$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft File: WkoaHy2STehVVccdPbZrm7DkNkM.mft (raw, json) Hash identifier: AkkaHMzKXGIxc0BaBBJvYVQ15MKkbiyGCuEgchy55wA= Subject key identifier: D7:47:9E:E5:25:14:57:BB:A6:B8:E7:E6:D7:45:C6:7C:FF:53:98:4B Authority key identifier: 5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 Certificate issuer: /CN=A91C2E87/serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Certificate serial: 0CFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft Manifest number: 0CDD Signing time: Wed 22 Jul 2026 18:42:56 +0000 Manifest this update: Wed 22 Jul 2026 18:42:56 +0000 Manifest next update: Wed 29 Jul 2026 18:42:56 +0000 Files and hashes: 1: WkoaHy2STehVVccdPbZrm7DkNkM.crl (hash: cqB8xYaVTrAFgV3M5iyO9E1Y9omdCSwGVEWchKpdYbA=) 2: 504C179A3CDE11EAB553996BC4F9AE02.roa (hash: tnKzNTdY3kOa3JgIyvO979Ve1nnZLeLTMwODS3F4o5I=) 3: 4EB9FBD63CDE11EAB553996BC4F9AE02.roa (hash: Okct4v/9F3FMQPT9GrE+GqX5m6ZwHVEGNg/r2lmDu6k=) 4: 4F4A22E23CDE11EAB553996BC4F9AE02.roa (hash: HZYyafIDcbCm3jYO+u2UG1J/QSznk0TLPVrt1UYauvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3326 (0xcfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E87, serialNumber=5A4A1A1F2D924DE85555C71D3DB66B9BB0E43643 Validity Not Before: Jul 22 18:42:56 2026 GMT Not After : Jul 29 18:42:56 2026 GMT Subject: CN=6a610f30-b10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:f6:b3:ec:cb:a6:67:dc:3b:15:28:14:18: 01:16:4e:31:b9:43:84:64:96:56:17:24:99:77:f1: e4:2e:e6:8e:5c:e2:a2:08:33:cb:e8:54:c6:99:5c: e4:88:f6:eb:70:a9:e8:39:d1:65:73:e7:25:f4:ed: ff:64:eb:4e:69:a3:26:e1:4b:97:f2:32:35:ed:63: ac:dd:f2:30:17:f8:24:25:e8:3f:5a:ea:df:40:d5: 56:f4:6f:0b:c8:a7:66:84:c6:7c:7f:e8:c0:4f:cd: b2:5a:02:84:e5:90:8a:9a:8f:f3:6a:ea:29:b0:79: dd:28:f5:8a:b9:a3:10:45:8b:70:af:ad:f8:6e:b7: 99:fd:d4:95:d9:e5:a6:c9:ed:1a:e8:29:e4:e8:8f: ec:59:a6:4f:75:16:d4:59:30:93:ce:d3:f2:f5:97: f5:75:4f:cd:d8:ea:48:df:55:87:62:53:95:29:81: 33:22:0f:4d:27:3c:e7:35:1c:c6:2a:37:9e:50:d3: 98:e6:67:d6:ad:a2:ba:c1:72:a0:dc:0c:74:8e:2a: 3f:9e:67:f4:0c:83:0f:e5:c8:ed:d5:77:93:aa:33: bc:40:0a:17:95:3d:a6:f5:1e:2c:e8:c8:f6:69:05: a4:12:7b:f8:d9:ba:ac:9e:e5:9b:43:2a:78:73:69: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:47:9E:E5:25:14:57:BB:A6:B8:E7:E6:D7:45:C6:7C:FF:53:98:4B X509v3 Authority Key Identifier: