$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft File: WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json) Hash identifier: bRQBDUJ7+0/Iw5BANm1JiT342GDN353alT4ie6aeg64= Subject key identifier: 7E:C1:B7:76:C8:A1:BF:DD:45:58:4D:03:D9:DA:8B:7F:EC:56:F7:C9 Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 Certificate issuer: /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Certificate serial: 0A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft Manifest number: 0A3B Signing time: Tue 24 Mar 2026 19:32:38 +0000 Manifest this update: Tue 24 Mar 2026 19:32:37 +0000 Manifest next update: Tue 31 Mar 2026 19:32:37 +0000 Files and hashes: 1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: t0PYV7poBjvBYtML7G3bKP2u/Rvrx/ZPzJSnhWIlXoY=) 2: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: IVLj0WeJAsKNyITHuDeBc1Jwj1H2yGwi+BTH30ak3Wk=) 3: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: ycxHwEtoW9Hd3U6Gq2/EVboRJUU4xpiOdn0yTd0tHRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260 Validity Not Before: Mar 24 19:32:37 2026 GMT Not After : Mar 31 19:32:37 2026 GMT Subject: CN=69c2e6d5-1749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:13:9d:9e:96:44:5d:0d:de:f9:d4:c9:df: db:8e:7c:a9:9b:9f:50:9b:34:50:74:71:c8:5e:b4: d4:75:ba:eb:99:83:8c:e3:bb:96:23:d0:d7:9e:03: 57:f7:8f:d7:10:74:24:e4:b6:54:55:c9:15:63:fb: d7:cb:2d:7d:46:d4:48:15:15:eb:df:43:ae:4f:5c: e2:90:a5:23:89:ad:b3:e1:f3:d2:d1:65:c3:0a:72: 2c:f6:a7:87:ad:37:fb:91:d9:1c:0e:28:83:04:53: 9e:bb:54:23:b2:30:4d:94:9e:dd:3e:3d:c8:c8:a9: 76:3d:b1:cc:66:f0:70:15:39:15:9a:5c:59:6f:22: b1:ce:c6:d1:2c:60:83:ed:10:64:1a:ea:4d:b0:3f: 30:00:ec:bb:d5:d6:74:d5:a5:ce:34:b4:e4:94:2a: f3:92:55:a4:d4:f5:65:6a:22:e8:30:6b:bd:ff:8e: bc:1c:3d:f0:98:cc:38:e7:22:d7:5f:16:15:57:19: 60:06:83:34:17:2c:3e:6e:cb:32:c9:d3:6b:f8:61: 29:ec:26:e7:e7:a3:87:41:30:e9:06:5b:0e:39:36: 49:8f:9f:24:5f:bc:6c:93:d2:d6:f2:8b:4d:58:83: 98:f5:dc:12:80:15:00:df:b0:3e:c8:97:48:b5:0e: 0b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C1:B7:76:C8:A1:BF:DD:45:58:4D:03:D9:DA:8B:7F:EC:56:F7:C9 X509v3 Authority Key Identifier: keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:1b:17:9c:ff:6d:a0:3e:92:e4:17:10:cf:cf:f1:d8:c3:61: 4d:14:d1:aa:08:e7:67:c9:08:a9:1d:74:e2:3a:16:0e:9d:27: d0:ee:a2:53:13:94:45:0e:25:38:db:dc:6a:ea:c1:c8:07:41: 7f:30:d4:30:2b:f9:28:2e:96:6f:c1:b6:55:d8:16:84:ca:5d: fb:d3:4e:10:c1:cc:d7:26:14:88:fd:dd:49:4e:11:b1:5e:6d: 99:62:bb:16:02:cf:b6:d4:8f:3a:97:17:d8:a1:01:4a:82:d1: 19:c1:94:24:cb:ee:fe:7b:9e:d8:85:5a:7c:e2:59:b5:ba:44: f6:44:8c:5e:c4:d1:7a:8b:e6:03:49:be:8d:dd:d1:46:fa:ee: da:43:75:cc:b7:68:63:87:d8:6c:f6:71:90:6e:fc:9b:3f:05: e9:4e:30:21:60:9d:c1:1c:54:75:a6:b5:04:24:0a:6d:d4:f4: 1f:b5:98:ba:a7:3d:b8:9d:b2:d6:a5:e3:04:ea:8c:50:2e:3a: 59:ae:72:1d:61:82:e3:a7:16:be:eb:39:ff:5c:77:f1:2b:ec: cf:35:7e:2b:50:f5:6d:f9:0d:af:39:59:25:28:0a:5f:7d:48: fa:a3:38:36:eb:d6:7c:7b:34:5e:d4:8a:55:68:8b:1f:72:47: 09:2b:6c:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3 NDdFQTAyNjAwHhcNMjYwMzI0MTkzMjM3WhcNMjYwMzMxMTkzMjM3WjAYMRYwFAYD VQQDEw02OWMyZTZkNS0xNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvG8TnZ6WRF0N3vnUyd/bjnypm59QmzRQdHHIXrTUdbrrmYOM47uWI9DXngNX 94/XEHQk5LZUVckVY/vXyy19RtRIFRXr30OuT1zikKUjia2z4fPS0WXDCnIs9qeH rTf7kdkcDiiDBFOeu1QjsjBNlJ7dPj3IyKl2PbHMZvBwFTkVmlxZbyKxzsbRLGCD 7RBkGupNsD8wAOy71dZ01aXONLTklCrzklWk1PVlaiLoMGu9/468HD3wmMw45yLX XxYVVxlgBoM0Fyw+bssyydNr+GEp7Cbn56OHQTDpBlsOOTZJj58kX7xsk9LW8otN WIOY9dwSgBUA37A+yJdItQ4LuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7Bt3bI ob/dRVhNA9nai3/sVvfJMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5 VFlFOTc1Rm56VFYwZnFBbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArxsXnP9toD6S5BcQz8/x2MNhTRTRqgjnZ8kIqR104joWDp0n0O6iUxOURQ4l ONvcaurByAdBfzDUMCv5KC6Wb8G2VdgWhMpd+9NOEMHM1yYUiP3dSU4RsV5tmWK7 FgLPttSPOpcX2KEBSoLRGcGUJMvu/nue2IVafOJZtbpE9kSMXsTReovmA0m+jd3R Rvru2kN1zLdoY4fYbPZxkG78mz8F6U4wIWCdwRxUdaa1BCQKbdT0H7WYuqc9uJ2y 1qXjBOqMUC46Wa5yHWGC46cWvus5/1x38SvszzV+K1D1bfkNrzlZJSgKX31I+qM4 NuvWfHs0XtSKVWiLH3JHCSts2g== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:58 2026 by rpki-client