$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: rt3orFyKJRUMCTlW0NUdC7puIpK81f6ezVbgjyaUTqQ= Subject key identifier: D2:4B:3D:21:B0:8C:23:AE:88:CA:18:29:48:7A:36:D2:2A:D8:48:09 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 91 Signing time: Wed 25 Mar 2026 06:41:46 +0000 Manifest this update: Wed 25 Mar 2026 06:41:45 +0000 Manifest next update: Wed 01 Apr 2026 06:41:45 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: Pra14Bt2Qes9wG51hTBnJhKISeHnsHmiAwhc23BxBac=) 2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=) 3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: zIMly+FS9YUi3pvudCV4ThJ4KJbFHoU/zWu/5zHps80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Mar 25 06:41:45 2026 GMT Not After : Apr 1 06:41:45 2026 GMT Subject: CN=69c383aa-7fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:42:9a:ab:34:65:58:a8:1f:31:ea:2d:2b: d3:c7:db:c1:89:04:ab:52:61:f2:4e:70:6c:80:1f: cf:c9:9b:64:e3:e7:e5:04:10:e2:c8:98:4a:0b:72: 77:84:ea:10:f1:05:92:8c:5f:e2:13:56:1d:32:67: 04:a3:fa:37:95:87:f3:e0:46:9c:d5:8e:c4:72:a2: 2d:3b:a9:8d:38:3a:4a:42:5f:f1:7d:31:63:c0:2b: 7f:e0:87:4f:3e:dc:d3:41:41:32:d9:86:e2:e5:f5: 94:4a:10:2a:8a:9a:b9:01:55:ac:6c:c6:fe:3a:40: 06:8f:c5:3a:29:74:0c:50:a3:82:a7:51:a2:2f:59: dc:0f:de:f6:a8:e0:a8:9b:65:a4:95:d5:2b:8c:3b: 91:fe:e3:58:c1:36:2f:08:f7:e0:82:8e:31:21:b9: a1:df:25:72:fe:87:70:80:0f:65:d4:c5:48:8b:92: d0:40:39:50:ee:32:31:13:dc:a6:d6:4e:52:52:ef: 85:12:64:08:70:9c:89:02:45:e3:af:33:46:6a:8c: 01:2a:98:7a:cf:57:55:54:06:47:a5:e3:d7:80:3b: b5:d5:67:05:99:ea:fb:74:cc:da:3b:f4:3a:f7:db: ab:a2:5f:d8:61:3b:63:6a:70:10:52:25:3b:b0:3a: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:3D:21:B0:8C:23:AE:88:CA:18:29:48:7A:36:D2:2A:D8:48:09 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:22:36:ff:a1:91:02:94:31:35:68:c4:b1:2e:74:06:e4:f1: ae:87:13:e5:19:67:23:52:d4:20:c7:b4:36:9e:87:da:1e:a3: 52:f9:fb:3a:91:86:07:de:e5:db:e1:ee:b1:17:06:4f:e1:d9: 43:96:61:99:1d:30:88:80:7d:0d:5e:a4:de:34:52:98:63:55: 09:e4:a9:a4:3e:cf:c2:9a:99:71:da:a6:6c:9e:cb:05:3f:55: 54:3f:42:9a:7c:80:fc:1e:62:91:22:39:73:33:4d:67:a3:82: 57:54:59:6f:26:16:17:63:d2:fc:d3:85:33:2d:5c:d4:a3:5d: e6:ee:98:73:f2:cc:ac:97:15:1c:ff:d6:0c:79:66:83:60:40: 9f:3f:d7:d6:bc:3f:fa:83:f1:b9:3b:3b:cf:27:77:b9:2f:16: 5e:72:94:53:3a:51:a3:f1:19:c4:bc:51:13:e3:0d:ff:cc:c7: 84:30:18:9b:de:1e:99:ed:3d:9e:fc:7f:ec:dd:54:3c:9c:f1: ad:5f:9e:1b:e4:3a:36:ae:04:69:6c:14:97:00:98:f1:65:1e: 8b:cd:2f:7f:54:20:7b:a0:c0:7a:71:01:be:f3:cf:d2:bd:a9: 58:1e:8d:7d:8e:1c:3c:8f:01:0f:64:c5:b6:ef:37:98:1e:30: 33:4f:9e:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwMzI1MDY0MTQ1WhcNMjYwNDAxMDY0MTQ1WjAYMRYwFAYD VQQDEw02OWMzODNhYS03ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoLxCmqs0ZVioHzHqLSvTx9vBiQSrUmHyTnBsgB/PyZtk4+flBBDiyJhKC3J3 hOoQ8QWSjF/iE1YdMmcEo/o3lYfz4Eac1Y7EcqItO6mNODpKQl/xfTFjwCt/4IdP PtzTQUEy2Ybi5fWUShAqipq5AVWsbMb+OkAGj8U6KXQMUKOCp1GiL1ncD972qOCo m2WkldUrjDuR/uNYwTYvCPfggo4xIbmh3yVy/odwgA9l1MVIi5LQQDlQ7jIxE9ym 1k5SUu+FEmQIcJyJAkXjrzNGaowBKph6z1dVVAZHpePXgDu11WcFmer7dMzaO/Q6 99urol/YYTtjanAQUiU7sDqHIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNJLPSGw jCOuiMoYKUh6NtIq2EgJMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEyI2/6GRApQxNWjEsS50BuTxrocT5RlnI1LUIMe0Np6H2h6jUvn7OpGGB97l 2+HusRcGT+HZQ5ZhmR0wiIB9DV6k3jRSmGNVCeSppD7PwpqZcdqmbJ7LBT9VVD9C mnyA/B5ikSI5czNNZ6OCV1RZbyYWF2PS/NOFMy1c1KNd5u6Yc/LMrJcVHP/WDHlm g2BAnz/X1rw/+oPxuTs7zyd3uS8WXnKUUzpRo/EZxLxRE+MN/8zHhDAYm94eme09 nvx/7N1UPJzxrV+eG+Q6Nq4EaWwUlwCY8WUei80vf1Qge6DAenEBvvPP0r2pWB6N fY4cPI8BD2TFtu83mB4wM0+e8g== -----END CERTIFICATE-----Generated at Thu Mar 26 20:24:10 2026 by rpki-client