
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier: 8nwIXitQER8urexutwmgHh3v2/RhJs6UhqUnT9h+D38=
Subject key identifier: 1E:00:8C:3A:D3:45:76:BA:D4:77:57:A0:1D:5D:38:03:A8:9D:2A:FC
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial: 027D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number: 025F
Signing time: Mon 11 May 2026 02:28:07 +0000
Manifest this update: Mon 11 May 2026 02:28:06 +0000
Manifest next update: Mon 18 May 2026 02:28:06 +0000
Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: EtVK/SfExWWd3qhAfdtJJpiNeGMFU6/wrONojEtGZAQ=)
2: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU=)
3: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
4: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: zguPLjQ7EYK5huo8cUQuMnIJCKWigpE0oK0hmMTe1UA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 02:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 637 (0x27d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Validity
Not Before: May 11 02:28:06 2026 GMT
Not After : May 18 02:28:06 2026 GMT
Subject: CN=6a013eb7-7352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9e:ee:c9:40:97:73:99:ff:db:bb:d9:1a:c2:
7f:46:af:98:f0:91:fa:d5:68:53:56:ad:1b:2d:45:
55:d3:7b:a3:ac:d1:93:55:d9:7c:77:5a:69:2c:a5:
fb:57:1f:5b:18:ce:58:81:90:ec:c1:bf:ba:86:71:
0f:95:e9:91:6b:d9:84:60:08:2b:a0:21:cb:f6:7b:
c4:7b:c4:2e:1a:fe:fc:27:d1:0f:75:96:e7:37:2a:
cc:15:a7:42:5d:47:5c:99:20:86:35:5b:f9:0c:e4:
9a:68:47:60:aa:d6:cf:38:f9:43:53:0b:6d:70:7f:
9d:f2:ab:bd:18:4a:f3:21:fb:77:09:25:d1:94:df:
aa:92:f6:15:ac:e2:fd:f4:a9:2b:3c:61:a7:57:8a:
9b:56:44:2a:2f:61:0f:98:bb:9f:88:26:62:46:84:
27:e2:03:7d:e2:07:a3:15:e5:96:43:4b:5e:64:6e:
0f:60:e9:fe:80:e6:31:fd:cf:3b:47:e6:90:4b:af:
c9:23:ba:ac:39:50:67:24:ec:05:4c:0d:e9:b4:52:
cf:84:66:e3:7e:a0:c9:9e:90:d4:5e:00:70:dd:86:
f0:da:60:ec:7f:9d:75:47:38:8e:2d:ac:d7:40:db:
f1:cf:c8:d5:a7:e3:ac:26:41:3e:9b:1f:e1:93:56:
7c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:00:8C:3A:D3:45:76:BA:D4:77:57:A0:1D:5D:38:03:A8:9D:2A:FC
X509v3 Authority Key Identifier:
keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:55:30:6f:46:07:b0:38:86:b6:0d:47:40:99:4f:33:c9:
4f:12:d3:7f:6a:a2:27:4f:55:5f:88:17:84:9f:4f:e6:e8:06:
17:24:c3:31:e3:63:a7:b8:0e:c2:bc:60:57:0c:4c:ea:5f:d5:
69:9a:45:ca:18:4b:1b:dc:84:f7:46:24:46:d6:1c:c7:f6:08:
e2:45:fd:4d:a1:ec:4a:0c:1a:0d:a6:a5:b3:27:0e:5e:ca:bf:
ea:71:60:0f:79:9a:f5:8f:17:e7:08:93:d2:4b:21:d9:ac:bc:
3e:8b:dd:f3:a1:17:bf:50:17:de:c8:29:f3:ef:28:f1:87:d4:
b1:96:e6:5b:ac:9d:e1:29:79:56:ba:80:f8:a6:36:39:50:1c:
95:88:de:9a:7e:6e:1c:ea:8b:94:ed:e5:6a:4a:3d:91:13:a1:
10:08:e1:38:37:5a:25:2a:71:a8:07:20:55:fb:b6:f7:38:de:
6f:a5:70:ee:12:15:ff:39:ba:83:8b:2b:5a:3a:61:aa:43:aa:
2b:a5:8a:11:c1:6d:ae:36:c8:ba:fb:eb:a6:bd:6a:ea:47:e3:
80:75:96:50:92:bb:57:80:7f:f8:69:b3:ef:c0:ea:ee:f3:dd:
2a:fa:8d:3f:d1:fd:ce:a8:db:ce:90:9f:52:b1:a0:fb:a0:58:
8b:5e:2d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:47:33 2026 by rpki-client