$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: bS506uhJHMoPgmpHEjSIrJgKSW3YpqhKvNGLDocOpUs= Subject key identifier: E0:D3:06:F6:CF:3C:3F:91:BA:0D:B1:40:4F:8D:90:9D:8B:A9:75:47 Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 043A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0422 Signing time: Wed 13 May 2026 00:31:58 +0000 Manifest this update: Wed 13 May 2026 00:31:58 +0000 Manifest next update: Wed 20 May 2026 00:31:58 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: DhEt2lkpMPtoWilMZ31KYb48t1bmr/N7KJyOrdDe19A=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hSprzsVeX7yn1D4PAkL8tJfBZML1aZzPNfAasYni9Tc=) 3: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=) 4: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: NSST2LOuWe69wNvMDCc9lW2N+MLu6oemF2NWRRONKO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 00:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1082 (0x43a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: May 13 00:31:58 2026 GMT Not After : May 20 00:31:58 2026 GMT Subject: CN=6a03c67e-3a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:47:23:df:a5:d7:3e:7e:d3:4e:b7:a2:24: 7f:e0:a7:e9:27:68:13:7d:23:73:bc:b6:e4:2c:1b: 32:2c:b6:af:9b:ef:97:c8:c4:3a:26:9d:1f:1a:9c: 53:15:6e:03:4e:fe:4e:c4:7d:9b:14:c9:df:42:07: eb:61:d2:2d:d1:33:41:ff:c7:8e:ca:22:47:6b:90: 4a:98:e6:94:c5:30:96:39:0a:c0:1b:63:0c:7a:5e: 4f:b6:ca:7d:6c:c8:18:6e:c8:c0:07:2d:6c:a8:9f: 7a:9b:c0:47:29:db:6f:83:a9:a2:47:0a:e1:61:fd: ca:94:b2:b7:90:06:98:70:1e:68:90:5e:de:4b:50: ba:89:4f:23:4e:62:5f:80:0c:58:c2:8d:49:8f:a9: 06:63:c3:99:ed:40:11:e9:d0:08:01:d4:0e:4c:4a: 3a:75:a3:8e:72:42:4a:b8:47:a6:ba:51:75:ea:21: f3:d1:7d:89:ec:c1:a6:3e:3e:82:d5:b5:6c:d4:b3: 7e:b3:d1:06:6d:93:07:ec:a9:63:31:bf:38:e1:fe: 14:17:7c:02:3b:a8:4b:ff:0b:42:ab:ac:40:e7:61: f4:60:bd:8a:8a:d0:53:2a:21:e4:83:e3:8e:6e:31: 64:d9:eb:ba:44:c9:e7:a9:bf:9a:b5:7b:b8:16:c1: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D3:06:F6:CF:3C:3F:91:BA:0D:B1:40:4F:8D:90:9D:8B:A9:75:47 X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:e0:ae:4e:39:e6:2e:da:33:fb:82:45:d3:2b:c2:8e:14: 78:1a:31:4e:30:5d:eb:85:5d:21:cf:ab:4c:23:30:79:4a:f8: e8:6d:74:dc:29:e2:b3:92:b0:99:3f:4d:fd:74:03:fb:55:ad: 66:5c:79:5b:ab:ad:4d:7e:32:da:ef:f4:30:96:51:98:01:2f: 1b:c6:34:d4:79:a5:b4:8f:34:29:53:ce:dd:5a:2f:aa:bb:e1: d0:30:86:0e:e9:0b:aa:25:18:bc:bf:7b:1e:bf:99:08:25:fb: 7a:7b:f6:73:68:b6:a8:2e:6c:33:a1:86:2b:c2:4b:87:4d:d5: a7:79:53:f0:4c:fe:df:4a:e7:17:ac:0e:23:2c:4e:ea:22:21: 15:e8:c7:c7:02:0b:94:28:41:1e:2e:58:53:62:a7:df:4c:80: 5d:7b:c7:a7:62:a9:89:39:67:b6:f9:07:77:a2:02:e9:5b:56: 4c:98:55:d4:40:ca:fe:fa:14:2c:32:47:fd:3f:4f:95:92:b8: 3e:1a:e5:81:40:97:88:c2:9b:45:cf:33:51:f6:63:1d:9b:f2: 38:4b:9c:a2:50:97:9c:d6:32:80:53:02:fe:6c:24:9e:ef:16: 29:dc:e0:35:e6:7c:92:ee:fa:28:2a:97:89:37:14:a8:51:be: 67:c6:00:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjYwNTEzMDAzMTU4WhcNMjYwNTIwMDAzMTU4WjAYMRYwFAYD VQQDEw02YTAzYzY3ZS0zYTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqltHI9+l1z5+0063oiR/4KfpJ2gTfSNzvLbkLBsyLLavm++XyMQ6Jp0fGpxT FW4DTv5OxH2bFMnfQgfrYdIt0TNB/8eOyiJHa5BKmOaUxTCWOQrAG2MMel5Ptsp9 bMgYbsjABy1sqJ96m8BHKdtvg6miRwrhYf3KlLK3kAaYcB5okF7eS1C6iU8jTmJf gAxYwo1Jj6kGY8OZ7UAR6dAIAdQOTEo6daOOckJKuEemulF16iHz0X2J7MGmPj6C 1bVs1LN+s9EGbZMH7KljMb844f4UF3wCO6hL/wtCq6xA52H0YL2KitBTKiHkg+OO bjFk2eu6RMnnqb+atXu4FsE2zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFODTBvbP PD+Rug2xQE+NkJ2LqXVHMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjWfgrk455i7aM/uCRdMrwo4UeBoxTjBd64VdIc+rTCMweUr46G103Cnis5Kw mT9N/XQD+1WtZlx5W6utTX4y2u/0MJZRmAEvG8Y01HmltI80KVPO3Vovqrvh0DCG DukLqiUYvL97Hr+ZCCX7env2c2i2qC5sM6GGK8JLh03Vp3lT8Ez+30rnF6wOIyxO 6iIhFejHxwILlChBHi5YU2Kn30yAXXvHp2KpiTlntvkHd6IC6VtWTJhV1EDK/voU LDJH/T9PlZK4PhrlgUCXiMKbRc8zUfZjHZvyOEucolCXnNYygFMC/mwknu8WKdzg NeZ8ku76KCqXiTcUqFG+Z8YAoA== -----END CERTIFICATE-----Generated at Wed May 13 05:04:28 2026 by rpki-client