$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft File: Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft (raw, json) Hash identifier: 3kGXAGm+O81uJYRokGSAx6fDi+ZZ2QKdEuIFW1OHGHg= Subject key identifier: 9C:46:40:1B:1E:74:7F:57:57:CF:1E:98:87:48:77:9E:0A:7E:62:DC Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 Certificate issuer: /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Certificate serial: 0432 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft Manifest number: 041A Signing time: Mon 27 Apr 2026 00:23:26 +0000 Manifest this update: Mon 27 Apr 2026 00:23:26 +0000 Manifest next update: Mon 04 May 2026 00:23:26 +0000 Files and hashes: 1: Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl (hash: pWoiyY6LBnPt811ul0csUvkBvyUpn2GG65xx0BmXK9g=) 2: 2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (hash: hSprzsVeX7yn1D4PAkL8tJfBZML1aZzPNfAasYni9Tc=) 3: CC5A0854D0DD11EFB1C6656DC4F9AE02.roa (hash: NSST2LOuWe69wNvMDCc9lW2N+MLu6oemF2NWRRONKO4=) 4: C02374609D0E11EF866C8F16C4F9AE02.roa (hash: qWXbvxtUafVtAgGx5EC/D27kAXEqgp3jL09LjLQ4gKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 00:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1074 (0x432) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9 Validity Not Before: Apr 27 00:23:26 2026 GMT Not After : May 4 00:23:26 2026 GMT Subject: CN=69eeac7e-ab79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:87:27:08:4e:24:8e:32:9c:5b:1e:92:ee:d6: a8:f4:fd:41:3c:a8:00:2e:00:35:83:87:ed:e1:bd: d0:28:44:60:4f:b9:dc:60:a7:2a:18:c2:19:80:e5: f4:7c:ab:0c:ed:14:f6:8d:13:0f:a3:e5:23:d4:71: 29:d4:3b:06:7a:68:06:54:69:f6:00:eb:04:34:8e: 1a:1d:b2:90:c4:2d:aa:62:0e:e9:1f:9c:2c:3e:88: 6b:cb:33:d4:ed:0d:76:8e:20:5d:d6:77:57:bb:f5: ae:09:4d:31:28:33:19:6f:3b:34:13:5f:99:cf:a2: 22:3f:ad:8f:dd:a7:5e:b1:94:e1:6d:c0:48:c9:53: 77:ae:f6:51:15:d0:cf:8b:c4:61:4d:41:90:4b:ec: 71:c9:a4:a1:5c:46:5a:5c:3f:d5:67:d3:42:80:52: c0:84:fd:d1:78:21:c0:ed:98:1f:52:cd:5a:97:85: 38:f9:67:1a:48:82:fc:97:10:48:93:90:b8:b1:08: ce:bb:ea:0d:a6:c3:51:f2:89:a6:74:22:57:dc:d0: cf:b6:11:06:1d:40:c9:b7:30:f5:20:86:b4:99:de: 95:46:a6:59:02:08:f9:13:e9:82:e3:37:fa:34:13: 42:77:ff:fb:5d:f3:a0:16:54:53:52:c9:a0:81:29: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:46:40:1B:1E:74:7F:57:57:CF:1E:98:87:48:77:9E:0A:7E:62:DC X509v3 Authority Key Identifier: keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:07:7a:02:7c:09:1e:43:ef:e3:3f:0e:fc:9f:bc:b9:05:c7: 60:95:02:58:47:64:b3:fd:77:42:81:79:83:7f:03:91:9f:0f: 33:12:0b:48:9a:8f:bd:64:77:bb:55:1b:f9:2d:74:46:cc:ba: c3:67:cc:7a:d0:ba:cf:2b:ee:c2:a9:6e:f9:da:92:d8:e4:60: 18:d9:3c:f3:4c:a5:78:19:6d:ee:44:2d:50:fb:c9:24:e7:04: 5e:4e:67:e8:41:0a:77:8c:1b:2b:93:38:7d:6b:af:6c:04:2f: 3b:f9:cf:d9:99:7f:b2:db:1b:7a:82:58:ed:ed:96:0b:ad:23: 18:6b:c5:3e:7a:f6:90:3c:70:a8:87:4f:91:7c:10:7e:b0:50: b8:65:51:bc:b5:ab:97:c3:9c:fb:23:fc:a1:d4:53:d7:8b:03: cf:51:6a:2f:70:a9:86:8c:f5:02:5f:1b:18:67:33:4c:47:84: 7b:6d:ff:b8:c7:a9:c6:f7:52:2f:1d:dd:98:37:02:70:6d:10: ba:1a:f4:af:f6:d4:56:43:23:f5:a5:41:ee:07:9a:2a:f4:53: d7:07:60:75:d7:8d:e5:55:59:f5:94:91:ce:a7:8a:cc:92:4b: eb:9b:62:ef:cb:8b:72:59:d8:32:65:33:1c:a0:12:4c:8d:8e: 94:a4:43:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkwQjkxMTAvBgNVBAUTKDVBMTgzQjFFMEZGQ0E2REFERDc5NkY2QkI0QUFBRjkz NjkyRjBEQzkwHhcNMjYwNDI3MDAyMzI2WhcNMjYwNTA0MDAyMzI2WjAYMRYwFAYD VQQDEw02OWVlYWM3ZS1hYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvocnCE4kjjKcWx6S7tao9P1BPKgALgA1g4ft4b3QKERgT7ncYKcqGMIZgOX0 fKsM7RT2jRMPo+Uj1HEp1DsGemgGVGn2AOsENI4aHbKQxC2qYg7pH5wsPohryzPU 7Q12jiBd1ndXu/WuCU0xKDMZbzs0E1+Zz6IiP62P3adesZThbcBIyVN3rvZRFdDP i8RhTUGQS+xxyaShXEZaXD/VZ9NCgFLAhP3ReCHA7ZgfUs1al4U4+WcaSIL8lxBI k5C4sQjOu+oNpsNR8ommdCJX3NDPthEGHUDJtzD1IIa0md6VRqZZAgj5E+mC4zf6 NBNCd//7XfOgFlRTUsmggSkA4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxGQBse dH9XV88emIdId54KfmLcMB8GA1UdIwQYMBaAFFoYOx4P/Kba3Xlva7Sqr5NpLw3J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTBCOS9EMUVBOENGNEI1 ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0cmRlVzlydEtxdmsya3ZE Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1doZzdIZ184cHRyZGVXOXJ0S3F2azJrdkRjay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTBCOS9EMUVBOENGNEI1ODcxMUVDQkVEQjkyMjlDNEY5QUUwMi9XaGc3SGdfOHB0 cmRlVzlydEtxdmsya3ZEY2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdwd6AnwJHkPv4z8O/J+8uQXHYJUCWEdks/13QoF5g38DkZ8PMxILSJqPvWR3 u1Ub+S10Rsy6w2fMetC6zyvuwqlu+dqS2ORgGNk880yleBlt7kQtUPvJJOcEXk5n 6EEKd4wbK5M4fWuvbAQvO/nP2Zl/stsbeoJY7e2WC60jGGvFPnr2kDxwqIdPkXwQ frBQuGVRvLWrl8Oc+yP8odRT14sDz1FqL3Cphoz1Al8bGGczTEeEe23/uMepxvdS Lx3dmDcCcG0Quhr0r/bUVkMj9aVB7geaKvRT1wdgddeN5VVZ9ZSRzqeKzJJL65ti 78uLclnYMmUzHKASTI2OlKRDXA== -----END CERTIFICATE-----Generated at Tue Apr 28 08:21:59 2026 by rpki-client