$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json) Hash identifier: kfYF+OrCutnfVrVHEjbRc6HvAyzENhGo9hobXLjWEws= Subject key identifier: 15:6E:C4:87:C7:3D:D0:E1:E1:92:E2:5B:99:85:2E:BD:C1:5E:31:7F Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Certificate serial: 027A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft Manifest number: 025C Signing time: Tue 05 May 2026 02:26:48 +0000 Manifest this update: Tue 05 May 2026 02:26:47 +0000 Manifest next update: Tue 12 May 2026 02:26:47 +0000 Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: 540LmiktkBXQaZneT/Vre7Jyo/9DzSYGkSWlyDV1xzo=) 2: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=) 3: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: zguPLjQ7EYK5huo8cUQuMnIJCKWigpE0oK0hmMTe1UA=) 4: 06CD7DF074F211F09D01EA15C4F9AE02.roa (hash: w0Ye2OyPtt1IGX1lChpvNypV2Tkw2qxt2TeDVBCk0eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 634 (0x27a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757 Validity Not Before: May 5 02:26:47 2026 GMT Not After : May 12 02:26:47 2026 GMT Subject: CN=69f95567-1173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:93:77:e1:46:74:b1:40:a1:d1:28:1a:28:c5: fd:b6:04:ab:cc:86:03:38:14:73:52:c6:de:41:1a: 76:52:e0:93:0a:5a:32:0d:36:99:86:fd:87:e3:86: 1f:0b:f9:92:48:44:97:8d:d7:0d:22:7c:38:b5:86: d1:38:01:46:83:67:e3:5d:2c:5c:9c:33:7c:d8:7c: 97:fe:d1:a4:70:09:06:9e:8f:5a:f7:28:dd:3b:8d: dc:71:43:b5:73:3b:f5:ee:16:4e:16:fc:12:c9:46: 60:ee:66:e7:fe:ba:6d:db:a4:e7:70:8c:d3:45:6f: e1:f2:46:df:2f:de:5b:d8:e1:29:07:2f:b2:ca:9b: 33:99:c9:33:ed:14:b8:3f:8b:f3:32:5a:b7:0b:63: e6:78:db:5f:31:45:d7:f3:d1:ee:91:b3:88:8a:88: 5f:2d:1b:41:16:61:35:27:22:34:b1:52:87:fe:d0: 31:51:95:27:00:f7:31:c2:a2:c0:6d:33:e3:2f:15: e7:4a:35:22:ac:ba:ca:74:8f:4b:9c:a0:8c:3b:ea: 00:fa:77:2d:35:30:c8:f9:8a:20:73:97:b1:61:b9: fa:28:d8:00:08:d1:6a:0e:67:bf:c3:56:0a:58:b1: 76:c1:31:70:3b:fd:1d:c3:57:1d:18:17:5b:60:37: 91:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6E:C4:87:C7:3D:D0:E1:E1:92:E2:5B:99:85:2E:BD:C1:5E:31:7F X509v3 Authority Key Identifier: keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:4b:7f:93:5e:b9:c8:64:1c:d0:30:4b:dd:e9:b8:00:ec:96: 8d:0c:51:82:2a:22:87:f5:42:e9:c5:98:d9:40:ff:cb:3b:e8: eb:ee:fc:77:cc:51:9b:a0:9c:fb:41:69:8c:64:78:98:42:25: a1:3d:cc:4f:8f:5d:27:b3:30:57:94:2d:c2:77:79:74:dc:26: 1e:7f:c1:91:d7:15:17:79:3b:20:36:4d:7f:7d:b5:4f:e2:03: 4b:08:a0:cb:c1:ac:63:ee:91:ec:ec:eb:5b:e6:7e:b1:dc:72: a2:70:aa:59:df:37:85:9e:b4:11:5b:f1:6b:ae:ec:f8:2f:50: f1:cf:74:75:f2:50:fb:25:39:89:81:a8:a3:9e:0b:2a:c8:c4: 4e:3f:c6:54:26:8a:36:af:3c:cb:44:39:d6:00:bb:37:86:23: 27:95:a1:0c:a8:b2:f7:32:20:15:b3:77:94:12:eb:5b:d4:f2: 42:0e:0e:fd:9e:24:cd:09:8c:79:19:59:66:c2:6b:42:3a:93: 9c:5e:dc:fe:07:3b:c0:cc:ec:60:ae:de:58:d9:4b:02:87:61: c3:99:32:cb:cc:39:1c:01:79:13:6d:c6:2f:d1:c4:74:92:fa: c2:5d:4e:1a:9e:90:7a:68:42:09:f2:6c:d4:6c:8d:43:b0:c7: 29:d3:4a:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyQ0QxMTAvBgNVBAUTKDU4NzQ1MjBEQTc4MUY3ODBEQkQ3MTBENDJDODQxQzEz QTdBRDE3NTcwHhcNMjYwNTA1MDIyNjQ3WhcNMjYwNTEyMDIyNjQ3WjAYMRYwFAYD VQQDEw02OWY5NTU2Ny0xMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZN34UZ0sUCh0SgaKMX9tgSrzIYDOBRzUsbeQRp2UuCTCloyDTaZhv2H44Yf C/mSSESXjdcNInw4tYbROAFGg2fjXSxcnDN82HyX/tGkcAkGno9a9yjdO43ccUO1 czv17hZOFvwSyUZg7mbn/rpt26TncIzTRW/h8kbfL95b2OEpBy+yypszmckz7RS4 P4vzMlq3C2PmeNtfMUXX89HukbOIiohfLRtBFmE1JyI0sVKH/tAxUZUnAPcxwqLA bTPjLxXnSjUirLrKdI9LnKCMO+oA+nctNTDI+Yogc5exYbn6KNgACNFqDme/w1YK WLF2wTFwO/0dw1cdGBdbYDeRSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBVuxIfH PdDh4ZLiW5mFLr3BXjF/MB8GA1UdIwQYMBaAFFh0Ug2ngfeA29cQ1CyEHBOnrRdX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjJDRC80RkNCQUMwMEQ0 NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0RGIxeERVTElRY0U2ZXRG MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dIUlNEYWVCOTREYjF4RFVMSVFjRTZldEYxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjJDRC80RkNCQUMwMEQ0NEMxMUVEODYyNzE1ODJDNEY5QUUwMi9XSFJTRGFlQjk0 RGIxeERVTElRY0U2ZXRGMWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUkt/k165yGQc0DBL3em4AOyWjQxRgioih/VC6cWY2UD/yzvo6+78d8xRm6Cc +0FpjGR4mEIloT3MT49dJ7MwV5Qtwnd5dNwmHn/BkdcVF3k7IDZNf321T+IDSwig y8GsY+6R7OzrW+Z+sdxyonCqWd83hZ60EVvxa67s+C9Q8c90dfJQ+yU5iYGoo54L KsjETj/GVCaKNq88y0Q51gC7N4YjJ5WhDKiy9zIgFbN3lBLrW9TyQg4O/Z4kzQmM eRlZZsJrQjqTnF7c/gc7wMzsYK7eWNlLAodhw5kyy8w5HAF5E23GL9HEdJL6wl1O Gp6QemhCCfJs1GyNQ7DHKdNKCw== -----END CERTIFICATE-----Generated at Wed May 6 03:37:21 2026 by rpki-client