$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft File: WOkI0McaSfSCp8fZVSozVZyuJkM.mft (raw, json) Hash identifier: OEzWdyc5diwrtaRwsP8hBjaxUW1cFntjZry3NQwVzqo= Subject key identifier: 31:F4:68:B1:7C:32:16:EE:E4:66:C6:CA:F7:01:19:1D:0C:5F:A3:AD Authority key identifier: 58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 Certificate issuer: /CN=A91FB5CE/serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Certificate serial: 0660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft Manifest number: 0651 Signing time: Tue 24 Mar 2026 22:23:08 +0000 Manifest this update: Tue 24 Mar 2026 22:23:07 +0000 Manifest next update: Tue 31 Mar 2026 22:23:07 +0000 Files and hashes: 1: WOkI0McaSfSCp8fZVSozVZyuJkM.crl (hash: rjz4nnWWgI/qS0QK3FLCsvJ3r6iHE0hPO1T9t3JKrEg=) 2: F189CB86C81D11EBA4C0E321C4F9AE02.roa (hash: Vhxsq5oGsGnJdnu9k72YuMt3LNz1ibjMmsc3t9zhgQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1632 (0x660) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB5CE, serialNumber=58E908D0C71A49F482A7C7D9552A33559CAE2643 Validity Not Before: Mar 24 22:23:07 2026 GMT Not After : Mar 31 22:23:07 2026 GMT Subject: CN=69c30ecb-f325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:46:0c:0f:fa:06:1a:10:62:1b:d4:fc:90: 5e:f2:07:58:20:08:4a:34:55:e5:55:3a:b7:26:2f: 29:3e:97:fb:dd:8b:59:aa:87:bf:db:c0:6f:81:3a: 87:cb:13:2e:86:d6:e5:fa:14:70:8d:9c:51:25:73: 7d:4c:54:5e:12:fd:e9:4e:0f:4a:96:35:cf:cc:11: 03:e2:6c:40:ad:cb:97:02:2a:a8:eb:07:fa:c9:c3: 07:1d:e6:32:cf:8d:57:e2:bc:e1:ce:c2:fe:37:69: ab:95:5b:28:25:34:28:9f:0d:74:46:af:95:8b:b1: 7d:a0:ed:49:b2:fd:7d:e5:47:fc:95:67:67:df:50: f9:3f:f2:b2:a7:2c:d2:ed:d4:56:82:ef:70:3f:6d: 97:20:b3:26:2e:d3:e2:28:15:1d:9f:32:81:55:bd: d3:89:b9:0f:3b:6c:b7:21:db:0b:26:e1:13:40:cb: a0:f6:eb:61:58:1d:bc:0b:59:81:e8:88:e0:7b:2e: f6:14:f6:6e:56:1f:51:a5:dd:10:af:7d:a6:b5:f5: a7:ff:b8:d2:f6:2e:d7:07:51:ae:88:bc:1b:9a:d8: 67:1c:89:60:9d:93:0f:0c:df:2b:89:30:cb:4b:8f: 54:a8:3b:db:57:70:33:44:0a:3e:11:72:5d:b0:b7: c9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F4:68:B1:7C:32:16:EE:E4:66:C6:CA:F7:01:19:1D:0C:5F:A3:AD X509v3 Authority Key Identifier: keyid:58:E9:08:D0:C7:1A:49:F4:82:A7:C7:D9:55:2A:33:55:9C:AE:26:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WOkI0McaSfSCp8fZVSozVZyuJkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB5CE/B096C500C81A11EBB125A73EC4F9AE02/WOkI0McaSfSCp8fZVSozVZyuJkM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c2:24:73:48:dc:f6:0d:33:9a:24:36:81:59:c8:4a:0a:20: e4:d4:30:86:c4:79:62:b3:ea:08:89:91:a6:af:30:50:38:59: 22:f2:28:a1:77:df:4c:fd:17:87:d2:70:53:ab:c9:43:7a:14: d2:cc:3c:51:22:0e:2e:d8:61:f3:47:6a:15:4f:4c:48:7b:a2: 90:43:ab:1b:2b:ab:e5:51:7e:f0:d6:43:8a:9e:47:7a:87:b5: 26:06:89:79:cc:9e:27:28:65:35:6b:28:85:2c:e1:c0:7c:c6: a4:cc:37:90:82:32:d6:41:7b:49:a8:2a:a9:e9:ef:c1:00:91: fc:3d:29:e5:79:12:41:28:99:41:1a:70:45:a8:31:46:c6:ad: b4:6d:92:99:08:60:4c:d6:40:3d:e3:fc:61:d6:67:46:d3:f7: be:71:10:99:c4:28:b0:d3:2d:a9:65:ee:34:ad:8b:16:6e:33: a9:8d:21:54:00:25:b1:23:3f:a1:3d:52:a5:e6:62:92:cc:06: b1:40:97:44:5a:9c:84:2b:b5:0b:98:56:c7:0e:79:13:c0:4f: ef:32:3c:40:9b:b6:61:e3:fb:b0:48:6b:fd:5b:8e:24:ca:ef: bd:65:fa:10:2b:3a:70:0d:0d:0c:47:99:95:4a:81:a0:c7:9d: d2:a8:8a:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI1Q0UxMTAvBgNVBAUTKDU4RTkwOEQwQzcxQTQ5RjQ4MkE3QzdEOTU1MkEzMzU1 OUNBRTI2NDMwHhcNMjYwMzI0MjIyMzA3WhcNMjYwMzMxMjIyMzA3WjAYMRYwFAYD VQQDEw02OWMzMGVjYi1mMzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCZGDA/6BhoQYhvU/JBe8gdYIAhKNFXlVTq3Ji8pPpf73YtZqoe/28BvgTqH yxMuhtbl+hRwjZxRJXN9TFReEv3pTg9KljXPzBED4mxArcuXAiqo6wf6ycMHHeYy z41X4rzhzsL+N2mrlVsoJTQonw10Rq+Vi7F9oO1Jsv195Uf8lWdn31D5P/KypyzS 7dRWgu9wP22XILMmLtPiKBUdnzKBVb3TibkPO2y3IdsLJuETQMug9uthWB28C1mB 6Ijgey72FPZuVh9Rpd0Qr32mtfWn/7jS9i7XB1GuiLwbmthnHIlgnZMPDN8riTDL S49UqDvbV3AzRAo+EXJdsLfJSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDH0aLF8 Mhbu5GbGyvcBGR0MX6OtMB8GA1UdIwQYMBaAFFjpCNDHGkn0gqfH2VUqM1WcriZD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjVDRS9CMDk2QzUwMEM4 MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNmU0NwOGZaVlNvelZaeXVK a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dPa0kwTWNhU2ZTQ3A4ZlpWU296Vlp5dUprTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjVDRS9CMDk2QzUwMEM4MUExMUVCQjEyNUE3M0VDNEY5QUUwMi9XT2tJME1jYVNm U0NwOGZaVlNvelZaeXVKa00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPsIkc0jc9g0zmiQ2gVnISgog5NQwhsR5YrPqCImRpq8wUDhZIvIooXffTP0X h9JwU6vJQ3oU0sw8USIOLthh80dqFU9MSHuikEOrGyur5VF+8NZDip5Heoe1JgaJ ecyeJyhlNWsohSzhwHzGpMw3kIIy1kF7SagqqenvwQCR/D0p5XkSQSiZQRpwRagx RsattG2SmQhgTNZAPeP8YdZnRtP3vnEQmcQosNMtqWXuNK2LFm4zqY0hVAAlsSM/ oT1SpeZikswGsUCXRFqchCu1C5hWxw55E8BP7zI8QJu2YeP7sEhr/VuOJMrvvWX6 ECs6cA0NDEeZlUqBoMed0qiKdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:28 2026 by rpki-client