keyid:5A:4A:1A:1F:2D:92:4D:E8:55:55:C7:1D:3D:B6:6B:9B:B0:E4:36:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WkoaHy2STehVVccdPbZrm7DkNkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E87/A9F3C6EE129F11EAAB27202FC4F9AE02/WkoaHy2STehVVccdPbZrm7DkNkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:cf:1c:3a:fa:7f:0b:40:6f:ae:d3:6e:83:4e:23:fa:6c:bc: f5:4d:17:d9:3f:0b:15:0d:bd:47:0a:b1:9e:f4:39:94:35:07: 5a:32:65:bd:5b:aa:f4:f4:28:86:ab:ba:e6:65:22:e7:85:c3: 2a:71:17:cd:cb:58:d8:97:57:78:47:f0:ec:ad:2b:f9:8e:db: a7:1e:4c:1f:4b:5b:97:a0:86:1c:8e:5e:2c:9d:9a:fc:77:99: c3:fe:31:af:b8:62:4a:9d:49:06:d8:24:18:c4:09:96:1b:34: ef:e0:8a:c3:d6:24:22:7e:b9:6d:db:29:ce:6c:dd:c6:10:62: a4:4a:5b:0e:a0:eb:8e:83:e9:ff:3d:39:93:33:29:2e:94:dc: b7:23:7b:84:f6:a3:55:5b:37:56:b7:40:19:5b:07:72:3a:41: 2f:88:a7:48:ef:62:3b:0f:18:e0:1f:3b:fe:ab:69:a8:51:bc: f8:a9:e9:73:5c:49:c3:16:14:29:67:06:1d:44:09:59:07:61: cd:11:5a:0c:bd:d2:12:d4:bf:77:d4:23:18:4a:d5:71:bb:cd: 6c:74:39:6e:f2:a9:f7:b4:53:a3:c2:60:ce:4a:03:68:7f:0d: 21:96:06:f8:e5:2f:c4:5d:b8:b9:e7:e9:b0:6d:0a:6b:d7:ea: f2:ad:21:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFODcxMTAvBgNVBAUTKDVBNEExQTFGMkQ5MjRERTg1NTU1QzcxRDNEQjY2QjlC QjBFNDM2NDMwHhcNMjYwNzIyMTg0MjU2WhcNMjYwNzI5MTg0MjU2WjAYMRYwFAYD VQQDEw02YTYxMGYzMC1iMTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsf2s+zLpmfcOxUoFBgBFk4xuUOEZJZWFySZd/HkLuaOXOKiCDPL6FTGmVzk iPbrcKnoOdFlc+cl9O3/ZOtOaaMm4UuX8jI17WOs3fIwF/gkJeg/WurfQNVW9G8L yKdmhMZ8f+jAT82yWgKE5ZCKmo/zauopsHndKPWKuaMQRYtwr634breZ/dSV2eWm ye0a6Cnk6I/sWaZPdRbUWTCTztPy9Zf1dU/N2OpI31WHYlOVKYEzIg9NJzznNRzG KjeeUNOY5mfWraK6wXKg3Ax0jio/nmf0DIMP5cjt1XeTqjO8QAoXlT2m9R4s6Mj2 aQWkEnv42bqsnuWbQyp4c2lbiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNdHnuUl FFe7prjn5tdFxnz/U5hLMB8GA1UdIwQYMBaAFFpKGh8tkk3oVVXHHT22a5uw5DZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU4Ny9BOUYzQzZFRTEy OUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1RlaFZWY2NkUGJacm03RGtO a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1drb2FIeTJTVGVoVlZjY2RQYlpybTdEa05rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU4Ny9BOUYzQzZFRTEyOUYxMUVBQUIyNzIwMkZDNEY5QUUwMi9Xa29hSHkyU1Rl aFZWY2NkUGJacm03RGtOa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAM8cOvp/C0BvrtNug04j+my89U0X2T8LFQ29RwqxnvQ5lDUHWjJlvVuq9PQo hqu65mUi54XDKnEXzctY2JdXeEfw7K0r+Y7bpx5MH0tbl6CGHI5eLJ2a/HeZw/4x r7hiSp1JBtgkGMQJlhs07+CKw9YkIn65bdspzmzdxhBipEpbDqDrjoPp/z05kzMp LpTctyN7hPajVVs3VrdAGVsHcjpBL4inSO9iOw8Y4B87/qtpqFG8+Knpc1xJwxYU KWcGHUQJWQdhzRFaDL3SEtS/d9QjGErVcbvNbHQ5bvKp97RTo8JgzkoDaH8NIZYG +OUvxF24uefpsG0Ka9fq8q0hWA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:19:42 2026 by rpki-client