
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
File: WHRSDaeB94Db1xDULIQcE6etF1c.mft (raw, json)
Hash identifier: dbCu5QB+iLAwY6poQybl/lBuLmJFYdiEomnnzvee9Is=
Subject key identifier: 88:E8:85:28:D6:D7:FF:12:1A:08:8D:22:9E:11:05:71:2B:4B:95:44
Authority key identifier: 58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
Certificate issuer: /CN=A91AF2CD/serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Certificate serial: 02C6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
Manifest number: 02A5
Signing time: Sat 19 Sep 2026 01:55:45 +0000
Manifest this update: Sat 19 Sep 2026 01:55:45 +0000
Manifest next update: Sat 26 Sep 2026 01:55:45 +0000
Files and hashes: 1: WHRSDaeB94Db1xDULIQcE6etF1c.crl (hash: I4D5/+jXz4pNj0UzTcLnaxel5z3N5JFdncsSwbYH5jk=)
2: CF85B73C74F011F0847A5D0DC4F9AE02.roa (hash: cUxWIw+2+FfPLU6N+/hsAHJj5YAVgVl5pfPZZohiSqE=)
3: 81E1EBD44E9A11F1929EC503BD833773.roa (hash: qYTpxudTzffVviQso3oftFlC1BIwZNisWMGuaS7SjgQ=)
4: B412DC700EC011EE8C18290AC4F9AE02.roa (hash: 3CMrCqDOXwvVF6x32R2mcswD2RmCJaBSI7Dvz74AhRA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 710 (0x2c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF2CD, serialNumber=5874520DA781F780DBD710D42C841C13A7AD1757
Validity
Not Before: Sep 19 01:55:45 2026 GMT
Not After : Sep 26 01:55:45 2026 GMT
Subject: CN=6aadeba1-da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:a8:5e:1a:98:38:84:8c:00:b3:8a:8a:22:
c1:c3:db:5b:e4:53:a8:61:bd:2c:71:96:51:41:a4:
66:a8:55:93:af:36:c6:90:5e:63:b4:0a:23:f6:3c:
f3:91:3d:5f:37:e3:a8:db:6d:ea:1c:1d:85:a4:3e:
63:b7:28:88:30:b2:ee:f6:3d:2d:c4:c2:e6:b6:45:
e2:5b:9b:21:86:22:ea:94:28:3e:7c:45:4a:a7:73:
d4:9d:a1:70:37:36:f5:6d:32:9d:47:b7:f6:85:c2:
64:f6:2b:de:45:5a:99:d8:32:63:38:3a:d3:e1:cb:
58:39:7a:85:c8:32:4e:5a:db:c1:9d:0d:6a:a1:e5:
c0:b4:53:ac:ea:1f:4b:62:0c:f5:80:10:1b:08:03:
d4:58:97:b1:47:9c:9a:13:62:1e:eb:17:bc:98:fa:
b9:67:d8:33:ed:60:b0:80:f8:55:88:07:0f:51:fb:
12:b8:cb:1c:90:1f:1f:c5:c9:de:f4:ab:8f:b8:ae:
a1:a8:e8:39:57:a1:69:2e:cf:56:6e:47:83:38:2f:
3a:5d:31:4d:48:b8:78:f7:7e:bd:da:a2:49:a8:5d:
51:82:3e:d7:e7:ff:cc:34:87:53:31:01:60:e6:a2:
64:76:3d:a3:d6:88:bb:f3:fe:61:30:5b:4c:ff:25:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E8:85:28:D6:D7:FF:12:1A:08:8D:22:9E:11:05:71:2B:4B:95:44
X509v3 Authority Key Identifier:
keyid:58:74:52:0D:A7:81:F7:80:DB:D7:10:D4:2C:84:1C:13:A7:AD:17:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WHRSDaeB94Db1xDULIQcE6etF1c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF2CD/4FCBAC00D44C11ED86271582C4F9AE02/WHRSDaeB94Db1xDULIQcE6etF1c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a8:00:8a:6c:18:e6:4a:af:c3:08:ff:c6:94:d7:09:e7:6b:
aa:9f:b2:c9:14:3f:aa:b3:bb:f7:55:0b:43:d9:35:65:8c:f6:
a3:3e:21:55:12:9b:a2:c5:dd:0d:85:ae:9e:09:aa:ce:1e:4d:
65:77:8b:7f:52:02:a7:43:c1:5d:be:fe:36:f7:c0:1e:4a:64:
d6:35:14:df:e4:57:8e:91:2a:52:86:e6:41:e1:f3:b5:07:a0:
40:bc:4f:75:8a:8c:98:7b:90:92:4b:a4:7f:b7:d3:df:d6:9e:
4e:d9:5a:9f:93:e1:a7:17:14:eb:0b:a4:ad:28:97:95:2b:29:
f8:4f:c5:3e:a1:7a:40:82:ab:8c:8f:24:23:99:1f:18:99:e5:
c1:cb:e9:83:6a:d9:fe:eb:73:e6:20:ef:c8:9b:0a:16:55:0e:
69:17:12:7a:8f:7e:6d:24:88:65:07:57:b0:84:4e:11:b5:e0:
f0:6c:67:56:fc:71:82:2f:85:4a:b0:92:a6:73:43:d7:5c:78:
3d:f3:bb:3b:f4:5b:b8:f1:60:3e:e3:f3:16:5e:8f:8a:ca:5d:
ce:8b:cd:a1:68:66:2d:ec:56:55:1f:79:e9:d0:50:56:cd:09:
e8:23:ef:4c:bd:a3:6a:a8:47:0d:8c:fe:9a:b2:b0:05:f0:1c:
35:86:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:26:07 2026 by rpki-client