$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: qrqC8YN2me+08a13K08icncXhU3Qx99rA+MOYRUPO10= Subject key identifier: EB:45:81:1A:58:BC:E1:B2:5D:E7:CE:BC:62:1E:B9:D1:53:33:72:A7 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: CF Signing time: Thu 23 Jul 2026 08:31:42 +0000 Manifest this update: Thu 23 Jul 2026 08:31:41 +0000 Manifest next update: Thu 30 Jul 2026 08:31:41 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: n9dkZb6Q9jHcHz6VUW6aNMXIvvO5GLM5P0sXNvxldvw=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: sNv7081XtV8EyLFPiBsb9HAMJSD9GQXf3Qs+h2VetI4=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: 8A0Ncvr0z3oh8CthhOuSyPoN4FbTMeFRsZZhlyB56aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Jul 23 08:31:41 2026 GMT Not After : Jul 30 08:31:41 2026 GMT Subject: CN=6a61d16e-171a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:60:90:f1:b2:eb:8a:a5:fd:c4:6f:05:cf: e1:e5:a7:e3:c6:31:66:b4:52:f1:18:9b:06:f9:73: 1e:1d:70:42:bd:21:8f:df:e4:4b:0c:dc:5c:6d:0c: ca:8e:c5:5a:99:20:51:df:4b:44:0c:dd:31:67:93: 69:cf:7a:77:92:37:f7:db:be:dc:63:b0:ba:04:d8: fa:2d:b4:37:1b:21:98:c3:12:56:97:5e:b6:47:02: 84:08:53:11:c6:ed:b9:0e:95:88:8e:8d:bb:b4:fb: 16:e1:5e:41:00:3f:42:c6:46:54:3d:c3:6e:61:c5: a2:ea:57:aa:48:a5:4d:c8:db:b1:8e:b5:8d:5c:c0: e4:ce:d1:79:bd:20:df:59:36:43:83:ca:89:cd:1f: 1c:f9:6f:67:78:dc:3e:75:8c:00:11:0c:55:3c:69: e3:d6:c2:43:1c:70:c3:07:25:10:eb:7a:49:1d:85: 15:fb:a5:58:57:03:e7:ca:66:a3:bc:cb:4b:9d:af: e2:4d:32:2b:0a:e2:c1:0b:b6:e9:83:6b:b1:49:7f: dd:f5:98:bb:75:0f:b8:5f:1c:84:ac:dc:5b:25:ea: aa:f5:7e:bc:35:94:f8:31:ff:45:5d:3a:94:94:6e: ec:cb:7b:c9:38:ca:7e:24:92:94:77:49:42:d9:1a: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:45:81:1A:58:BC:E1:B2:5D:E7:CE:BC:62:1E:B9:D1:53:33:72:A7 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:60:e8:44:f8:13:c9:2a:6f:59:c9:80:3c:dc:29:0d:2e:0e: 57:d2:ca:a3:cb:13:aa:5e:2a:16:a9:bd:32:99:fd:71:72:55: 5f:99:89:ce:96:13:a7:3f:ff:62:99:8d:ac:01:24:a1:5b:3e: 5a:68:b4:8d:71:4a:9f:9f:e7:04:60:a9:20:c9:db:d8:85:8b: 1d:a7:9f:bc:dc:4d:f8:08:ac:e5:61:3a:55:6e:ba:b4:6d:79: b7:a4:62:3d:66:7d:e6:f5:8c:7e:c6:d7:76:a4:d9:54:9f:d5: 83:39:5e:b2:4a:48:5d:b7:79:8d:d2:c0:5e:d8:6f:11:af:29: 46:ec:ef:28:6a:ce:b5:e7:e1:be:b8:c8:62:43:1d:83:0e:29: db:7a:1e:85:f0:a9:f7:e3:31:45:15:47:fd:33:a3:30:fa:c0: c5:12:12:3d:6a:29:c3:43:47:28:35:77:2c:cd:dc:ed:bd:8a: 1f:32:d6:79:e4:16:15:57:70:f1:90:06:20:a0:5f:b8:8a:ed: 2d:8d:55:44:d0:5b:03:7b:74:a4:76:a3:4d:6d:b7:78:be:0b: e9:40:49:6f:c3:08:9a:59:68:df:96:64:8a:ed:b4:3f:1d:09: df:13:62:63:20:9a:7b:fe:ba:e0:78:7f:17:d9:43:91:fe:5d: 3b:ff:65:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwNzIzMDgzMTQxWhcNMjYwNzMwMDgzMTQxWjAYMRYwFAYD VQQDEw02YTYxZDE2ZS0xNzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArU9gkPGy64ql/cRvBc/h5afjxjFmtFLxGJsG+XMeHXBCvSGP3+RLDNxcbQzK jsVamSBR30tEDN0xZ5Npz3p3kjf3277cY7C6BNj6LbQ3GyGYwxJWl162RwKECFMR xu25DpWIjo27tPsW4V5BAD9CxkZUPcNuYcWi6leqSKVNyNuxjrWNXMDkztF5vSDf WTZDg8qJzR8c+W9neNw+dYwAEQxVPGnj1sJDHHDDByUQ63pJHYUV+6VYVwPnymaj vMtLna/iTTIrCuLBC7bpg2uxSX/d9Zi7dQ+4XxyErNxbJeqq9X68NZT4Mf9FXTqU lG7sy3vJOMp+JJKUd0lC2RprcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtFgRpY vOGyXefOvGIeudFTM3KnMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWDoRPgTySpvWcmAPNwpDS4OV9LKo8sTql4qFqm9Mpn9cXJVX5mJzpYTpz// YpmNrAEkoVs+Wmi0jXFKn5/nBGCpIMnb2IWLHaefvNxN+Ais5WE6VW66tG15t6Ri PWZ95vWMfsbXdqTZVJ/VgzleskpIXbd5jdLAXthvEa8pRuzvKGrOtefhvrjIYkMd gw4p23oehfCp9+MxRRVH/TOjMPrAxRISPWopw0NHKDV3LM3c7b2KHzLWeeQWFVdw 8ZAGIKBfuIrtLY1VRNBbA3t0pHajTW23eL4L6UBJb8MImllo35Zkiu20Px0J3xNi YyCae/664Hh/F9lDkf5dO/9l+Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:19 2026 by rpki-client