$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: VQDh9Uh6v9r3q9ZDa76qLXJwULdKy26bGGIT1Gmxo/U= Subject key identifier: 5B:C1:C5:A5:A2:41:95:69:A4:5C:A5:EC:F2:AF:55:1E:B6:16:49:97 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 85 Signing time: Sun 01 Mar 2026 08:56:04 +0000 Manifest this update: Sun 01 Mar 2026 08:56:04 +0000 Manifest next update: Sun 08 Mar 2026 08:56:04 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: omAzTBFSuywTyDL16J174EQFp6WBnCzFchowzA6Iksc=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: zIMly+FS9YUi3pvudCV4ThJ4KJbFHoU/zWu/5zHps80=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Mar 1 08:56:04 2026 GMT Not After : Mar 8 08:56:04 2026 GMT Subject: CN=69a3ff24-d0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:b9:82:89:86:d3:d3:5f:27:47:31:20:43: 26:63:00:11:c9:ac:6d:f3:0c:45:b5:ed:ae:51:3a: 23:be:9f:eb:66:f6:2e:e0:e0:f2:4c:09:6a:d9:ef: 64:06:21:06:6f:73:31:90:72:e1:3c:40:0d:84:73: c8:7f:06:70:21:42:5e:17:04:d1:47:ac:4f:65:4f: ac:26:d9:63:27:37:c4:3d:4a:43:0f:1c:b0:ed:4a: 16:ae:1d:8e:6b:6d:4f:b3:5a:d4:80:60:3c:c4:ff: 49:fa:3e:a8:70:f7:c3:68:52:7d:78:8d:c6:77:94: 71:cf:b9:fe:37:88:e2:fa:44:49:07:c1:c8:ba:69: 94:8f:9f:45:40:e8:77:ef:cf:6a:56:25:54:c6:36: 0a:e5:23:1c:5d:40:70:59:f9:8e:f0:16:ec:86:36: 15:c1:b8:fb:52:d0:ec:b8:a1:7e:30:7e:16:6c:f1: 51:da:67:b3:60:5f:8c:4b:aa:91:bc:fb:20:bb:f7: 7f:56:d7:68:fe:3b:bb:fd:cf:bb:29:bf:6a:9c:e1: 59:e8:3f:70:bd:28:ed:ba:1c:3f:58:fd:50:e5:4e: 90:7d:d1:a0:ba:b1:e2:86:5f:4d:22:7c:73:c1:03: 49:56:45:c4:11:09:ed:68:77:e4:92:47:ac:ac:e1: 38:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C1:C5:A5:A2:41:95:69:A4:5C:A5:EC:F2:AF:55:1E:B6:16:49:97 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:b5:4f:7e:a8:06:b3:12:22:32:58:09:c3:a1:52:51:54:a2: 6e:13:7d:10:82:ff:fb:1b:3b:9c:45:52:3b:2e:2e:68:2a:e4: 48:d9:f6:d0:fb:83:7d:ab:88:3c:a4:60:fd:a7:43:51:0a:eb: ed:72:36:60:65:37:22:de:3e:cf:26:89:27:a1:ef:cd:af:b5: 94:28:15:59:38:ec:c4:9b:97:a5:d2:5f:2c:25:73:f0:dc:ae: 51:96:5f:3e:17:82:c1:11:d5:c9:16:0a:8e:e8:8b:fa:d8:7f: d3:7a:2d:3d:81:9a:11:44:f9:b6:26:71:85:a8:c3:f4:96:55: 0f:48:18:5c:ed:22:76:4c:83:cb:51:49:7a:7f:57:d4:d6:ce: c9:6e:9a:6a:06:cf:60:c5:dc:c2:3f:13:df:94:5e:0e:b4:49: 7d:55:0e:6c:89:53:fe:10:8b:d6:43:67:05:67:ad:72:24:96: 23:d0:91:28:01:e4:dc:3f:d4:15:0e:81:2f:27:4b:8f:93:f3: cb:3e:ff:37:02:3d:73:8d:4f:ca:c9:27:a1:65:95:15:ff:85: 7e:c8:db:99:15:d3:53:fd:e0:fa:82:cc:27:49:35:98:e5:d1: cd:3a:48:cf:21:2e:9d:83:ee:d9:60:4f:49:27:49:2a:ae:31: 2e:01:bb:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwMzAxMDg1NjA0WhcNMjYwMzA4MDg1NjA0WjAYMRYwFAYD VQQDEw02OWEzZmYyNC1kMGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8y5gomG09NfJ0cxIEMmYwARyaxt8wxFte2uUTojvp/rZvYu4ODyTAlq2e9k BiEGb3MxkHLhPEANhHPIfwZwIUJeFwTRR6xPZU+sJtljJzfEPUpDDxyw7UoWrh2O a21Ps1rUgGA8xP9J+j6ocPfDaFJ9eI3Gd5Rxz7n+N4ji+kRJB8HIummUj59FQOh3 789qViVUxjYK5SMcXUBwWfmO8BbshjYVwbj7UtDsuKF+MH4WbPFR2mezYF+MS6qR vPsgu/d/Vtdo/ju7/c+7Kb9qnOFZ6D9wvSjtuhw/WP1Q5U6QfdGgurHihl9NInxz wQNJVkXEEQntaHfkkkesrOE4+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvBxaWi QZVppFyl7PKvVR62FkmXMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQLVPfqgGsxIiMlgJw6FSUVSibhN9EIL/+xs7nEVSOy4uaCrkSNn20PuDfauI PKRg/adDUQrr7XI2YGU3It4+zyaJJ6Hvza+1lCgVWTjsxJuXpdJfLCVz8NyuUZZf PheCwRHVyRYKjuiL+th/03otPYGaEUT5tiZxhajD9JZVD0gYXO0idkyDy1FJen9X 1NbOyW6aagbPYMXcwj8T35ReDrRJfVUObIlT/hCL1kNnBWetciSWI9CRKAHk3D/U FQ6BLydLj5Pzyz7/NwI9c41PysknoWWVFf+FfsjbmRXTU/3g+oLMJ0k1mOXRzTpI zyEunYPu2WBPSSdJKq4xLgG7Vg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:54 2026 by rpki-client