$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: Sk3BNXzTWIOuqUiyy9BppxHeeHbT9l/1gP376VLaoHI= Subject key identifier: F3:B8:D6:2F:BC:86:3F:83:0E:B5:42:A1:D1:E5:FD:25:A0:E7:7E:42 Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 02BC Signing time: Tue 03 Nov 2026 02:19:27 +0000 Manifest this update: Tue 03 Nov 2026 02:19:27 +0000 Manifest next update: Tue 10 Nov 2026 02:19:27 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: TpeOZVB0TnKvxgTnCQqKasTWIypminEuY0SrfXdua38=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=) 3: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=) 4: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: Nov 3 02:19:27 2026 GMT Not After : Nov 10 02:19:27 2026 GMT Subject: CN=6ae944af-2ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:47:f2:77:75:69:a3:0d:d5:d3:41:c8:94: 2e:55:a2:e9:b7:9d:35:ce:d3:71:e7:6d:b7:8b:75: ca:0b:a2:96:b1:ac:ae:2b:bf:1d:7e:6d:b1:04:25: 72:68:34:ee:bc:33:cc:90:e2:c8:37:72:f0:b2:c6: 2e:ae:5f:a3:cc:c5:08:4a:7d:06:96:67:24:71:71: c5:ea:c4:15:9f:32:82:11:03:e6:a7:61:af:fc:2c: b2:55:f9:a6:67:ca:78:dc:95:36:70:60:1a:45:e1: 37:da:66:42:d5:03:97:0c:5d:f4:96:67:f5:18:c9: 08:0a:90:a9:d5:42:23:45:3c:25:8f:28:fe:4e:0b: 18:f3:ad:63:de:63:2d:57:44:17:24:74:c9:ae:c6: 62:f6:79:e2:29:c1:f7:f4:c5:69:85:53:5d:f7:1e: 65:28:7e:d9:51:98:b1:a9:55:46:54:2d:06:22:8c: 4c:c5:2a:a8:08:fd:02:d8:c2:ad:23:1d:d9:7f:4f: 80:03:bf:43:ab:cc:df:d7:ae:cc:d7:c7:63:f5:ea: 1f:1f:d8:e0:8b:b6:0e:b9:70:15:32:52:53:73:71: 10:82:3a:86:60:37:48:ef:3b:47:12:65:2e:54:46: c8:b5:7e:73:f8:96:32:91:4b:ef:9b:b5:17:9f:9d: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:D6:2F:BC:86:3F:83:0E:B5:42:A1:D1:E5:FD:25:A0:E7:7E:42 X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:93:ed:b7:1b:25:6c:e2:7e:e3:ad:48:28:5c:d9:3a:2c:5b: 35:73:6a:4c:d2:a1:fa:5b:59:19:57:16:9a:70:b2:dd:a9:1f: 96:a1:57:da:6e:33:10:ee:c1:74:56:7f:b6:0a:c1:32:f5:f1: c0:d1:88:14:e3:6e:a6:a7:03:84:06:83:d9:a2:ac:c1:e3:2e: 86:33:4a:1c:f1:4b:f0:89:21:a1:75:29:70:26:91:b4:82:5f: a1:59:48:56:84:e1:ef:eb:d1:a8:20:47:2f:d9:95:b4:38:af: e8:65:26:c1:86:f8:c1:98:b4:85:3d:79:03:93:c6:ac:66:fc: 0d:0b:8b:e5:fd:d1:00:3c:15:50:bd:04:7f:73:0f:4f:ff:c0: 66:9d:2d:71:db:69:43:41:22:ca:9d:bd:25:a5:63:bf:ff:12: 38:f8:17:a3:b7:b5:89:01:c2:cc:21:93:9d:c6:63:d5:0c:24: 4d:ec:e6:ef:a3:f7:f1:68:30:28:3b:f3:87:8c:a0:98:47:3a: 4d:03:bd:82:95:a8:8b:11:aa:85:44:ed:76:eb:68:ff:44:58: 6b:5e:3d:77:4f:f0:62:3b:3b:49:a9:f7:2d:d0:37:ea:b4:4f: f9:e7:79:44:7d:57:15:48:5f:2c:03:93:28:2d:81:cb:fa:b1: 4d:72:a9:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYxMTAzMDIxOTI3WhcNMjYxMTEwMDIxOTI3WjAYMRYwFAYD VQQDEw02YWU5NDRhZi0yZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TVH8nd1aaMN1dNByJQuVaLpt501ztNx5223i3XKC6KWsayuK78dfm2xBCVy aDTuvDPMkOLIN3LwssYurl+jzMUISn0GlmckcXHF6sQVnzKCEQPmp2Gv/CyyVfmm Z8p43JU2cGAaReE32mZC1QOXDF30lmf1GMkICpCp1UIjRTwljyj+TgsY861j3mMt V0QXJHTJrsZi9nniKcH39MVphVNd9x5lKH7ZUZixqVVGVC0GIoxMxSqoCP0C2MKt Ix3Zf0+AA79Dq8zf167M18dj9eofH9jgi7YOuXAVMlJTc3EQgjqGYDdI7ztHEmUu VEbItX5z+JYykUvvm7UXn53sFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPO41i+8 hj+DDrVCodHl/SWg535CMB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmpPttxslbOJ+461IKFzZOixbNXNqTNKh+ltZGVcWmnCy3akflqFX2m4zEO7B dFZ/tgrBMvXxwNGIFONupqcDhAaD2aKsweMuhjNKHPFL8IkhoXUpcCaRtIJfoVlI VoTh7+vRqCBHL9mVtDiv6GUmwYb4wZi0hT15A5PGrGb8DQuL5f3RADwVUL0Ef3MP T//AZp0tcdtpQ0Eiyp29JaVjv/8SOPgXo7e1iQHCzCGTncZj1QwkTezm76P38Wgw KDvzh4ygmEc6TQO9gpWoixGqhUTtduto/0RYa149d0/wYjs7San3LdA36rRP+ed5 RH1XFUhfLAOTKC2By/qxTXKp9w== -----END CERTIFICATE-----Generated at Thu Nov 5 04:19:32 2026 by rpki-client