$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: mK7RFhy47PaIuGNZkRZYVq+Xuup52UBfg/CDBnDMOw8= Subject key identifier: EA:A5:77:DD:EE:1A:67:47:E4:D1:F5:94:4A:10:FE:7F:75:F4:C8:2F Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 86 Signing time: Tue 03 Mar 2026 07:12:23 +0000 Manifest this update: Tue 03 Mar 2026 07:12:22 +0000 Manifest next update: Tue 10 Mar 2026 07:12:22 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: i8BhpWJwOCW+vy8pW98JNtHoA4lEVVsty4kDPvuIoiQ=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: zIMly+FS9YUi3pvudCV4ThJ4KJbFHoU/zWu/5zHps80=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Mar 3 07:12:22 2026 GMT Not After : Mar 10 07:12:22 2026 GMT Subject: CN=69a689d7-413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:47:68:3f:3e:cb:ba:05:8a:34:3a:da:87: 26:c2:76:7e:6f:97:81:96:90:da:14:c6:df:72:62: 0e:2f:ea:30:07:a6:e3:ac:2b:ca:d4:61:5d:f3:8a: 0a:7e:b0:8e:5c:a2:bb:73:9f:b2:cf:0f:89:50:85: 7c:32:e0:7b:7b:ee:f9:c2:a1:ea:f0:f5:09:c0:54: 78:67:01:c5:12:45:33:7b:1b:7b:dc:66:ab:de:bd: f8:c2:0d:d2:29:92:05:52:43:15:b1:76:90:dc:e8: 10:e8:21:2d:35:2f:69:a8:3d:7b:03:85:00:34:da: a9:1e:1d:f9:5f:83:f6:03:2f:54:0f:f2:9a:07:4a: 85:f6:22:d7:6f:b3:9d:1c:8f:7e:7a:b8:70:8a:c4: 87:4f:09:0d:5e:0a:61:6c:af:4e:87:99:13:34:c6: cf:0f:a5:e8:a6:e1:43:f7:ea:fa:fa:99:25:5c:b3: b5:61:2d:19:c2:db:b9:fa:9f:52:a1:b1:9a:5c:96: 3b:0c:d9:20:ca:a2:9a:6c:7d:25:34:e9:d4:b2:c1: 94:56:90:63:22:60:50:12:6d:39:0f:6f:0d:36:c2: 13:f9:db:61:c7:f8:28:11:55:9a:90:9c:d2:00:b5: c6:83:77:94:c9:ce:5d:3b:06:b8:94:a4:7f:d5:31: b6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:77:DD:EE:1A:67:47:E4:D1:F5:94:4A:10:FE:7F:75:F4:C8:2F X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e0:24:31:6c:e4:f4:2c:11:e0:5e:92:97:93:23:74:b0:0f: 8c:f9:52:0d:af:df:00:c6:aa:c2:a7:99:9e:af:e2:cf:7b:7f: 30:0c:d5:81:b2:4f:d4:e3:5d:b3:e5:70:c4:44:4c:66:c6:6b: 03:cc:70:44:d4:17:ae:10:6d:8e:d4:91:95:d2:d9:72:7c:23: 61:67:6b:c1:b6:c6:43:b7:9f:93:40:56:b3:09:42:80:2c:be: 5f:3c:8c:c1:4d:3f:2f:cd:6a:a7:82:64:ba:a3:3e:51:be:e7: cc:20:3b:a3:af:62:b5:f7:80:b2:6d:97:21:7e:00:29:59:0e: b8:6c:1b:4c:aa:50:13:ea:24:42:52:84:69:c8:a3:e4:68:0d: 6b:20:15:e6:4d:6b:73:f8:54:a7:07:2f:4a:54:40:ff:12:1d: 9a:c1:d6:37:b5:81:19:ba:5d:51:e6:01:f5:4d:4f:1c:ea:55: d3:07:3a:bd:32:3f:4f:b5:33:01:ba:f2:d9:1c:df:8b:f4:f9: b8:36:34:df:34:65:48:fe:86:fe:4d:a2:0f:f1:8c:13:51:ba: 9c:f3:4e:74:39:3a:e0:ad:8c:23:54:24:f1:c5:01:94:1a:8d: 80:1f:2a:27:c7:4a:95:e4:63:11:3f:87:9b:1b:27:2b:39:3e: c9:07:15:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwMzAzMDcxMjIyWhcNMjYwMzEwMDcxMjIyWjAYMRYwFAYD VQQDEw02OWE2ODlkNy00MTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqm9HaD8+y7oFijQ62ocmwnZ+b5eBlpDaFMbfcmIOL+owB6bjrCvK1GFd84oK frCOXKK7c5+yzw+JUIV8MuB7e+75wqHq8PUJwFR4ZwHFEkUzext73Gar3r34wg3S KZIFUkMVsXaQ3OgQ6CEtNS9pqD17A4UANNqpHh35X4P2Ay9UD/KaB0qF9iLXb7Od HI9+erhwisSHTwkNXgphbK9Oh5kTNMbPD6XopuFD9+r6+pklXLO1YS0Zwtu5+p9S obGaXJY7DNkgyqKabH0lNOnUssGUVpBjImBQEm05D28NNsIT+dthx/goEVWakJzS ALXGg3eUyc5dOwa4lKR/1TG29wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOqld93u GmdH5NH1lEoQ/n919MgvMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMOAkMWzk9CwR4F6Sl5MjdLAPjPlSDa/fAMaqwqeZnq/iz3t/MAzVgbJP1ONd s+VwxERMZsZrA8xwRNQXrhBtjtSRldLZcnwjYWdrwbbGQ7efk0BWswlCgCy+XzyM wU0/L81qp4JkuqM+Ub7nzCA7o69itfeAsm2XIX4AKVkOuGwbTKpQE+okQlKEacij 5GgNayAV5k1rc/hUpwcvSlRA/xIdmsHWN7WBGbpdUeYB9U1PHOpV0wc6vTI/T7Uz Abry2Rzfi/T5uDY03zRlSP6G/k2iD/GME1G6nPNOdDk64K2MI1Qk8cUBlBqNgB8q J8dKleRjET+HmxsnKzk+yQcVfQ== -----END CERTIFICATE-----Generated at Wed Mar 4 08:42:48 2026 by rpki-client