$ rpki-client -vvf rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft File: WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft (raw, json) Hash identifier: LwdluX922vctfetVrEzsM2sLdV99Lzsjl/2Jbl1iUbI= Subject key identifier: 90:D8:E0:D5:58:26:AC:FB:BE:C3:08:09:22:18:84:16:32:B8:7A:97 Authority key identifier: 58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C Certificate issuer: /CN=A919D1FE/serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft Manifest number: 32 Signing time: Sun 01 Mar 2026 10:06:19 +0000 Manifest this update: Sun 01 Mar 2026 10:06:18 +0000 Manifest next update: Sun 08 Mar 2026 10:06:18 +0000 Files and hashes: 1: WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl (hash: UNXGOyPfeweHF3ABr0qFanfKYTeON7UGQhl25GePvsM=) 2: 84797D8ACF8D11F09FB4175EC4F9AE02.roa (hash: t8gtrbMwzQlauD3gHG5WSBOc5P6tKFnudYJCa+/BPeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D1FE, serialNumber=587C4EF885BD416A99D10F55B6E8168C02D0201C Validity Not Before: Mar 1 10:06:18 2026 GMT Not After : Mar 8 10:06:18 2026 GMT Subject: CN=69a40f9a-cb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:38:29:c3:39:4a:b8:f5:dc:18:96:16:12: 32:57:84:7b:1e:a9:86:4e:eb:fc:ed:c0:c9:30:4d: 33:95:e1:dc:55:93:55:6d:95:9e:57:58:ce:3b:8d: 62:f5:aa:98:95:33:68:e3:10:bb:64:b9:82:d1:f5: ac:87:e1:b3:35:de:55:f4:34:0c:eb:a4:cc:1a:99: f8:c5:44:45:d4:1d:8a:05:54:4a:a0:95:35:05:53: 8f:7c:0c:73:ab:fe:e8:47:3e:23:46:71:ce:9e:5d: 2e:ca:be:80:c4:c1:3c:79:11:40:68:e5:53:6e:5c: c8:88:5e:10:7f:3d:65:d1:13:2c:11:08:2d:19:01: 6c:74:41:cc:29:01:75:a7:ba:b8:e6:bc:53:5f:f1: 3c:df:4f:c6:3f:fc:6f:5d:47:72:93:3e:74:4e:dc: 07:e8:c4:c5:a2:3d:98:bd:8e:70:94:fe:af:57:10: 45:ad:51:45:8a:11:9a:73:85:2b:e2:6d:96:2e:89: 54:07:4c:08:41:93:37:fc:ea:d7:9a:f9:c4:ef:fd: 42:b9:36:3e:40:c1:35:bd:77:63:a9:7b:83:74:0e: 8a:07:7c:9e:c9:22:bc:7d:f5:a8:88:45:e6:59:8d: a7:79:fc:16:41:e1:93:c5:8f:91:0a:8b:ee:85:26: fa:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D8:E0:D5:58:26:AC:FB:BE:C3:08:09:22:18:84:16:32:B8:7A:97 X509v3 Authority Key Identifier: keyid:58:7C:4E:F8:85:BD:41:6A:99:D1:0F:55:B6:E8:16:8C:02:D0:20:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHxO-IW9QWqZ0Q9VtugWjALQIBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D1FE/5DB608AECF8C11F0AEF6C559C4F9AE02/WHxO-IW9QWqZ0Q9VtugWjALQIBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:7c:d4:3c:1e:73:bf:38:cc:2a:74:93:2c:15:31:0b:8a:5a: