$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: Yr7JOPO4THrivgruET9URAnmh3Pi2KZl1TOoMzNL34s= Subject key identifier: 63:FE:1D:B6:EA:AB:5E:D3:3D:4B:BE:0A:29:C1:46:B9:BB:AB:94:85 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 9D Signing time: Fri 17 Apr 2026 07:03:02 +0000 Manifest this update: Fri 17 Apr 2026 07:03:02 +0000 Manifest next update: Fri 24 Apr 2026 07:03:02 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: 9qczN4qNI/GNBuX/DmNjHWUaxfVi1wIWuTKrEW1l0PI=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: zIMly+FS9YUi3pvudCV4ThJ4KJbFHoU/zWu/5zHps80=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Apr 17 07:03:02 2026 GMT Not After : Apr 24 07:03:02 2026 GMT Subject: CN=69e1db26-9f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:a9:3a:ed:5f:9e:49:8f:ba:79:2f:cd:c3: 00:47:4d:28:e3:17:37:e9:f6:cd:ec:8f:4c:b8:5d: 5b:9d:5c:61:91:88:2a:fd:0d:2f:d4:02:1a:e4:2d: b2:53:ec:2a:fa:61:fc:41:05:2b:9d:4b:d8:2f:c2: 3c:2d:bb:4d:e1:29:f1:f9:9e:ef:bd:ef:ac:45:fd: 18:89:2c:53:e9:8d:f7:6c:83:f7:9e:04:44:85:8e: 3a:46:ec:9c:39:3a:cd:90:ab:e5:5b:e4:c6:d4:b5: d3:33:64:b2:b4:ae:5e:ef:65:12:10:9e:bd:14:f8: 22:15:25:ab:74:02:d8:39:f7:96:96:c9:a7:47:51: e5:01:55:19:22:b6:2d:69:b9:20:04:30:83:22:d2: 8d:63:9b:43:88:3b:c1:55:1f:dd:59:9e:b4:21:61: 8e:4f:e9:2c:5c:d7:ec:38:ab:08:8d:32:a5:f0:ca: 20:47:39:eb:4f:07:4f:0c:d3:1c:fb:c8:ce:22:74: 7f:80:d3:f9:96:6f:bb:7d:d9:f6:40:fc:90:70:aa: 97:fd:b0:53:67:30:b9:14:14:f0:aa:cd:ff:f8:82: 19:e9:ce:6d:78:a5:de:86:e2:84:c0:42:67:1f:73: c5:34:06:0b:4c:03:e2:7a:8c:58:08:12:05:6f:39: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FE:1D:B6:EA:AB:5E:D3:3D:4B:BE:0A:29:C1:46:B9:BB:AB:94:85 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:71:c0:67:00:cf:60:34:28:46:4b:b2:c0:18:22:43:e0: af:45:96:1d:87:0e:63:2c:ea:96:51:72:a2:d1:87:63:d3:6e: 81:5f:23:bd:43:72:fe:d5:e5:bf:63:8f:a8:40:25:37:91:42: 4d:ad:97:68:17:fb:ee:60:73:79:94:44:b8:f0:97:4e:92:0f: 05:bc:83:10:fc:5a:55:44:c4:8e:fa:48:0c:f3:45:79:e2:4b: 67:4e:07:5b:bf:c8:1e:bc:1c:a8:ad:e3:0d:56:42:e9:35:42: 96:50:cf:5b:b3:b2:89:02:5c:b4:db:ba:4b:ad:ba:56:84:8e: 15:28:79:e1:dd:9a:19:5d:d8:d6:c8:1a:ec:d2:73:6a:ce:40: 4d:8d:a2:05:71:21:e9:44:0d:8e:f0:04:59:d0:ef:26:26:c5: 1a:a4:ec:63:ea:ce:a4:ff:b4:b1:b4:d9:40:8c:b1:17:b3:c4: ee:1d:80:5c:e2:6f:e4:9c:41:44:7c:ea:90:32:77:c4:2b:9c: e6:2c:a1:29:b9:72:c0:c5:52:c5:01:e8:7e:fb:d2:ee:16:e7: fe:ae:90:35:75:b8:47:db:26:eb:76:2e:5e:86:d2:3e:8f:56: 38:82:35:a4:5e:71:a3:0e:a1:da:ab:20:3b:b0:a1:54:4f:e0: 16:59:21:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwNDE3MDcwMzAyWhcNMjYwNDI0MDcwMzAyWjAYMRYwFAYD VQQDEw02OWUxZGIyNi05ZjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyupOu1fnkmPunkvzcMAR00o4xc36fbN7I9MuF1bnVxhkYgq/Q0v1AIa5C2y U+wq+mH8QQUrnUvYL8I8LbtN4Snx+Z7vve+sRf0YiSxT6Y33bIP3ngREhY46Ruyc OTrNkKvlW+TG1LXTM2SytK5e72USEJ69FPgiFSWrdALYOfeWlsmnR1HlAVUZIrYt abkgBDCDItKNY5tDiDvBVR/dWZ60IWGOT+ksXNfsOKsIjTKl8MogRznrTwdPDNMc +8jOInR/gNP5lm+7fdn2QPyQcKqX/bBTZzC5FBTwqs3/+IIZ6c5teKXehuKEwEJn H3PFNAYLTAPieoxYCBIFbzn6yQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGP+Hbbq q17TPUu+CinBRrm7q5SFMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJdxxwGcAz2A0KEZLssAYIkPgr0WWHYcOYyzqllFyotGHY9NugV8jvUNy/tXl v2OPqEAlN5FCTa2XaBf77mBzeZREuPCXTpIPBbyDEPxaVUTEjvpIDPNFeeJLZ04H W7/IHrwcqK3jDVZC6TVCllDPW7OyiQJctNu6S626VoSOFSh54d2aGV3Y1sga7NJz as5ATY2iBXEh6UQNjvAEWdDvJibFGqTsY+rOpP+0sbTZQIyxF7PE7h2AXOJv5JxB RHzqkDJ3xCuc5iyhKblywMVSxQHofvvS7hbn/q6QNXW4R9sm63YuXobSPo9WOII1 pF5xow6h2qsgO7ChVE/gFlkhgg== -----END CERTIFICATE-----Generated at Sat Apr 18 22:23:50 2026 by rpki-client