18:5b:09:05:f3: 10:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:2E:BE:10:EE:98:52:1F:93:32:4E:6A:36:FD:04:D9:04:3D:62:CD X509v3 Authority Key Identifier: keyid:C2:33:D2:F3:E6:C8:B6:9D:79:58:BF:4D:86:90:F5:68:B9:E3:54:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wjPS8-bItp15WL9NhpD1aLnjVPo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197B7B/3269D0E8FBE911F0912FE61C6D6F56BC/wjPS8-bItp15WL9NhpD1aLnjVPo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:fe:fb:d6:2f:59:ed:14:0c:37:b5:8d:d8:ae:8f:87:12:6f: 02:a7:0c:3f:9b:9c:6e:18:1a:2a:57:32:32:9b:62:09:b0:14: 99:85:7c:75:a5:92:69:bc:5a:07:fd:0d:62:4e:5a:39:28:64: 17:f1:d9:f3:b1:43:ca:ac:8c:74:e9:7f:0c:e1:e3:f5:34:f3: 87:70:dc:c0:19:5f:3f:72:c5:5e:df:68:7f:c4:ae:dd:32:13: 4c:24:40:f3:c8:02:59:a4:a0:1a:e4:61:56:73:0d:80:ad:d5: d0:bc:6e:b8:f9:00:1f:b3:89:d9:0d:13:ba:5f:6a:f2:dd:65: df:40:f3:20:6b:47:6b:4f:06:66:48:b6:40:90:dd:c6:bd:20: 94:22:99:aa:09:20:d0:01:e6:43:a4:b9:74:ce:94:3e:8f:f7: c6:f4:60:6d:c9:ae:11:b6:42:30:c6:90:04:dd:0c:59:ed:7c: 2b:7f:d0:55:09:1b:7e:fc:f3:e5:4e:84:c2:dd:99:dc:04:0f: ba:ae:26:90:a1:19:50:ac:36:ef:96:d4:b0:b4:45:ed:b5:19: 4a:8d:ea:14:0f:97:c6:5f:66:cd:fa:3a:c8:a0:c2:3f:6a:f6: 02:3f:3b:44:b6:93:81:b6:f8:8f:88:08:ae:e4:60:4f:ab:aa: 24:f8:58:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 N0I3QjExMC8GA1UEBRMoQzIzM0QyRjNFNkM4QjY5RDc5NThCRjREODY5MEY1NjhC OUUzNTRGQTAeFw0yNjAzMjUwODAyMzFaFw0yNjA0MDEwODAyMzFaMBgxFjAUBgNV BAMTDTY5YzM5Njk3LTJlOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyHAXedxH0z4bhUMWQDVXMcGxwN9VNN6hpq34R3UHNLlUu98zdBrV7iZWxIV+D Hia50JJRDTGhpN23h2VyqUdX96R6g42a7vfMpZThJkdgicfL7BuV/vkJaiyW0NH8 onbyWM8L/w7y01fujzJIfmQ3JKb51T00m/q/s+nzMCaYn7pl3XPnbr3/XNrlEkd+ b2Sg//s1OcG/0xXnYqWsTtw9vGemG2DfDOA6hu75PQ9ZqQoUdWMwjXxQR02hp2Q+ JhD7CT3KMJsktP8QhJAJqehBhcsKwGKVJ04QyAqFNui+Njc3OoNyXoMPUIpQ2vK3 oRx610mKJU8b+eAYWwkF8xDxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHS6+EO6Y Uh+TMk5qNv0E2QQ9Ys0wHwYDVR0jBBgwFoAUwjPS8+bItp15WL9NhpD1aLnjVPow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3QjdCLzMyNjlEMEU4RkJF OTExRjA5MTJGRTYxQzZENkY1NkJDL3dqUFM4LWJJdHAxNVdMOU5ocEQxYUxualZQ by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvd2pQUzgtYkl0cDE1V0w5TmhwRDFhTG5qVlBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 QjdCLzMyNjlEMEU4RkJFOTExRjA5MTJGRTYxQzZENkY1NkJDL3dqUFM4LWJJdHAx NVdMOU5ocEQxYUxualZQby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBk/vvWL1ntFAw3tY3Yro+HEm8Cpww/m5xuGBoqVzIym2IJsBSZhXx1pZJpvFoH /Q1iTlo5KGQX8dnzsUPKrIx06X8M4eP1NPOHcNzAGV8/csVe32h/xK7dMhNMJEDz yAJZpKAa5GFWcw2ArdXQvG64+QAfs4nZDRO6X2ry3WXfQPMga0drTwZmSLZAkN3G vSCUIpmqCSDQAeZDpLl0zpQ+j/fG9GBtya4RtkIwxpAE3QxZ7Xwrf9BVCRt+/PPl ToTC3ZncBA+6riaQoRlQrDbvltSwtEXttRlKjeoUD5fGX2bN+jrIoMI/avYCPztE tpOBtviPiAiu5GBPq6ok+Fj6 -----END CERTIFICATE-----Generated at Thu Mar 26 12:13:52 2026 by rpki-client