$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: /ZaywQjFiUwH3Jf0ovxJOfT/QoaT4F0VH+xTJ8I5XE4= Subject key identifier: 14:AE:E8:18:35:E8:F4:1F:BD:B9:5E:B6:76:55:56:FC:E0:75:C2:AC Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 0409 Signing time: Wed 25 Mar 2026 00:08:53 +0000 Manifest this update: Wed 25 Mar 2026 00:08:52 +0000 Manifest next update: Wed 01 Apr 2026 00:08:52 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: VDrlz0T3GRKUA4x5cucsD9XuWui0zf7RJVaDeXGZys0=) 2: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: NSST2LOuWe69wNvMDCc9lW2N+MLu6oemF2NWRRONKO4=) 4: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hSprzsVeX7yn1D4PAkL8tJfBZML1aZzPNfAasYni9Tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Mar 25 00:08:52 2026 GMT Not After : Apr 1 00:08:52 2026 GMT Subject: CN=69c32794-3653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f4:9f:17:f9:8b:e0:d6:3b:50:5c:4b:17:e3: 5c:fb:57:20:7e:06:27:f6:b9:2b:c5:67:77:2d:91: 6e:b6:a7:34:e3:dd:ca:77:60:b8:57:25:81:86:44: fe:44:20:ac:f9:9f:9e:88:a5:ba:50:b1:4f:5f:ed: 47:fd:85:f5:7c:88:dd:95:65:7c:d8:75:1a:d2:fc: 0e:97:6d:24:1b:23:fb:c6:13:cf:1b:70:dd:9d:a0: a7:60:27:15:96:07:ab:ce:97:0f:9b:9e:96:37:ae: 05:c8:42:ef:4d:94:c4:ee:e6:47:9e:bd:d3:3b:32: 2a:43:5f:26:0c:66:d1:7d:f1:3a:e1:35:e8:42:fb: e0:3d:ec:ae:54:47:49:24:a6:50:d7:26:83:a9:25: 59:61:a9:50:d6:ed:3a:f9:73:6e:a2:75:9a:b7:f7: b5:19:5b:8b:5d:02:44:97:6b:e0:d4:57:3b:6f:d9: b3:48:32:11:6a:34:13:93:5e:02:74:79:99:d5:c3: c7:9c:db:fa:8d:fd:d6:2c:91:2a:6d:1f:75:11:3c: 86:a9:d1:98:7e:40:77:bf:05:93:a4:a6:49:d6:26: 38:1a:7e:e1:3d:74:c9:99:25:f9:63:1e:95:68:a7: 67:b8:9b:49:04:af:3f:14:fc:0d:98:8e:40:3e:91: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:E8:18:35:E8:F4:1F:BD:B9:5E:B6:76:55:56:FC:E0:75:C2:AC X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:40:89:e4:4b:66:94:cd:f3:a5:1e:5a:d1:85:5a:f7:f9:78: 4c:e0:03:bc:38:8a:34:03:02:df:aa:fd:f2:f1:9b:2f:ba:04: f2:06:9c:ef:17:80:65:59:b0:fc:cc:b7:7e:2f:44:06:8d:78: de:11:49:3f:7d:32:53:b7:66:23:49:61:37:72:e1:d7:09:9d: 3a:69:df:a1:7b:1b:7e:da:3f:46:d6:47:61:e8:d1:fe:43:cc: 85:17:7d:45:53:1a:e1:8f:00:fe:65:ac:2d:a5:1b:3e:60:61: 4c:b8:75:7f:ec:c9:eb:0b:7e:e9:0d:31:09:2e:44:e6:1c:87: 99:b6:1b:a8:f5:6e:6f:45:92:66:96:f8:b7:52:7b:f2:40:9d: e4:a8:ca:7a:7e:35:51:44:b9:a1:9f:97:c6:94:2a:68:cd:43: cb:b1:ea:5a:db:e6:e5:d1:94:ef:46:9b:b4:ca:96:51:b4:24: eb:ee:96:e6:f9:a6:6f:e0:7b:71:1d:d6:dd:c5:60:59:18:50: b3:9f:df:2f:f9:6f:39:23:cd:ac:6c:cd:81:78:0a:fb:8a:fc: 93:9e:e2:c8:55:03:6f:b7:25:e1:e8:f0:85:26:fd:77:a5:4c: 60:40:73:1f:f9:03:a3:74:38:2e:73:a5:54:36:6c:af:7a:85: 95:04:db:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjYwMzI1MDAwODUyWhcNMjYwNDAxMDAwODUyWjAYMRYwFAYD VQQDEw02OWMzMjc5NC0zNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/SfF/mL4NY7UFxLF+Nc+1cgfgYn9rkrxWd3LZFutqc0493Kd2C4VyWBhkT+ RCCs+Z+eiKW6ULFPX+1H/YX1fIjdlWV82HUa0vwOl20kGyP7xhPPG3DdnaCnYCcV lgerzpcPm56WN64FyELvTZTE7uZHnr3TOzIqQ18mDGbRffE64TXoQvvgPeyuVEdJ JKZQ1yaDqSVZYalQ1u06+XNuonWat/e1GVuLXQJEl2vg1Fc7b9mzSDIRajQTk14C dHmZ1cPHnNv6jf3WLJEqbR91ETyGqdGYfkB3vwWTpKZJ1iY4Gn7hPXTJmSX5Yx6V aKdnuJtJBK8/FPwNmI5APpECTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSu6Bg1 6PQfvbletnZVVvzgdcKsMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXUCJ5EtmlM3zpR5a0YVa9/l4TOADvDiKNAMC36r98vGbL7oE8gac7xeAZVmw /My3fi9EBo143hFJP30yU7dmI0lhN3Lh1wmdOmnfoXsbfto/RtZHYejR/kPMhRd9 RVMa4Y8A/mWsLaUbPmBhTLh1f+zJ6wt+6Q0xCS5E5hyHmbYbqPVub0WSZpb4t1J7 8kCd5KjKen41UUS5oZ+XxpQqaM1Dy7HqWtvm5dGU70abtMqWUbQk6+6W5vmmb+B7 cR3W3cVgWRhQs5/fL/lvOSPNrGzNgXgK+4r8k57iyFUDb7cl4ejwhSb9d6VMYEBz H/kDo3Q4LnOlVDZsr3qFlQTbbQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:01 2026 by rpki-client