$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: AfcAQVyla1tT03S/qxd10X5oe7eFFG0UW8d75S1LGSQ= Subject key identifier: 52:1A:8C:D1:28:3A:57:BD:78:F1:96:DA:AE:5F:8E:47:9C:15:85:C3 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 0247 Signing time: Wed 25 Mar 2026 02:03:29 +0000 Manifest this update: Wed 25 Mar 2026 02:03:28 +0000 Manifest next update: Wed 01 Apr 2026 02:03:28 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: TGD8d0ljTvt3YlukANPtLdgaDX1jEd6bK2ucdlICyOs=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=) 3: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU=) 4: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: zguPLjQ7EYK5huo8cUQuMnIJCKWigpE0oK0hmMTe1UA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Mar 25 02:03:28 2026 GMT Not After : Apr 1 02:03:28 2026 GMT Subject: CN=69c34271-f7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bd:80:77:21:e1:35:96:8e:90:d1:b4:c9:d9: 32:a2:4d:ad:a7:9f:ce:8f:d7:d9:30:f5:05:74:0a: 9b:4d:76:b7:20:f8:9f:bd:21:da:0f:b5:ee:9e:62: 3a:4e:c1:80:b5:ad:27:f1:ce:71:8c:5c:80:88:ca: 65:3e:8f:7d:74:09:40:66:6f:1e:b1:73:72:e6:54: 4c:61:89:fc:ca:21:da:15:7f:0b:29:03:87:c6:78: a4:8f:51:1e:eb:fc:73:b5:8b:94:5d:b1:4d:aa:ff: f6:fc:a0:04:59:61:3b:06:39:19:41:90:30:c6:c5: d5:4e:a7:90:d7:71:f8:d7:7b:f7:59:90:7f:d5:59: 76:ea:98:60:01:16:76:f3:10:04:b2:c8:9a:0a:bd: ce:6d:a9:19:38:59:9e:8c:74:5e:b7:66:f3:48:bf: b7:5e:60:ce:bd:96:30:66:b4:fb:26:4a:17:2c:25: d1:b6:f7:56:f0:c8:1d:bc:f5:dc:f4:68:ed:b5:df: 3d:d2:09:03:aa:66:5a:8b:9b:4a:42:25:dc:30:53: 80:2f:70:be:de:2c:8f:06:1d:dc:d4:3b:74:de:3a: 14:c7:12:6c:23:f0:a4:8f:d2:d2:47:ba:91:d9:5b: 24:e4:77:0f:f9:4a:1b:41:76:dd:80:5e:64:4c:31: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:1A:8C:D1:28:3A:57:BD:78:F1:96:DA:AE:5F:8E:47:9C:15:85:C3 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:35:78:f7:9d:a9:c4:e2:cd:59:30:4a:54:44:85:52:85:ed: 2b:0f:a8:b3:2d:77:76:42:e1:50:1b:58:95:ac:11:88:31:37: 3a:ff:97:b4:42:26:f6:ec:57:d9:fd:5b:01:d2:1d:50:b0:25: 14:22:0b:bc:6b:32:b0:d0:8c:46:af:66:d5:d3:72:09:c3:97: c0:d0:ab:09:d2:e9:65:e5:7d:38:20:33:b2:fd:9b:56:85:c0: 2b:81:5c:84:8c:62:ce:39:03:dc:16:b0:6c:d1:ae:d0:cb:85: 30:1c:71:ea:d5:54:ff:46:f1:80:b7:b8:53:18:1a:28:4b:5f: 46:05:61:e4:d1:3e:76:ed:1d:3b:18:9d:c6:44:33:0c:0f:7a: 42:3c:3f:35:95:5a:89:da:43:f1:44:59:37:17:1d:1c:8a:13: f9:0b:e3:44:d2:db:31:fb:55:38:5f:fd:aa:22:a1:4d:8a:d6: 5d:2a:46:25:68:d7:1a:a0:df:c0:b6:ce:5e:3a:ed:b0:c9:3d: a0:bd:ad:7a:71:a5:3a:64:61:73:ca:04:7c:ad:40:74:9f:3e: d5:6c:05:90:a0:cb:5e:0b:6f:f4:5d:d4:6c:ba:86:7f:9e:bb: ef:af:23:51:07:45:f6:cf:93:e1:59:14:fb:c5:8a:29:12:4f: 94:bc:47:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwMzI1MDIwMzI4WhcNMjYwNDAxMDIwMzI4WjAYMRYwFAYD VQQDEw02OWMzNDI3MS1mN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnL2AdyHhNZaOkNG0ydkyok2tp5/Oj9fZMPUFdAqbTXa3IPifvSHaD7XunmI6 TsGAta0n8c5xjFyAiMplPo99dAlAZm8esXNy5lRMYYn8yiHaFX8LKQOHxnikj1Ee 6/xztYuUXbFNqv/2/KAEWWE7BjkZQZAwxsXVTqeQ13H413v3WZB/1Vl26phgARZ2 8xAEssiaCr3ObakZOFmejHRet2bzSL+3XmDOvZYwZrT7JkoXLCXRtvdW8MgdvPXc 9Gjttd890gkDqmZai5tKQiXcMFOAL3C+3iyPBh3c1Dt03joUxxJsI/Ckj9LSR7qR 2Vsk5HcP+UobQXbdgF5kTDHReQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFIajNEo Ole9ePGW2q5fjkecFYXDMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXzV4952pxOLNWTBKVESFUoXtKw+osy13dkLhUBtYlawRiDE3Ov+XtEIm9uxX 2f1bAdIdULAlFCILvGsysNCMRq9m1dNyCcOXwNCrCdLpZeV9OCAzsv2bVoXAK4Fc hIxizjkD3BawbNGu0MuFMBxx6tVU/0bxgLe4UxgaKEtfRgVh5NE+du0dOxidxkQz DA96Qjw/NZVaidpD8URZNxcdHIoT+QvjRNLbMftVOF/9qiKhTYrWXSpGJWjXGqDf wLbOXjrtsMk9oL2tenGlOmRhc8oEfK1AdJ8+1WwFkKDLXgtv9F3UbLqGf567768j UQdF9s+T4VkU+8WKKRJPlLxHpg== -----END CERTIFICATE-----Generated at Thu Mar 26 08:18:58 2026 by rpki-client