$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft File: wxmve7T5gWEa0Awy-KNX3mNT3DY.mft (raw, json) Hash identifier: kHXUcLXnkYOGLoiyIwrLSYCE8PMxLaWwb3K6i1YHZEw= Subject key identifier: D4:37:CA:5C:F0:B3:46:4C:52:1C:B5:17:26:F3:A8:73:06:78:D2:FC Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Certificate serial: 1454 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft Manifest number: 1425 Signing time: Tue 24 Mar 2026 16:49:31 +0000 Manifest this update: Tue 24 Mar 2026 16:49:30 +0000 Manifest next update: Tue 31 Mar 2026 16:49:30 +0000 Files and hashes: 1: wxmve7T5gWEa0Awy-KNX3mNT3DY.crl (hash: QMQWQBdtkWMV7de3HAJ/pakFzHdyggFJbbk/T6rGjRA=) 2: 7A6DC1B2ED5011F0BF908D85516F56BC.roa (hash: Pf2Xcfz159pyHDj2hXgdqjwAgXXP/RYEqTKSIfi/V/I=) 3: 56F161A6E4E911EEBC24E249C4F9AE02.roa (hash: z/b7i8bugbJfMnPzMbcPCKt6lu9pPtbu5hUl0vugU0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5204 (0x1454) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1DB8, serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36 Validity Not Before: Mar 24 16:49:30 2026 GMT Not After : Mar 31 16:49:30 2026 GMT Subject: CN=69c2c09a-729d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3b:13:ca:38:5c:7a:3d:c2:1b:ee:9f:8f:67: a0:fb:0f:53:f1:fb:63:78:6c:00:97:f5:ad:08:4e: 07:d5:4f:9e:92:85:d8:bc:50:07:4c:c7:b7:c2:d0: bd:46:da:fc:ef:06:ad:48:bc:31:5e:29:9d:c7:c0: 13:9e:6d:da:bd:a3:78:e7:5b:39:6d:4e:4a:47:2a: f4:42:49:02:0a:4c:a3:80:64:5c:55:f5:38:2c:5a: 98:f8:50:d4:01:bd:64:d6:bc:1a:5a:03:1a:c5:27: 93:8d:3d:84:e1:8a:40:8d:7f:dc:fa:29:e5:14:5c: 87:30:df:d3:b5:95:47:cc:3e:68:2d:77:53:78:39: 25:52:3b:7e:9c:2a:3e:a2:6f:32:10:fc:1b:4d:5e: a9:a4:01:b5:b5:6f:cf:a3:ee:89:a5:04:89:0f:f0: 63:e4:bd:26:94:09:54:6a:b1:c7:af:b0:34:36:49: 0a:7f:1b:78:1f:02:9b:7d:71:e3:04:6d:92:48:50: 2c:18:da:dd:26:ea:28:7a:1a:92:fc:f6:b8:61:7c: 54:ed:83:f2:3c:65:69:6b:9d:f5:a6:5e:9c:8d:aa: 42:2c:42:cc:c8:ac:8f:e2:5f:90:31:3e:fc:99:b2: c6:fa:f6:c7:48:6d:26:ca:d3:fd:5b:e0:d3:0d:95: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:37:CA:5C:F0:B3:46:4C:52:1C:B5:17:26:F3:A8:73:06:78:D2:FC X509v3 Authority Key Identifier: keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:12:e0:9e:1a:b6:99:88:69:3b:43:dc:3c:c9:ea:28:d3:df: 0a:67:2e:a5:2e:2a:e7:8b:aa:37:91:58:02:44:4e:4c:87:57: 25:01:b0:df:82:b5:53:9f:f0:94:d6:bf:be:9e:e3:01:2a:fd: 39:f6:b4:d7:a6:9f:36:75:d6:7e:1e:34:9a:4d:68:66:d2:b4: 15:b3:49:4d:36:2c:be:62:c7:7f:25:35:1d:90:49:4f:9c:9b: a0:ca:59:47:cd:b2:78:36:28:dc:23:07:45:ae:61:08:57:c1: 53:21:bf:5d:af:64:98:0b:1d:2c:fc:1b:92:f7:a0:04:7c:6b: 79:be:ff:55:4c:de:07:59:c8:d9:f3:05:5a:b6:74:fa:d1:61: fc:2f:4a:78:80:a0:0c:b4:ea:e9:42:54:c9:3f:f2:c3:b7:c2: 26:8e:49:e8:51:cc:30:21:18:b4:73:53:5f:24:07:30:08:89: b4:96:de:97:62:b1:e9:7e:c2:e3:ec:31:87:59:6f:fa:7f:22: c6:c7:6e:6f:34:54:da:b5:78:b4:9b:4c:5a:90:d3:58:de:af: 6a:61:b6:4f:cf:d1:27:6f:82:48:f0:27:79:21:c5:a4:3e:f2: c9:0a:2b:7b:9a:04:29:15:69:5b:77:60:17:07:88:74:3b:7c: 35:25:90:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF NjM1M0RDMzYwHhcNMjYwMzI0MTY0OTMwWhcNMjYwMzMxMTY0OTMwWjAYMRYwFAYD VQQDEw02OWMyYzA5YS03MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TsTyjhcej3CG+6fj2eg+w9T8ftjeGwAl/WtCE4H1U+ekoXYvFAHTMe3wtC9 Rtr87watSLwxXimdx8ATnm3avaN451s5bU5KRyr0QkkCCkyjgGRcVfU4LFqY+FDU Ab1k1rwaWgMaxSeTjT2E4YpAjX/c+inlFFyHMN/TtZVHzD5oLXdTeDklUjt+nCo+ om8yEPwbTV6ppAG1tW/Po+6JpQSJD/Bj5L0mlAlUarHHr7A0NkkKfxt4HwKbfXHj BG2SSFAsGNrdJuooehqS/Pa4YXxU7YPyPGVpa531pl6cjapCLELMyKyP4l+QMT78 mbLG+vbHSG0mytP9W+DTDZWuhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQ3ylzw s0ZMUhy1FybzqHMGeNL8MB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MURCOC8xNkNCQzA1NEExMUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdX RWEwQXd5LUtOWDNtTlQzRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUxLgnhq2mYhpO0PcPMnqKNPfCmcupS4q54uqN5FYAkROTIdXJQGw34K1U5/w lNa/vp7jASr9Ofa016afNnXWfh40mk1oZtK0FbNJTTYsvmLHfyU1HZBJT5yboMpZ R82yeDYo3CMHRa5hCFfBUyG/Xa9kmAsdLPwbkvegBHxreb7/VUzeB1nI2fMFWrZ0 +tFh/C9KeICgDLTq6UJUyT/yw7fCJo5J6FHMMCEYtHNTXyQHMAiJtJbel2Kx6X7C 4+wxh1lv+n8ixsdubzRU2rV4tJtMWpDTWN6vamG2T8/RJ2+CSPAneSHFpD7yyQor e5oEKRVpW3dgFweIdDt8NSWQ5g== -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:27 2026 by rpki-client