$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft File: wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft (raw, json) Hash identifier: bcFOdPagwVawt8hAbBc05fPzWYFpv08lRqYj2NUKz1Y= Subject key identifier: A5:56:76:9D:04:40:7E:A5:D7:7F:E1:60:65:BA:75:3D:66:2E:E8:3B Authority key identifier: C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 Certificate issuer: /CN=A91DD1F9/serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft Manifest number: 0139 Signing time: Wed 25 Mar 2026 04:38:38 +0000 Manifest this update: Wed 25 Mar 2026 04:38:38 +0000 Manifest next update: Wed 01 Apr 2026 04:38:38 +0000 Files and hashes: 1: wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl (hash: J8yeWYuzR2pUT5AlcJn7jEh+V8ZBemeFgXm+tmXaWDU=) 2: 36CFD1EE4AD011EF9B941D17C4F9AE02.roa (hash: clS3RHmScKkM+hzQIw2kWZ7VMnwlrU8+cVWCy3qYMaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:38:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1F9, serialNumber=C27AE1D164729F43D9E0FA64BE51D0B6AE09EB99 Validity Not Before: Mar 25 04:38:38 2026 GMT Not After : Apr 1 04:38:38 2026 GMT Subject: CN=69c366ce-550c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:7a:49:5d:01:05:2d:59:0a:45:8c:71:6d: f1:56:49:eb:c5:ae:90:0b:ed:78:4d:09:09:8b:eb: d7:ad:32:82:8b:8b:23:47:28:f1:c6:d0:c7:f8:93: 1b:41:50:dc:b0:cb:b0:88:51:26:d9:0d:e0:43:c6: 81:9b:04:c9:b8:07:fa:ae:f6:a5:45:30:b0:c8:9a: 8a:dd:27:02:c6:91:ab:1b:33:2a:3d:17:a1:d1:e2: 86:90:c1:aa:7c:dc:cf:7e:85:9a:44:61:d2:fe:f4: 9c:ca:29:b9:77:df:1a:de:f2:e3:ee:f7:99:ea:0a: 80:32:5c:91:43:f6:fc:7a:eb:4a:40:30:30:9d:fd: 99:be:08:9d:d2:00:d5:2b:30:71:71:64:a4:8c:8f: 44:1c:27:7a:2b:65:a3:53:b1:68:d2:37:97:44:d3: b1:cc:89:ad:04:ee:58:84:7e:85:21:aa:95:33:ed: 28:b8:09:8c:49:ff:6f:7b:cd:86:2d:10:e0:1c:cf: 11:bd:33:d5:b3:a0:65:6a:76:8b:ce:27:23:4d:aa: 8c:7f:63:9c:05:5a:e7:91:75:39:bf:6c:f0:77:57: a7:86:2e:da:9e:a5:0d:9c:21:93:45:db:29:60:59: 3e:e9:42:d0:72:3a:77:d8:98:1d:b7:3b:46:e7:f4: 4a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:56:76:9D:04:40:7E:A5:D7:7F:E1:60:65:BA:75:3D:66:2E:E8:3B X509v3 Authority Key Identifier: keyid:C2:7A:E1:D1:64:72:9F:43:D9:E0:FA:64:BE:51:D0:B6:AE:09:EB:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wnrh0WRyn0PZ4PpkvlHQtq4J65k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1F9/402ED2724ACF11EFB8218E15C4F9AE02/wnrh0WRyn0PZ4PpkvlHQtq4J65k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:cc:e5:a1:3f:7f:13:04:11:61:4d:b3:ed:97:a8:36:e2:e0: