$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: 3w/Wi7QwSBMyGDdp4IGDvU2+rRQ/RmkJGURemhaqh/U= Subject key identifier: F3:AD:CD:76:BF:BC:8B:7B:78:C6:FB:C3:59:7E:35:F8:86:75:7C:0D Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0468 Signing time: Tue 22 Sep 2026 23:48:17 +0000 Manifest this update: Tue 22 Sep 2026 23:48:17 +0000 Manifest next update: Tue 29 Sep 2026 23:48:17 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: 8N+z+BNHcOsbmVD1R7vU3Y+X+O1ZJxAwBNCxvOu3O8E=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: ySJe+I3dozNuenRqVNkRZyIcXxzpogjD9zxaSvpwIMo=) 3: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: 9iACXyqJyXbzjckCXFceS2N5xwZfybCxOngbROUjtGI=) 4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: 9MUJ5ahbTn/0nfX/uwJrKv31jpeuSAMP0+bUKlRgGCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 23:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Sep 22 23:48:17 2026 GMT Not After : Sep 29 23:48:17 2026 GMT Subject: CN=6ab313c1-a7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b3:3c:13:be:e6:f6:63:2b:28:9a:2f:9d:27: 08:ae:af:ff:d0:cc:d7:74:5e:15:5c:6e:46:5b:fc: 25:85:ee:b1:72:6c:7e:10:e7:90:15:f9:f9:ea:b9: 68:90:a8:2d:c5:52:02:96:b8:6a:01:a3:6b:9c:c1: 61:42:c3:37:c7:61:bc:4d:4a:0e:92:29:35:ba:d8: 5a:48:1d:34:8e:57:25:ed:76:91:40:68:e7:f8:e9: 98:36:0e:09:56:49:0b:0a:0d:00:04:09:d7:32:ca: 46:26:2c:12:9b:4d:02:a0:de:47:f3:19:4c:40:03: 9f:61:8e:a5:d8:f9:81:14:05:54:b3:ba:e7:f1:f8: 33:73:82:a9:2a:eb:c5:15:90:6c:b3:db:4c:7b:05: 49:1f:31:14:1b:f7:ea:cb:2f:67:09:17:17:0a:58: d9:02:09:9e:07:32:9a:b2:16:79:14:6b:03:7d:ee: 29:2b:6a:d4:c2:dd:4d:21:77:db:8b:21:c8:3e:9c: 59:41:ef:a6:a9:4a:0e:d7:34:74:17:d3:3e:92:d3: 22:ed:00:88:a1:4e:de:64:2c:af:4f:80:d8:8a:cc: b5:e3:43:10:ba:0b:57:b7:b1:af:85:75:3e:3f:10: 0f:17:8b:86:54:f0:5d:20:d4:ac:fb:03:35:8d:76: 99:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:AD:CD:76:BF:BC:8B:7B:78:C6:FB:C3:59:7E:35:F8:86:75:7C:0D X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:b0:a6:76:f8:52:37:83:39:84:f7:e1:5c:42:6b:97:92:98: 9a:2e:1d:dc:a3:63:19:88:ca:88:0b:85:ad:25:6e:e8:7e:1d: b8:56:f9:f4:3d:42:07:f1:6d:7e:c9:ac:cb:18:78:f6:2f:ba: 75:af:3b:77:fc:d0:87:8d:e0:d4:d0:52:56:05:ed:e8:32:4e: eb:2f:87:5f:59:60:ab:22:d6:1c:20:bf:65:ff:86:21:f8:75: 3c:c1:ba:ba:75:bb:0b:35:b7:2c:2b:3c:3d:f8:44:eb:16:69: ce:8f:a1:32:33:20:ce:bf:e9:99:b6:8c:58:ab:b9:7e:a0:2d: c2:6f:81:53:9d:60:aa:19:de:63:a9:0e:8e:92:f0:ec:1b:f8: f6:b0:62:50:e9:de:2d:82:ba:fb:01:25:eb:3d:8b:21:4f:08: 50:c7:07:bf:09:6e:fe:ce:b2:5c:a1:ac:6c:07:7a:22:6f:51: e7:9f:53:ca:b1:88:ee:b6:7e:fb:43:8f:4e:e7:e7:e9:23:ca: 73:f8:99:82:c2:ee:d1:e4:b7:53:04:b4:cf:9f:ca:39:2e:91: 6d:58:0a:c2:c8:df:b2:11:c9:ef:11:3e:36:32:12:fa:d3:92: cb:40:41:7c:c3:2b:43:2e:30:b3:18:86:c2:03:2f:9f:4c:d3: e8:fa:b7:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjYwOTIyMjM0ODE3WhcNMjYwOTI5MjM0ODE3WjAYMRYwFAYD VQQDEw02YWIzMTNjMS1hN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrM8E77m9mMrKJovnScIrq//0MzXdF4VXG5GW/wlhe6xcmx+EOeQFfn56rlo kKgtxVIClrhqAaNrnMFhQsM3x2G8TUoOkik1uthaSB00jlcl7XaRQGjn+OmYNg4J VkkLCg0ABAnXMspGJiwSm00CoN5H8xlMQAOfYY6l2PmBFAVUs7rn8fgzc4KpKuvF FZBss9tMewVJHzEUG/fqyy9nCRcXCljZAgmeBzKashZ5FGsDfe4pK2rUwt1NIXfb iyHIPpxZQe+mqUoO1zR0F9M+ktMi7QCIoU7eZCyvT4DYisy140MQugtXt7GvhXU+ PxAPF4uGVPBdINSs+wM1jXaZ/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOtzXa/ vIt7eMb7w1l+NfiGdXwNMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWbCmdvhSN4M5hPfhXEJrl5KYmi4d3KNjGYjKiAuFrSVu6H4duFb59D1CB/Ft fsmsyxh49i+6da87d/zQh43g1NBSVgXt6DJO6y+HX1lgqyLWHCC/Zf+GIfh1PMG6 unW7CzW3LCs8PfhE6xZpzo+hMjMgzr/pmbaMWKu5fqAtwm+BU51gqhneY6kOjpLw 7Bv49rBiUOneLYK6+wEl6z2LIU8IUMcHvwlu/s6yXKGsbAd6Im9R559TyrGI7rZ+ +0OPTufn6SPKc/iZgsLu0eS3UwS0z5/KOS6RbVgKwsjfshHJ7xE+NjIS+tOSy0BB fMMrQy4wsxiGwgMvn0zT6Pq3cQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:50:05 2026 by rpki-client