$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft File: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft (raw, json) Hash identifier: wU7NPo+7MA/wxd+n/UbhSwW+p4zpY9THmgXzFkLnrZo= Subject key identifier: 78:62:16:25:0E:87:2D:2F:21:A2:25:11:AC:FF:E1:7F:67:8D:94:7B Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Certificate serial: 090A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft Manifest number: 08F0 Signing time: Tue 24 Mar 2026 20:08:52 +0000 Manifest this update: Tue 24 Mar 2026 20:08:51 +0000 Manifest next update: Tue 31 Mar 2026 20:08:51 +0000 Files and hashes: 1: wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl (hash: F8IXwTPKySbz1vY4ig39E2o6bkLAKz9i6a1RMpYMKDU=) 2: C2D58A40182311F1A32496671A3D8C67.roa (hash: Vjii/cMW7dxLjA293RnTQH1E8e35be6igTOo7WebE5o=) 3: 12789D14F82E11F09E4CD127396F56BC.roa (hash: 0lQm90IuI3a5EcWOhbRW2oYdVmTwAF33dV4T2vGRc30=) 4: 37A30AA2157A11F1B5E2F6BC3D3D8C67.roa (hash: uAPz3oqpyV8H/ba3OsJeuX8/ZXubOJrKDa3EJe/hGAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2314 (0x90a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E54CF, serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1 Validity Not Before: Mar 24 20:08:51 2026 GMT Not After : Mar 31 20:08:51 2026 GMT Subject: CN=69c2ef54-c1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:71:07:99:f7:d5:96:e9:f9:5c:28:4b:c3: 27:de:77:d1:4b:ab:3e:a7:9c:41:be:f4:6b:30:61: 6f:3e:0f:d4:4c:9e:dd:3b:ca:12:be:20:fa:75:2f: 21:2d:33:ed:bf:44:89:46:6d:fa:c9:ac:66:0c:7a: 80:0c:07:8c:e5:f7:6e:14:a4:1d:49:11:59:2e:ec: d4:2b:73:81:86:8f:bc:ff:af:64:1a:ee:d6:59:ed: 91:eb:66:b3:2c:ce:a1:df:11:ab:ed:5c:4d:ad:1f: 23:e6:dd:1d:f9:5c:1f:86:41:17:a1:5e:c9:43:db: 77:c2:5d:19:96:ab:27:85:99:93:4e:f8:14:58:07: fb:7c:eb:5d:8a:f9:6f:e8:bd:08:d9:fb:1d:8c:54: 08:f0:c8:c7:25:df:9e:08:a3:b6:be:5a:52:c7:6c: 78:96:35:c1:46:e1:8a:2d:5d:d1:8d:06:68:78:e6: d8:af:54:c4:af:fe:d5:85:55:c4:a7:69:d8:fb:7e: 53:a8:b0:7b:46:ae:88:05:ce:c6:30:02:58:d2:1f: 39:26:55:62:ce:30:8b:d9:a5:23:05:d6:ba:37:2a: 5d:a6:dd:d1:de:f0:62:f9:f0:da:57:fa:ad:8a:8c: 7d:7b:4d:6e:5e:46:1c:87:8b:f6:45:53:c8:d1:2c: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:62:16:25:0E:87:2D:2F:21:A2:25:11:AC:FF:E1:7F:67:8D:94:7B X509v3 Authority Key Identifier: keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:17:b5:4b:96:f5:7f:9d:66:2b:f3:d9:1d:11:58:30:ec:73: 40:0e:0d:93:91:69:4f:6b:68:4f:22:c4:07:b2:ab:3f:3d:bb: 54:4b:e7:c7:8d:01:a6:72:85:f6:33:16:38:98:ad:8a:10:2b: ff:a6:98:a7:b4:36:93:0a:af:67:fa:81:b9:53:e9:ae:cf:6c: f3:2f:57:57:1f:93:d4:f8:89:f7:cf:ac:c5:d4:00:cc:b3:32: 58:73:19:bf:3d:d1:fa:02:25:a1:cf:fe:c3:1d:d1:04:7f:c8: 88:be:61:bf:28:a0:d2:84:17:b0:22:3c:6e:a4:99:fa:03:56: 54:4f:7a:dc:81:18:28:fb:2c:3b:62:e7:01:d8:af:ac:a0:e7: df:e8:45:c3:3b:75:4d:0d:9b:3c:80:d3:80:d5:75:38:3c:7a: 16:39:fa:a5:23:07:a7:bc:26:65:df:94:b8:85:7d:98:9a:6b: 37:8f:18:fc:7b:6f:ce:c5:bc:8c:34:b8:81:3b:79:13:9c:a5: b2:2c:b1:9a:b7:99:78:5e:29:11:59:35:88:93:82:31:f6:29: fa:2a:05:32:2c:1e:e5:3f:62:75:cf:57:75:2e:d5:d1:23:26: 20:bf:39:8e:20:02:63:95:f7:9e:f0:2c:de:3e:80:d6:1f:50: d3:29:80:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU0Q0YxMTAvBgNVBAUTKEMxQkVDRjk3Q0E5NUUwNkRDMDZFMDBDMjM5RjYyQ0M2 OTQyNDE2RDEwHhcNMjYwMzI0MjAwODUxWhcNMjYwMzMxMjAwODUxWjAYMRYwFAYD VQQDEw02OWMyZWY1NC1jMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTlxB5n31Zbp+VwoS8Mn3nfRS6s+p5xBvvRrMGFvPg/UTJ7dO8oSviD6dS8h LTPtv0SJRm36yaxmDHqADAeM5fduFKQdSRFZLuzUK3OBho+8/69kGu7WWe2R62az LM6h3xGr7VxNrR8j5t0d+VwfhkEXoV7JQ9t3wl0ZlqsnhZmTTvgUWAf7fOtdivlv 6L0I2fsdjFQI8MjHJd+eCKO2vlpSx2x4ljXBRuGKLV3RjQZoeObYr1TEr/7VhVXE p2nY+35TqLB7Rq6IBc7GMAJY0h85JlVizjCL2aUjBda6Nypdpt3R3vBi+fDaV/qt iox9e01uXkYch4v2RVPI0SysWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhiFiUO hy0vIaIlEaz/4X9njZR7MB8GA1UdIwQYMBaAFMG+z5fKleBtwG4Awjn2LMaUJBbR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTRDRi9EOEYzQUNBQ0ND OEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRHM0FiZ0RDT2ZZc3hwUWtG dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3diN1BsOHFWNEczQWJnRENPZllzeHBRa0Z0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTRDRi9EOEYzQUNBQ0NDOEYxMUVBQkMxRjE0NDJDNEY5QUUwMi93YjdQbDhxVjRH M0FiZ0RDT2ZZc3hwUWtGdEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnRe1S5b1f51mK/PZHRFYMOxzQA4Nk5FpT2toTyLEB7KrPz27VEvnx40BpnKF 9jMWOJitihAr/6aYp7Q2kwqvZ/qBuVPprs9s8y9XVx+T1PiJ98+sxdQAzLMyWHMZ vz3R+gIloc/+wx3RBH/IiL5hvyig0oQXsCI8bqSZ+gNWVE963IEYKPssO2LnAdiv rKDn3+hFwzt1TQ2bPIDTgNV1ODx6Fjn6pSMHp7wmZd+UuIV9mJprN48Y/HtvzsW8 jDS4gTt5E5ylsiyxmreZeF4pEVk1iJOCMfYp+ioFMiwe5T9idc9XdS7V0SMmIL85 jiACY5X3nvAs3j6A1h9Q0ymAOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:58:57 2026 by rpki-client