
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier: F+eE1kQnqbKPFMK7stb9vDRou+85wbmSMmaQLo89p5w=
Subject key identifier: 95:D3:AE:07:AC:61:0C:1E:CA:12:D6:70:CF:E5:99:D8:EC:8D:42:F4
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial: 02E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number: 02C1
Signing time: Fri 13 Nov 2026 01:42:47 +0000
Manifest this update: Fri 13 Nov 2026 01:42:46 +0000
Manifest next update: Fri 20 Nov 2026 01:42:46 +0000
Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: ZQaVxkxznULPbaZ/O6t8RyjAxX0sKnwNM5Pcw5MYJ6s=)
2: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=)
3: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=)
4: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 01:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 738 (0x2e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Validity
Not Before: Nov 13 01:42:46 2026 GMT
Not After : Nov 20 01:42:46 2026 GMT
Subject: CN=6af66b17-8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:80:c2:46:be:88:c3:05:a2:96:4f:89:b5:ff:
fa:73:7e:24:d1:1e:ab:e4:34:cd:06:a0:8d:27:80:
35:14:52:62:9f:11:3f:89:98:46:57:aa:08:10:b3:
14:1a:4d:a8:f8:b5:a8:62:2f:e8:88:cb:27:08:18:
ad:2d:67:4d:27:a8:03:45:2b:0b:83:a7:71:1e:8f:
6c:b0:4a:06:60:50:d4:60:19:4e:f9:b4:a8:4b:2b:
b3:40:26:f4:7a:7a:05:1e:09:38:5a:17:39:22:98:
a4:0f:6a:c4:98:de:1d:bd:b4:d6:d3:4a:e3:6b:f8:
9d:77:0d:aa:cc:95:ae:b3:45:8f:2f:69:e2:40:bd:
2d:33:2e:f2:69:ed:18:57:57:ce:dc:a3:bc:68:5c:
99:0c:55:dd:71:8c:91:af:51:0a:12:31:b9:6c:92:
f2:0f:b0:9c:1c:ba:f4:36:d7:87:11:f7:66:25:33:
85:82:aa:2a:16:08:15:a3:2b:24:1e:77:18:8f:5a:
b9:75:73:49:44:7a:58:18:ba:7a:27:37:64:1d:19:
d3:6a:7d:35:ea:d1:19:3e:cf:a2:b3:3b:d3:db:09:
6f:b4:1b:5b:15:61:74:5e:23:56:91:55:c4:f4:b5:
74:f6:41:17:75:ca:59:25:0d:2e:b1:74:7e:c9:0d:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D3:AE:07:AC:61:0C:1E:CA:12:D6:70:CF:E5:99:D8:EC:8D:42:F4
X509v3 Authority Key Identifier:
keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:9e:b6:75:0b:e3:9f:5f:d5:59:d7:4a:ea:25:4e:0e:9b:14:
0f:93:14:85:3b:93:e0:b5:a2:f9:47:5e:4e:6f:99:9d:03:31:
1a:82:8f:76:98:cb:b3:a8:f0:0a:e1:fc:3c:4a:e4:05:b8:7c:
ac:27:41:7d:51:a4:53:c0:b1:ce:ac:41:bf:ae:c5:66:5c:d1:
25:a2:3e:1e:e5:fa:52:44:25:13:61:ba:8f:77:00:13:a4:c4:
d6:bd:26:8e:6a:91:e0:33:b0:ac:50:42:b6:46:ba:2a:47:c4:
4c:77:53:1a:0d:60:fb:84:b9:a2:6c:23:38:6a:ff:23:d1:f1:
e5:d0:86:8b:a1:53:6f:8f:24:6b:56:8c:a8:90:29:70:1a:af:
2c:ed:0d:71:28:47:a8:46:99:92:7d:31:b2:ca:ad:86:71:c8:
0f:eb:28:48:55:2c:24:8e:9b:46:01:90:7a:ae:fe:2d:e4:b8:
5d:00:e4:59:ef:d3:b8:98:64:9b:1f:15:91:2d:4f:94:a4:14:
a8:35:fe:82:e5:32:22:83:13:a1:a8:dd:c2:0a:dd:0e:41:94:
78:07:6c:42:2e:d2:b0:96:9a:24:e3:a8:c4:59:37:02:25:a6:
98:b4:49:8a:c5:aa:47:48:5f:eb:d7:6b:a5:ce:54:e2:4d:6e:
e3:01:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:26:08 2026 by rpki-client