$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: ZyOJlH/S5dfxq5yPnuqVln03RONf+1JCJDhzU/mEpcM= Subject key identifier: 2C:02:C2:D5:AD:74:C4:B3:9C:59:E8:BF:B1:E6:24:BD:5C:6A:4B:01 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 010A Signing time: Sun 15 Nov 2026 06:17:18 +0000 Manifest this update: Sun 15 Nov 2026 06:17:18 +0000 Manifest next update: Sun 22 Nov 2026 06:17:18 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: VM3H1b2/4gO7TENbTOUhFkTuCnK/EeHnciAXQStz4+A=) 2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: 8A0Ncvr0z3oh8CthhOuSyPoN4FbTMeFRsZZhlyB56aY=) 3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: sNv7081XtV8EyLFPiBsb9HAMJSD9GQXf3Qs+h2VetI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Nov 15 06:17:18 2026 GMT Not After : Nov 22 06:17:18 2026 GMT Subject: CN=6af94e6e-f1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:6e:83:73:ca:31:0e:18:88:5e:a6:4f:2d: 1d:49:19:f1:96:9a:09:07:21:fd:14:6a:c2:2d:2e: 74:0e:4a:b2:02:66:bf:4f:2d:7b:be:1d:ae:ad:0f: e6:52:81:39:ba:ed:0c:77:97:e6:b4:28:da:a2:ef: cd:47:b5:7b:2d:cb:c9:d2:5f:0e:d2:94:8b:e2:6b: 89:f6:ae:c5:8b:c9:3b:b1:9f:bb:73:cc:07:be:28: 9c:a5:73:5b:23:0b:79:d1:30:3c:2b:aa:5a:71:ec: 2d:86:0b:71:e1:98:31:69:cb:de:49:29:ad:e7:05: ad:0b:5d:cd:a1:0e:a4:a1:28:ce:1f:e2:be:67:d7: e7:c9:6b:99:e3:48:fe:57:28:3d:e0:7c:8f:1e:a6: 93:26:57:87:87:59:c4:11:f4:25:23:d5:2b:7d:95: 8d:03:2e:63:e1:fe:f6:69:8b:48:29:53:82:45:aa: c5:28:5d:49:53:49:9b:8f:c1:b2:39:6d:52:1a:4b: fb:ef:7a:ba:d8:3e:aa:d1:45:13:d1:c0:26:92:c4: 99:9c:df:58:27:cc:e2:1f:65:89:5c:95:ca:84:2d: 2a:1a:70:d0:4e:42:5c:96:9b:02:f1:80:52:0b:b2: 4a:57:95:5b:29:ef:57:6c:fc:09:f1:13:9c:4d:d4: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:02:C2:D5:AD:74:C4:B3:9C:59:E8:BF:B1:E6:24:BD:5C:6A:4B:01 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:82:b3:1a:93:0d:34:ac:3a:48:60:25:3d:2e:cc:81:07:13: 9e:29:63:fb:04:02:bd:ce:80:fd:ee:c2:fd:76:90:c1:59:dd: 4e:34:3e:e2:f8:96:f2:12:af:2f:b8:a7:80:04:4a:3c:73:d2: b7:71:00:f5:1d:4a:ea:89:74:42:dc:5d:58:24:ea:ee:1d:cd: 3e:3d:53:0a:7f:02:59:b5:9d:c1:bc:22:59:2f:ec:5a:41:e7: ec:ca:0f:b2:97:04:ef:4b:44:56:2f:8b:42:72:2f:1e:bd:7b: 61:60:d1:ea:4f:58:9d:91:8a:88:42:e9:46:03:6b:09:73:c9: c9:fd:14:57:8a:6b:36:9b:af:04:57:f8:45:71:e5:50:3d:c6: 9e:bd:95:fb:e1:8e:89:08:2a:98:ec:8a:1a:60:67:20:b0:cd: 6a:e0:b4:cb:f1:c0:7f:8f:1c:40:bb:c4:ae:06:3b:d2:e3:38: 7e:47:8c:27:67:d3:a6:bd:1c:47:6b:12:fd:b8:b5:fa:22:56: 79:97:aa:84:f0:b9:8e:de:e9:3d:88:98:71:6a:3e:0a:7c:39: 5a:50:e8:5d:ff:f9:09:26:6a:17:3c:62:8a:c9:80:b9:46:50: 69:da:d6:6e:1b:c6:59:d8:8c:8b:38:b8:f4:15:46:da:a2:65: 3a:0e:cf:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYxMTE1MDYxNzE4WhcNMjYxMTIyMDYxNzE4WjAYMRYwFAYD VQQDEw02YWY5NGU2ZS1mMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUlug3PKMQ4YiF6mTy0dSRnxlpoJByH9FGrCLS50DkqyAma/Ty17vh2urQ/m UoE5uu0Md5fmtCjaou/NR7V7LcvJ0l8O0pSL4muJ9q7Fi8k7sZ+7c8wHviicpXNb Iwt50TA8K6pacewthgtx4ZgxacveSSmt5wWtC13NoQ6koSjOH+K+Z9fnyWuZ40j+ Vyg94HyPHqaTJleHh1nEEfQlI9UrfZWNAy5j4f72aYtIKVOCRarFKF1JU0mbj8Gy OW1SGkv773q62D6q0UUT0cAmksSZnN9YJ8ziH2WJXJXKhC0qGnDQTkJclpsC8YBS C7JKV5VbKe9XbPwJ8ROcTdR14QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwCwtWt dMSznFnov7HmJL1caksBMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGYKzGpMNNKw6SGAlPS7MgQcTnilj+wQCvc6A/e7C/XaQwVndTjQ+4viW8hKv L7ingARKPHPSt3EA9R1K6ol0QtxdWCTq7h3NPj1TCn8CWbWdwbwiWS/sWkHn7MoP spcE70tEVi+LQnIvHr17YWDR6k9YnZGKiELpRgNrCXPJyf0UV4prNpuvBFf4RXHl UD3Gnr2V++GOiQgqmOyKGmBnILDNauC0y/HAf48cQLvErgY70uM4fkeMJ2fTpr0c R2sS/bi1+iJWeZeqhPC5jt7pPYiYcWo+Cnw5WlDoXf/5CSZqFzxiismAuUZQadrW bhvGWdiMizi49BVG2qJlOg7PSg== -----END CERTIFICATE-----Generated at Sun Nov 15 10:23:54 2026 by rpki-client