$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft File: WKmVh9VjjYaIwliQx4QfMlG0ltc.mft (raw, json) Hash identifier: oYrym38g/tAm7csKF2r9TAQ8PDtqZM1jAbB+ZCj0HCI= Subject key identifier: CE:A0:32:CC:6E:8D:0B:F7:70:02:59:D2:9B:1D:B0:A2:1A:EB:FF:BB Authority key identifier: 58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 Certificate issuer: /CN=A91AB740/serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft Manifest number: 2D38 Signing time: Tue 24 Mar 2026 15:38:00 +0000 Manifest this update: Tue 24 Mar 2026 15:38:00 +0000 Manifest next update: Tue 31 Mar 2026 15:38:00 +0000 Files and hashes: 1: WKmVh9VjjYaIwliQx4QfMlG0ltc.crl (hash: DFA6D7DkRrv2vIpru2NIbERcM42UZYVy4Bbx0zRGgT8=) 2: 182057F63ACE11EC8987F871C4F9AE02.roa (hash: GUJd4j7G7L+UV5G9B1gdyKwwN/+3vzX5xi/seaK9GEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB740, serialNumber=58A99587D5638D8688C25890C7841F3251B496D7 Validity Not Before: Mar 24 15:38:00 2026 GMT Not After : Mar 31 15:38:00 2026 GMT Subject: CN=69c2afd8-50b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c6:25:11:4c:10:0a:84:56:32:94:d8:21:06: 1e:26:33:06:0f:25:9d:63:29:3b:1e:a7:03:83:fa: 3d:24:da:c5:61:8f:29:8b:1f:df:b6:d7:3d:44:e5: 3a:72:19:0b:c8:b6:17:20:5a:e6:e5:ec:62:8c:7b: d5:3a:f8:7c:33:76:61:1c:b4:66:14:46:e8:b6:e5: e3:86:7c:6a:61:a3:2f:cd:1f:54:cc:3e:3c:83:82: 89:b1:ef:b3:e5:7d:92:c8:64:61:be:d5:38:32:6b: 97:33:bf:e8:09:34:38:97:bc:00:4f:ce:dc:e5:78: a3:4c:47:2f:de:48:11:6c:52:d4:fd:b7:3b:38:e3: d3:d0:b8:a5:9b:52:11:36:dd:24:63:ae:7f:9d:04: f0:d7:f7:9b:fb:d4:ac:ac:fd:31:ed:25:73:eb:02: c3:f8:a5:a1:18:aa:63:27:81:d8:a2:39:97:bc:d8: ce:d3:41:9a:99:74:30:58:c0:58:7d:79:d6:8b:0c: 2f:e1:a7:a5:e3:77:40:2a:7b:b2:5c:27:a0:0a:1c: 31:dc:a6:98:ec:a6:99:99:57:a1:57:33:88:4b:3f: c6:6d:4b:3b:a1:20:e6:5a:77:17:7b:bc:67:b0:92: 6e:55:48:39:51:e6:63:c9:7d:a1:84:9c:b6:01:ee: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:32:CC:6E:8D:0B:F7:70:02:59:D2:9B:1D:B0:A2:1A:EB:FF:BB X509v3 Authority Key Identifier: keyid:58:A9:95:87:D5:63:8D:86:88:C2:58:90:C7:84:1F:32:51:B4:96:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKmVh9VjjYaIwliQx4QfMlG0ltc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB740/6E5AC454FD2B11E4BB939B43C4F9AE02/WKmVh9VjjYaIwliQx4QfMlG0ltc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:8f:d0:26:47:59:2f:56:9a:5d:05:8d:00:a5:c8:3b:f3: f0:78:c0:94:7c:90:33:d0:d1:2f:33:3f:08:a2:ab:8a:76:a6: 5b:40:ef:5f:8c:d2:df:5f:41:f3:22:1e:fa:23:a8:a1:d2:8c: c6:71:d4:24:76:78:47:ae:54:45:4d:9d:a9:f9:f6:a8:88:50: cf:b1:be:2f:fd:c9:bc:40:33:65:ca:c9:cc:de:c5:7d:d8:b2: 0b:dd:3d:e6:fb:f1:c2:10:06:7f:61:54:fe:08:16:67:01:d7: 58:89:c0:4b:c8:16:e7:a7:cd:3c:6b:38:30:65:9c:dc:04:8b: 29:4d:db:e9:ed:15:12:51:45:fe:34:ef:18:74:d6:19:c9:65: b9:be:1a:9b:27:ef:53:2c:54:e0:96:f2:78:59:63:ce:a5:af: 36:19:7e:67:9d:70:2f:84:65:b9:f3:b0:ed:a2:43:d4:50:90: dc:da:bd:a9:b4:ef:9a:d4:a8:b9:e4:e5:24:ac:06:c8:3f:93: 1b:5c:4c:1c:ca:42:18:53:94:38:00:24:fd:96:7f:d8:0b:c2: 3c:54:39:51:b8:80:87:0f:1e:02:bd:9f:f7:72:bd:d3:ad:a4: a0:fa:05:d2:6f:a8:50:1d:16:dd:a7:65:a1:a2:e3:77:b0:fc: 4a:a6:cd:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI3NDAxMTAvBgNVBAUTKDU4QTk5NTg3RDU2MzhEODY4OEMyNTg5MEM3ODQxRjMy NTFCNDk2RDcwHhcNMjYwMzI0MTUzODAwWhcNMjYwMzMxMTUzODAwWjAYMRYwFAYD VQQDEw02OWMyYWZkOC01MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MYlEUwQCoRWMpTYIQYeJjMGDyWdYyk7HqcDg/o9JNrFYY8pix/fttc9ROU6 chkLyLYXIFrm5exijHvVOvh8M3ZhHLRmFEbotuXjhnxqYaMvzR9UzD48g4KJse+z 5X2SyGRhvtU4MmuXM7/oCTQ4l7wAT87c5XijTEcv3kgRbFLU/bc7OOPT0Lilm1IR Nt0kY65/nQTw1/eb+9SsrP0x7SVz6wLD+KWhGKpjJ4HYojmXvNjO00GamXQwWMBY fXnWiwwv4ael43dAKnuyXCegChwx3KaY7KaZmVehVzOISz/GbUs7oSDmWncXe7xn sJJuVUg5UeZjyX2hhJy2Ae5AAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6gMsxu jQv3cAJZ0psdsKIa6/+7MB8GA1UdIwQYMBaAFFiplYfVY42GiMJYkMeEHzJRtJbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjc0MC82RTVBQzQ1NEZE MkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZYUl3bGlReDRRZk1sRzBs dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dLbVZoOVZqallhSXdsaVF4NFFmTWxHMGx0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Qjc0MC82RTVBQzQ1NEZEMkIxMUU0QkI5MzlCNDNDNEY5QUUwMi9XS21WaDlWampZ YUl3bGlReDRRZk1sRzBsdGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJViP0CZHWS9Wml0FjQClyDvz8HjAlHyQM9DRLzM/CKKrinamW0DvX4zS319B 8yIe+iOoodKMxnHUJHZ4R65URU2dqfn2qIhQz7G+L/3JvEAzZcrJzN7FfdiyC909 5vvxwhAGf2FU/ggWZwHXWInAS8gW56fNPGs4MGWc3ASLKU3b6e0VElFF/jTvGHTW Gcllub4amyfvUyxU4JbyeFljzqWvNhl+Z51wL4RlufOw7aJD1FCQ3Nq9qbTvmtSo ueTlJKwGyD+TG1xMHMpCGFOUOAAk/ZZ/2AvCPFQ5UbiAhw8eAr2f93K9062koPoF 0m+oUB0W3adloaLjd7D8SqbNGg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:07 2026 by rpki-client