f3:46:1f:ec:c6:45:87:b0:a6:42:9c:dd:aa:aa:aa:0c:eb:f3: 60:fc:9f:f6:03:da:55:69:c1:92:2d:ee:be:3f:8d:4c:92:3c: 47:54:48:a9:95:63:a7:cc:b4:60:6b:89:56:9d:1e:06:f8:51: a7:3c:94:5b:34:7c:59:0f:e4:3a:60:70:5e:d8:4b:38:98:d1: 6e:47:7b:62:5f:24:1b:aa:c7:de:be:7c:37:9e:62:46:46:7e: aa:41:09:d6:90:03:a5:35:4e:c1:28:27:e4:ec:7c:8f:5f:97: cf:1a:13:a2:68:c3:46:89:3d:bb:c1:a3:60:41:c6:ad:e7:73: 94:e9:fc:5e:9f:7d:43:86:66:d8:c7:4c:81:04:b5:4e:60:89: cf:ef:56:0d:57:db:4f:e4:3e:a3:14:de:b4:04:da:69:ce:22: 7a:5f:60:a2:c4:76:18:c6:19:ec:b4:47:57:e7:d7:74:ac:0d: 98:00:a1:13:02:97:3b:8b:bc:4e:f4:ee:4a:47:47:88:b4:94: 0e:b9:9c:0b:e7:6c:15:43:75:e1:40:15:65:f4:dd:f8:ed:ee: 96:9e:3c:ae:7c:6d:a8:9e:32:7b:2f:e6:91:d9:80:af:cc:ba: 1c:4b:8f:2c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDFGRTExMC8GA1UEBRMoNTg3QzRFRjg4NUJENDE2QTk5RDEwRjU1QjZFODE2OEMw MkQwMjAxQzAeFw0yNjAzMDExMDA2MThaFw0yNjAzMDgxMDA2MThaMBgxFjAUBgNV BAMTDTY5YTQwZjlhLWNiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8IjgpwzlKuPXcGJYWEjJXhHseqYZO6/ztwMkwTTOV4dxVk1VtlZ5XWM47jWL1 qpiVM2jjELtkuYLR9ayH4bM13lX0NAzrpMwamfjFREXUHYoFVEqglTUFU498DHOr /uhHPiNGcc6eXS7KvoDEwTx5EUBo5VNuXMiIXhB/PWXREywRCC0ZAWx0QcwpAXWn urjmvFNf8TzfT8Y//G9dR3KTPnRO3AfoxMWiPZi9jnCU/q9XEEWtUUWKEZpzhSvi bZYuiVQHTAhBkzf86tea+cTv/UK5Nj5AwTW9d2Ope4N0DooHfJ7JIrx99aiIReZZ jad5/BZB4ZPFj5EKi+6FJvpRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUkNjg1Vgm rPu+wwgJIhiEFjK4epcwHwYDVR0jBBgwFoAUWHxO+IW9QWqZ0Q9VtugWjALQIBww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMUZFLzVEQjYwOEFFQ0Y4 QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdxWjBROVZ0dWdXakFMUUlC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvV0h4Ty1JVzlRV3FaMFE5VnR1Z1dqQUxRSUJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MUZFLzVEQjYwOEFFQ0Y4QzExRjBBRUY2QzU1OUM0RjlBRTAyL1dIeE8tSVc5UVdx WjBROVZ0dWdXakFMUUlCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCufNQ8HnO/OMwqdJMsFTELilrzRh/sxkWHsKZCnN2qqqoM6/Ng/J/2A9pVacGS Le6+P41MkjxHVEiplWOnzLRga4lWnR4G+FGnPJRbNHxZD+Q6YHBe2Es4mNFuR3ti XyQbqsfevnw3nmJGRn6qQQnWkAOlNU7BKCfk7HyPX5fPGhOiaMNGiT27waNgQcat 53OU6fxen31DhmbYx0yBBLVOYInP71YNV9tP5D6jFN60BNppziJ6X2CixHYYxhns tEdX59d0rA2YAKETApc7i7xO9O5KR0eItJQOuZwL52wVQ3XhQBVl9N347e6Wnjyu fG2onjJ7L+aR2YCvzLocS48s -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:22 2026 by rpki-client