$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: Ql+ACot7F0n2CizBHdlE4rR0XO0llu2gzl5EAupQZdI= Subject key identifier: 81:03:88:73:D8:7D:C4:8F:ED:72:0D:49:2C:81:37:7C:0C:B2:2E:A8 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 0287 Signing time: Thu 23 Jul 2026 03:15:55 +0000 Manifest this update: Thu 23 Jul 2026 03:15:55 +0000 Manifest next update: Thu 30 Jul 2026 03:15:55 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: PVX3kK2sQzyZcRbJvE8uaOkuJerudaprpjSBL/uXUUI=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=) 3: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=) 4: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Jul 23 03:15:55 2026 GMT Not After : Jul 30 03:15:55 2026 GMT Subject: CN=6a61876b-cd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:2e:9d:b7:48:24:2f:a3:4c:fb:65:27:0a: e6:e4:76:f5:a6:d7:29:d5:b0:ee:1f:ce:0e:33:fb: 33:47:3d:6a:29:97:19:c9:4a:59:9f:41:2e:2d:90: d2:c6:aa:e5:9c:db:88:23:2a:1f:f6:b2:db:5d:b5: a6:c4:7d:f9:75:3d:6f:37:e0:37:c8:fc:1a:a4:e2: 74:82:91:b4:0b:06:dc:c6:da:af:96:51:f4:66:ca: cc:5e:c7:4a:2c:6a:24:42:fa:86:46:8c:27:7f:e8: 7b:66:e4:6b:90:87:da:2f:38:12:2a:f4:e6:77:d8: 02:46:ae:d8:ac:b2:4d:d9:ee:fb:39:03:b3:6e:57: 49:3e:e8:5c:18:e0:9f:22:e8:96:ee:6a:0a:c6:32: d2:04:91:54:1d:29:49:e3:6f:9a:cd:35:fa:a9:98: 0d:75:63:14:74:37:97:2e:63:77:ec:dd:33:29:9d: 73:37:3e:c1:22:47:fb:7a:d1:81:ac:66:f8:ce:14: 14:68:6a:58:18:5d:54:10:40:c5:58:e2:41:16:e6: 17:bd:44:57:25:85:1c:84:06:50:0e:4d:d8:91:7d: 59:62:d7:55:a2:10:60:97:81:4b:20:75:71:9c:64: b8:a2:3e:09:7b:c7:06:99:fa:b0:b3:05:7d:ac:9c: 05:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:03:88:73:D8:7D:C4:8F:ED:72:0D:49:2C:81:37:7C:0C:B2:2E:A8 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:02:af:ed:9e:b1:eb:fe:91:44:9f:09:21:50:f7:fb:4a:27: af:fe:28:5b:17:d8:b1:57:93:57:c9:db:3e:59:79:06:d9:1c: b8:3a:8f:f9:af:21:0e:85:06:c5:c6:d2:25:0c:11:dd:65:96: 25:66:99:5b:bf:81:0b:96:c2:4d:7d:f2:47:1a:13:09:3e:a7: e3:b0:70:65:ca:e8:c6:79:c7:74:af:46:a0:b4:16:bc:bd:3d: ee:61:e5:22:58:da:a8:f2:4f:9d:9e:44:13:bc:47:3d:37:fd: 0f:b2:eb:3d:9b:8c:11:8d:a2:ac:89:49:f8:91:a5:b4:be:98: 6a:45:f6:6c:8f:92:e1:8a:8d:23:e7:30:14:79:db:8b:f9:dc: 43:73:a2:ff:03:70:30:4f:d1:2d:f7:49:e2:9a:89:64:8a:3a: 34:1c:cb:36:32:0f:3d:22:64:32:14:73:9b:a7:04:a4:39:80: 28:a7:34:df:74:38:90:8b:0c:c4:1d:a2:63:2e:e3:3d:38:21: cb:c9:06:8f:66:0d:81:6d:b1:b4:b4:bc:85:fd:3b:3d:37:f4: 30:42:ae:60:e9:29:e9:b8:d5:57:28:51:12:78:2d:d8:18:19: 16:ca:1d:91:64:07:2c:a6:4b:07:8d:6b:4e:d2:7a:6d:cf:8f: 78:76:5a:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwNzIzMDMxNTU1WhcNMjYwNzMwMDMxNTU1WjAYMRYwFAYD VQQDEw02YTYxODc2Yi1jZDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApx0unbdIJC+jTPtlJwrm5Hb1ptcp1bDuH84OM/szRz1qKZcZyUpZn0EuLZDS xqrlnNuIIyof9rLbXbWmxH35dT1vN+A3yPwapOJ0gpG0CwbcxtqvllH0ZsrMXsdK LGokQvqGRownf+h7ZuRrkIfaLzgSKvTmd9gCRq7YrLJN2e77OQOzbldJPuhcGOCf IuiW7moKxjLSBJFUHSlJ42+azTX6qZgNdWMUdDeXLmN37N0zKZ1zNz7BIkf7etGB rGb4zhQUaGpYGF1UEEDFWOJBFuYXvURXJYUchAZQDk3YkX1ZYtdVohBgl4FLIHVx nGS4oj4Je8cGmfqwswV9rJwFMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEDiHPY fcSP7XINSSyBN3wMsi6oMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcAKv7Z6x6/6RRJ8JIVD3+0onr/4oWxfYsVeTV8nbPll5BtkcuDqP+a8hDoUG xcbSJQwR3WWWJWaZW7+BC5bCTX3yRxoTCT6n47BwZcroxnnHdK9GoLQWvL097mHl IljaqPJPnZ5EE7xHPTf9D7LrPZuMEY2irIlJ+JGltL6YakX2bI+S4YqNI+cwFHnb i/ncQ3Oi/wNwME/RLfdJ4pqJZIo6NBzLNjIPPSJkMhRzm6cEpDmAKKc033Q4kIsM xB2iYy7jPTghy8kGj2YNgW2xtLS8hf07PTf0MEKuYOkp6bjVVyhREngt2BgZFsod kWQHLKZLB41rTtJ6bc+PeHZa1A== -----END CERTIFICATE-----Generated at Thu Jul 23 21:24:59 2026 by rpki-client