f5:f2:56:e4:f2:ee:6e:39:0c:a9:ef:94:e2:69:c7:77:7c:78: 16:98:df:f0:25:a7:b7:4e:d5:da:62:79:d7:4e:66:8b:49:c7: be:f0:50:c9:bf:ee:2e:19:02:41:8d:ad:3a:f2:58:96:fd:e2: c8:7d:42:65:6f:8c:ab:ed:58:2e:c0:d9:bc:08:66:55:ca:45: 49:93:f5:e6:a1:e9:46:55:60:e5:b3:3d:d8:f7:70:da:6a:ad: 34:32:b3:18:c6:a1:2e:36:7d:1f:48:08:ab:f9:1d:7f:09:01: 28:52:7b:52:7e:80:cd:ca:60:b2:67:ea:df:b5:85:93:4f:b7: d1:fa:14:19:d7:f1:b4:77:08:a6:1b:89:c9:60:3d:3d:b0:e0: 68:87:6f:85:93:85:60:f2:54:61:f6:9f:da:c2:95:60:c1:e1: 22:3d:7f:75:3e:e4:75:54:b2:72:48:64:ce:9a:69:a6:3c:58: 85:c0:c7:da:a1:11:8b:91:69:ba:1a:e8:fa:1b:1a:fc:e4:75: d0:07:8c:44:d0:a8:1c:13:4d:ec:5a:fd:08:3f:25:0f:27:b1: 30:ed:9c:76:4d:f7:c4:f9:04:9b:54:72:e6:15:19:ed:13:bb: 73:6e:b4:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxRjkxMTAvBgNVBAUTKEMyN0FFMUQxNjQ3MjlGNDNEOUUwRkE2NEJFNTFEMEI2 QUUwOUVCOTkwHhcNMjYwMzI1MDQzODM4WhcNMjYwNDAxMDQzODM4WjAYMRYwFAYD VQQDEw02OWMzNjZjZS01NTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0L16SV0BBS1ZCkWMcW3xVknrxa6QC+14TQkJi+vXrTKCi4sjRyjxxtDH+JMb QVDcsMuwiFEm2Q3gQ8aBmwTJuAf6rvalRTCwyJqK3ScCxpGrGzMqPReh0eKGkMGq fNzPfoWaRGHS/vScyim5d98a3vLj7veZ6gqAMlyRQ/b8eutKQDAwnf2Zvgid0gDV KzBxcWSkjI9EHCd6K2WjU7Fo0jeXRNOxzImtBO5YhH6FIaqVM+0ouAmMSf9ve82G LRDgHM8RvTPVs6BlanaLzicjTaqMf2OcBVrnkXU5v2zwd1enhi7anqUNnCGTRdsp YFk+6ULQcjp32JgdtztG5/RKxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVWdp0E QH6l13/hYGW6dT1mLug7MB8GA1UdIwQYMBaAFMJ64dFkcp9D2eD6ZL5R0LauCeuZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDFGOS80MDJFRDI3MjRB Q0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4wUFo0UHBrdmxIUXRxNEo2 NWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ducmgwV1J5bjBQWjRQcGt2bEhRdHE0SjY1ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFGOS80MDJFRDI3MjRBQ0YxMUVGQjgyMThFMTVDNEY5QUUwMi93bnJoMFdSeW4w UFo0UHBrdmxIUXRxNEo2NWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQszloT9/EwQRYU2z7ZeoNuLg9fJW5PLubjkMqe+U4mnHd3x4Fpjf8CWnt07V 2mJ5105mi0nHvvBQyb/uLhkCQY2tOvJYlv3iyH1CZW+Mq+1YLsDZvAhmVcpFSZP1 5qHpRlVg5bM92Pdw2mqtNDKzGMahLjZ9H0gIq/kdfwkBKFJ7Un6Azcpgsmfq37WF k0+30foUGdfxtHcIphuJyWA9PbDgaIdvhZOFYPJUYfaf2sKVYMHhIj1/dT7kdVSy ckhkzppppjxYhcDH2qERi5Fpuhro+hsa/OR10AeMRNCoHBNN7Fr9CD8lDyexMO2c dk33xPkEm1Ry5hUZ7RO7c260NQ== -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:08 2026 by rpki-client