$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: YDJLI9dhALlHPcxe+JrI4+SK8oeYdR7BO04kNJ8mLhw= Subject key identifier: 63:AF:47:C8:74:CC:D4:B8:E8:FA:78:45:6D:CA:C6:32:3A:C9:B2:09 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: EF Signing time: Wed 23 Sep 2026 06:09:54 +0000 Manifest this update: Wed 23 Sep 2026 06:09:53 +0000 Manifest next update: Wed 30 Sep 2026 06:09:53 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: 9Cs168vVWD0XkNShQn0SRq36ItVuuoIjO2ADBkVdpTw=) 2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: 8A0Ncvr0z3oh8CthhOuSyPoN4FbTMeFRsZZhlyB56aY=) 3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: sNv7081XtV8EyLFPiBsb9HAMJSD9GQXf3Qs+h2VetI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Sep 23 06:09:53 2026 GMT Not After : Sep 30 06:09:53 2026 GMT Subject: CN=6ab36d32-fc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:3f:94:92:b9:34:4b:50:dd:57:72:4f:ca: d7:21:69:36:f3:3e:ac:8a:3d:3f:26:5a:da:12:8e: 0a:91:83:95:3d:f6:94:70:33:8e:55:e0:14:1c:a8: d5:2a:d5:4c:9d:d4:b0:e6:89:39:9c:4e:d8:95:b2: ca:63:17:3b:85:bc:97:0a:10:8c:ec:e5:e7:58:2d: 39:6d:05:16:b9:14:e2:f0:8e:62:37:eb:4a:87:27: ac:8e:09:07:cb:36:a2:ac:cd:b5:23:f4:3b:e7:49: 96:12:46:61:37:a1:df:da:d0:88:02:98:1b:d7:76: 1a:92:87:be:ed:68:f4:b7:f7:0e:14:91:4f:5f:3d: 85:cf:a4:fc:05:c7:48:a3:d9:b9:a1:ac:a9:00:e4: 16:1b:dc:e4:2d:61:42:ea:ad:51:f9:d2:50:90:2e: c1:71:71:62:85:13:b5:68:bf:60:0e:95:01:04:eb: f2:01:43:73:ef:87:ac:74:67:d8:9c:ba:61:30:4f: 82:c0:a5:ac:bb:3a:b3:c8:cb:cb:81:4c:d9:97:8c: 9c:11:6a:d4:c4:17:71:0a:3a:58:5d:59:28:d4:01: af:c3:98:e1:4e:5d:2c:61:40:6f:04:ee:61:dc:5b: 60:bd:3b:ee:df:0c:9d:e7:da:3e:25:ab:ee:3c:a7: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AF:47:C8:74:CC:D4:B8:E8:FA:78:45:6D:CA:C6:32:3A:C9:B2:09 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7e:a2:6b:ed:23:35:09:b3:8c:92:75:fa:d0:72:60:e0:13: 05:64:f2:88:23:56:c0:3b:09:45:e1:d0:dc:27:03:9a:0e:5d: 7c:35:d6:ed:fd:b4:fb:8a:6f:fe:8e:c7:10:ce:c3:af:fb:93: fd:b2:01:4d:ce:0c:0a:27:87:0b:b2:a0:fd:2f:62:3d:bb:cc: 9d:47:52:99:6f:87:eb:8c:0a:88:28:15:45:18:1d:df:15:e3: c6:86:fa:ea:bd:ce:a2:8c:c0:05:2e:61:5b:c0:4e:73:d9:4a: 89:a3:e1:38:b9:17:90:ce:ce:88:41:2e:44:88:0c:a6:cc:be: 1a:67:de:23:f8:d0:27:05:95:cd:b9:1c:23:c0:7c:e0:68:74: 84:0f:17:b3:4d:55:73:fd:4e:35:59:5c:65:09:c8:5f:33:f7: 27:f1:9c:9b:dc:be:22:64:95:b7:3d:51:cb:6c:18:3f:10:b5: 45:74:1f:89:4b:06:86:60:43:6c:a9:e3:d1:c4:33:c4:d5:b1: 05:0f:7a:81:04:a4:ff:55:2b:47:40:f7:cb:da:1b:a7:dd:7a: ef:35:f6:29:f6:6d:00:f5:74:7e:68:a9:b1:4a:22:dd:78:c8: c9:5a:bc:58:5e:5b:1d:23:e5:e0:32:72:d9:66:19:25:ed:8d: ca:d0:c1:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwOTIzMDYwOTUzWhcNMjYwOTMwMDYwOTUzWjAYMRYwFAYD VQQDEw02YWIzNmQzMi1mYzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCU/lJK5NEtQ3VdyT8rXIWk28z6sij0/JlraEo4KkYOVPfaUcDOOVeAUHKjV KtVMndSw5ok5nE7YlbLKYxc7hbyXChCM7OXnWC05bQUWuRTi8I5iN+tKhyesjgkH yzairM21I/Q750mWEkZhN6Hf2tCIApgb13Yakoe+7Wj0t/cOFJFPXz2Fz6T8BcdI o9m5oaypAOQWG9zkLWFC6q1R+dJQkC7BcXFihRO1aL9gDpUBBOvyAUNz74esdGfY nLphME+CwKWsuzqzyMvLgUzZl4ycEWrUxBdxCjpYXVko1AGvw5jhTl0sYUBvBO5h 3FtgvTvu3wyd59o+JavuPKedEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOvR8h0 zNS46Pp4RW3KxjI6ybIJMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlX6ia+0jNQmzjJJ1+tByYOATBWTyiCNWwDsJReHQ3CcDmg5dfDXW7f20+4pv /o7HEM7Dr/uT/bIBTc4MCieHC7Kg/S9iPbvMnUdSmW+H64wKiCgVRRgd3xXjxob6 6r3OoozABS5hW8BOc9lKiaPhOLkXkM7OiEEuRIgMpsy+GmfeI/jQJwWVzbkcI8B8 4Gh0hA8Xs01Vc/1ONVlcZQnIXzP3J/Gcm9y+ImSVtz1Ry2wYPxC1RXQfiUsGhmBD bKnj0cQzxNWxBQ96gQSk/1UrR0D3y9obp9167zX2KfZtAPV0fmipsUoi3XjIyVq8 WF5bHSPl4DJy2WYZJe2NytDBHw== -----END CERTIFICATE-----Generated at Thu Sep 24 10:26:25 2026 by rpki-client