$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: VdT+6NoC/3xnY8hk4DFX6mU43ThVeCKfivzaI7E1LQA= Subject key identifier: 10:3F:56:A0:6A:97:1D:D3:65:49:00:8D:4D:E6:E3:2F:5E:4E:18:FC Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 0245 Signing time: Sat 21 Mar 2026 01:53:41 +0000 Manifest this update: Sat 21 Mar 2026 01:53:41 +0000 Manifest next update: Sat 28 Mar 2026 01:53:41 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: 1cyJLJFBy9/3exMdwHT5GyBgwZS139Ij6YmjQLrcaRI=) 2: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU=) 3: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: zguPLjQ7EYK5huo8cUQuMnIJCKWigpE0oK0hmMTe1UA=) 4: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Mar 21 01:53:41 2026 GMT Not After : Mar 28 01:53:41 2026 GMT Subject: CN=69bdfa25-db7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ee:e2:98:77:5d:c7:52:7c:51:d4:58:7d:ff: fc:8f:06:20:75:9d:0b:96:a1:88:e4:e6:7b:a7:c1: 39:d6:b0:59:c8:9c:d7:76:b1:1f:c8:53:d0:ea:c8: 3b:92:b4:e8:18:8f:c8:a8:9f:df:33:ab:bf:79:42: 3f:8c:6d:e9:8b:c5:2d:c9:ad:31:32:20:ca:54:39: 6d:75:78:e2:69:08:30:db:2f:95:df:ab:8c:8d:4c: d4:2e:61:0a:9e:73:70:a2:b0:b5:57:64:08:20:62: 2b:56:8e:2f:23:e0:3b:2b:c1:bf:5c:cd:a8:4b:02: 1b:7f:72:7b:bf:ef:8c:89:03:f0:09:8f:f5:bb:00: 3f:2c:a9:20:4e:ff:79:05:2c:af:e3:17:50:a6:e6: 74:a3:67:5a:f3:da:3d:9e:90:4f:5e:23:a9:42:0f: 42:be:ef:6f:2c:99:52:b7:1b:21:2d:ff:e1:e3:b2: a4:96:da:8f:16:6d:44:ab:d3:5a:88:9d:b9:e5:ee: 56:c4:f4:ff:fe:90:64:4a:0c:5f:60:ab:7d:ed:13: 1b:db:ab:09:ba:e0:19:a5:a9:f8:00:24:4b:4f:ac: 7f:47:95:db:39:10:49:55:ef:5d:ad:9c:f0:8e:3f: 75:ad:6b:20:2d:87:70:eb:0c:3b:34:21:72:22:76: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:56:A0:6A:97:1D:D3:65:49:00:8D:4D:E6:E3:2F:5E:4E:18:FC X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:83:49:54:16:da:9b:f4:06:a9:b0:a2:c3:c3:b2:6e:dc:7b: 51:bd:f6:d0:84:4e:02:33:d6:c1:c5:0e:1f:75:89:10:20:f8: be:10:15:82:19:c2:44:7c:43:65:41:47:9e:6c:a2:0c:4b:47: 5c:5d:84:32:5b:41:cb:60:7a:41:79:71:ee:0b:0f:d4:c5:f6: ab:15:f3:a3:bd:e1:2f:3b:40:7b:1a:ed:62:8a:44:be:77:f2: 25:9e:39:0a:27:9f:e4:31:08:6d:11:59:2e:dd:19:ab:96:51: ff:a7:1a:1d:9e:39:d8:11:ae:f0:69:e2:85:bc:e8:e7:9b:2c: ec:0d:57:58:f2:dc:1e:f8:2f:f6:58:1c:67:56:c5:23:3d:c1: 32:64:60:46:1e:17:6e:56:05:89:66:cf:9d:0c:94:7e:b2:26: 35:88:43:98:8c:85:64:ab:d7:bb:89:d9:f0:82:33:68:fd:a5: 01:24:4e:e0:fd:99:ac:e5:52:5e:f3:48:79:74:0d:30:d0:c7: 73:e9:ac:b9:3d:50:30:d5:d7:25:20:d2:55:91:82:8b:a6:e6: e1:ec:69:ca:8d:11:84:c9:ec:2f:0e:3a:89:f9:c9:c8:ab:98: 5b:07:40:91:0b:db:57:bc:60:39:35:bd:13:4f:0e:a1:a2:96: a6:7f:1d:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwMzIxMDE1MzQxWhcNMjYwMzI4MDE1MzQxWjAYMRYwFAYD VQQDEw02OWJkZmEyNS1kYjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAku7imHddx1J8UdRYff/8jwYgdZ0LlqGI5OZ7p8E51rBZyJzXdrEfyFPQ6sg7 krToGI/IqJ/fM6u/eUI/jG3pi8Utya0xMiDKVDltdXjiaQgw2y+V36uMjUzULmEK nnNworC1V2QIIGIrVo4vI+A7K8G/XM2oSwIbf3J7v++MiQPwCY/1uwA/LKkgTv95 BSyv4xdQpuZ0o2da89o9npBPXiOpQg9Cvu9vLJlStxshLf/h47KkltqPFm1Eq9Na iJ255e5WxPT//pBkSgxfYKt97RMb26sJuuAZpan4ACRLT6x/R5XbORBJVe9drZzw jj91rWsgLYdw6ww7NCFyInbLvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBA/VqBq lx3TZUkAjU3m4y9eThj8MB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOoNJVBbam/QGqbCiw8Oybtx7Ub320IROAjPWwcUOH3WJECD4vhAVghnCRHxD ZUFHnmyiDEtHXF2EMltBy2B6QXlx7gsP1MX2qxXzo73hLztAexrtYopEvnfyJZ45 Cief5DEIbRFZLt0Zq5ZR/6caHZ452BGu8Gnihbzo55ss7A1XWPLcHvgv9lgcZ1bF Iz3BMmRgRh4XblYFiWbPnQyUfrImNYhDmIyFZKvXu4nZ8IIzaP2lASRO4P2ZrOVS XvNIeXQNMNDHc+msuT1QMNXXJSDSVZGCi6bm4expyo0RhMnsLw46ifnJyKuYWwdA kQvbV7xgOTW9E08OoaKWpn8dsA== -----END CERTIFICATE-----Generated at Sun Mar 22 00:25:23 2026 by rpki-client