$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: OwisWlhRo9uJow17im7kZO/TmcFUP4PKr4oXiQVAIcE= Subject key identifier: AA:4D:21:20:40:36:B4:C1:67:CC:DB:E8:D5:E2:BE:BE:42:0F:B0:1F Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 0AA2 Signing time: Thu 08 Oct 2026 19:41:08 +0000 Manifest this update: Thu 08 Oct 2026 19:41:07 +0000 Manifest next update: Thu 15 Oct 2026 19:41:07 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: kDvb2BvopSvcJQzZfP3G1k9sHTIOr2h08A3NvBLAmCs=) 2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: B+iCwX5O9Eeq7aQImMdocBqyaYXSiw6qKnAQCRyMV5o=) 3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: mEA6pK1+kPCEgBGE8QLt8NRqO5P+TggoXjWxm6twcFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2778 (0xada) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Oct 8 19:41:07 2026 GMT Not After : Oct 15 19:41:07 2026 GMT Subject: CN=6ac7f1d3-dd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:9f:df:e1:8d:93:e3:47:95:76:1f:7a:96: 77:41:ae:80:6d:f7:1b:99:08:41:b2:dd:f8:69:26: dc:d0:2f:87:c6:a0:05:17:80:90:5d:c8:ee:a7:0e: 15:d8:f9:4c:f7:28:eb:ce:40:0e:6f:62:e4:13:f1: 74:be:0e:0d:e5:1a:b4:ed:94:d5:71:ce:0c:79:ed: 31:30:05:c2:8b:b7:98:2b:58:b2:91:4f:d8:c4:5e: 7c:96:b6:62:74:5c:1d:5d:03:a2:94:fd:62:e0:94: 1b:e1:b6:b7:1a:ba:c8:45:69:2c:a2:c5:b3:00:ec: 6c:4a:e5:23:b4:18:46:91:38:3c:6e:6a:89:c1:f6: 1e:f4:23:10:b5:99:82:01:b4:e0:6a:c1:af:4c:24: a8:26:68:52:c9:2b:39:c7:4f:28:4e:35:ba:5c:2a: 5b:87:6b:ba:e2:e0:80:d0:c7:1a:28:d5:16:fe:7b: dc:79:00:10:9c:f3:d0:64:de:ca:29:65:ee:45:23: 42:7a:d9:f3:95:92:a6:5c:3c:0f:b4:c4:c3:98:81: f0:e3:6d:f5:42:5d:89:8d:4e:62:6a:e2:ec:12:c0: ea:28:68:b6:52:f6:24:5a:38:91:f0:42:5b:ca:63: 0b:8e:50:ae:b8:5d:5f:03:d8:8a:54:b1:94:c1:82: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:4D:21:20:40:36:B4:C1:67:CC:DB:E8:D5:E2:BE:BE:42:0F:B0:1F X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:2a:bb:b8:78:4e:27:ee:8f:0c:11:0c:cd:a7:cb:d3:68:4c: ea:d3:f7:80:37:dd:c9:49:d1:99:de:1b:65:55:d1:2b:77:f6: c3:18:6a:dd:e6:24:7b:65:7f:4c:29:6f:cb:1f:6d:3d:68:90: 72:ac:65:d0:01:ac:f3:46:49:97:8c:75:a0:47:51:c1:41:32: c1:8c:3f:79:eb:99:97:f8:ff:cb:63:9a:7f:35:47:82:7b:b1: 1c:f9:e7:84:e5:cc:43:e6:df:d2:55:a8:6e:a2:0c:f0:d3:39: f4:cd:89:db:30:04:e9:7d:0d:7c:ee:36:6a:7e:33:45:40:41: 8c:2e:37:96:64:c9:86:73:ec:c4:4a:33:c1:54:32:ee:65:9c: f6:2e:46:a0:0a:46:c3:96:31:e6:9b:73:45:6e:48:f0:d9:c6: 7c:ca:cf:f8:30:6b:1d:3b:cc:43:05:f3:dd:28:7e:23:0b:3e: f8:7d:82:6a:78:26:ae:29:42:ab:51:df:25:30:b0:e7:93:74: 4d:e0:5f:1a:21:f6:dc:56:c8:1d:ca:8e:63:30:08:5c:d2:e0: 2f:80:29:92:bf:5a:9a:55:b5:94:8b:22:90:8d:36:79:1c:9d: f1:76:6f:4e:90:d3:91:2c:88:eb:3d:e4:51:74:30:01:b1:e5: 3c:86:44:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjYxMDA4MTk0MTA3WhcNMjYxMDE1MTk0MTA3WjAYMRYwFAYD VQQDEw02YWM3ZjFkMy1kZDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkKif3+GNk+NHlXYfepZ3Qa6AbfcbmQhBst34aSbc0C+HxqAFF4CQXcjupw4V 2PlM9yjrzkAOb2LkE/F0vg4N5Rq07ZTVcc4Mee0xMAXCi7eYK1iykU/YxF58lrZi dFwdXQOilP1i4JQb4ba3GrrIRWksosWzAOxsSuUjtBhGkTg8bmqJwfYe9CMQtZmC AbTgasGvTCSoJmhSySs5x08oTjW6XCpbh2u64uCA0McaKNUW/nvceQAQnPPQZN7K KWXuRSNCetnzlZKmXDwPtMTDmIHw4231Ql2JjU5iauLsEsDqKGi2UvYkWjiR8EJb ymMLjlCuuF1fA9iKVLGUwYIp2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKpNISBA NrTBZ8zb6NXivr5CD7AfMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkSq7uHhOJ+6PDBEMzafL02hM6tP3gDfdyUnRmd4bZVXRK3f2wxhq3eYke2V/ TClvyx9tPWiQcqxl0AGs80ZJl4x1oEdRwUEywYw/eeuZl/j/y2OafzVHgnuxHPnn hOXMQ+bf0lWobqIM8NM59M2J2zAE6X0NfO42an4zRUBBjC43lmTJhnPsxEozwVQy 7mWc9i5GoApGw5Yx5ptzRW5I8NnGfMrP+DBrHTvMQwXz3Sh+Iws++H2CangmrilC q1HfJTCw55N0TeBfGiH23FbIHcqOYzAIXNLgL4Apkr9amlW1lIsikI02eRyd8XZv TpDTkSyI6z3kUXQwAbHlPIZEtQ== -----END CERTIFICATE-----Generated at Fri Oct 9 17:21:49 2026 by rpki-client