$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: emYO4qsT99fdB1ezDhiceHXRGSgzOPckPae9/YtTL/0= Subject key identifier: 15:DB:E2:51:12:F6:81:8E:5C:34:29:B9:C1:4F:00:48:C8:21:86:75 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: D1 Signing time: Mon 27 Jul 2026 08:51:06 +0000 Manifest this update: Mon 27 Jul 2026 08:51:06 +0000 Manifest next update: Mon 03 Aug 2026 08:51:06 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: qQ3RluFwtZBDOUwusyaXaaXrApSzW4GWLV19iua7tCg=) 2: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: sNv7081XtV8EyLFPiBsb9HAMJSD9GQXf3Qs+h2VetI4=) 3: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: 8A0Ncvr0z3oh8CthhOuSyPoN4FbTMeFRsZZhlyB56aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:51:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Jul 27 08:51:06 2026 GMT Not After : Aug 3 08:51:06 2026 GMT Subject: CN=6a671bfa-504e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b6:fc:53:f5:7b:1e:1c:d6:e2:0e:f4:a7:d9: 08:2c:d7:2b:1e:ec:4a:ed:00:66:26:29:cc:89:14: ff:df:c2:6a:3b:af:ed:22:32:44:27:82:ed:dd:d7: a8:c6:7a:9d:6a:f6:f7:23:72:9a:6f:ab:17:aa:14: d7:c4:c6:81:a8:b4:de:77:fd:2d:68:db:1a:16:11: bf:9b:17:e6:1a:a6:91:c2:f1:fd:39:f1:28:14:ef: 8c:db:7e:8b:32:7d:64:1f:94:09:c3:cd:97:78:97: 64:94:e8:c9:8a:df:34:64:fb:15:6e:bb:3d:e8:1b: 18:41:d9:52:42:8f:29:30:a5:d9:0a:cd:da:fd:c2: e4:ae:7f:1e:ad:9f:06:49:99:37:0c:20:2c:57:f5: 1e:0e:1c:b5:91:a9:05:c7:9c:ae:92:3b:c2:a1:71: e2:17:65:64:62:b7:e0:36:02:ca:22:10:0b:64:a5: ac:78:7b:13:2a:aa:04:76:0f:4d:d3:31:25:7c:e6: b4:47:33:5d:e0:dd:25:74:46:1e:be:fe:a4:ed:78: 68:ac:b6:f7:69:f9:a6:9c:90:ca:3e:8c:76:ad:c3: 52:7e:6d:b3:b9:f7:84:2b:b1:6a:be:23:1d:7e:74: 2e:28:3a:77:64:93:96:cd:58:c7:cf:70:ec:b8:bb: 2a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DB:E2:51:12:F6:81:8E:5C:34:29:B9:C1:4F:00:48:C8:21:86:75 X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c2:10:6c:3a:b8:74:4f:2d:45:75:05:c4:c6:b2:20:06:f5: 14:79:d3:c7:98:77:19:78:c1:3b:4f:c2:d9:2d:e2:55:b4:95: f6:27:37:8a:00:6a:d2:b8:d5:f9:e7:2a:60:05:3c:dd:20:01: 20:76:51:55:57:0b:64:08:67:6c:b8:0b:68:d2:f4:1a:55:3c: ce:70:24:92:20:77:a8:7c:f6:f8:b4:a9:2e:07:06:80:66:2a: 83:97:6b:5b:22:0f:fa:92:ab:00:83:99:be:cc:98:20:ef:af: 0b:10:a7:f3:bb:f2:d7:ef:bd:20:c8:0a:84:40:32:7c:27:43: e5:15:e9:94:eb:ae:77:d1:3c:39:72:6b:65:96:a7:13:80:b4: 95:38:13:ea:ec:fe:cb:04:6d:dc:c6:28:cd:75:1d:f6:ae:38: fc:49:15:72:a6:1b:79:af:e5:71:7a:74:bd:ee:d6:97:4e:4a: 77:e2:4d:c7:f2:7d:0d:a5:3d:d0:df:48:67:46:cf:8f:b2:6f: a3:02:9b:5c:27:0f:d4:40:de:fb:45:3f:d8:65:e1:92:f3:57: 1e:a5:0e:62:3e:33:d0:96:76:8a:1d:15:86:c4:96:79:06:9e: 4e:74:61:42:2f:98:40:db:9b:b6:77:d9:42:71:40:cd:85:ea: f8:27:10:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwNzI3MDg1MTA2WhcNMjYwODAzMDg1MTA2WjAYMRYwFAYD VQQDEw02YTY3MWJmYS01MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm7b8U/V7HhzW4g70p9kILNcrHuxK7QBmJinMiRT/38JqO6/tIjJEJ4Lt3deo xnqdavb3I3Kab6sXqhTXxMaBqLTed/0taNsaFhG/mxfmGqaRwvH9OfEoFO+M236L Mn1kH5QJw82XeJdklOjJit80ZPsVbrs96BsYQdlSQo8pMKXZCs3a/cLkrn8erZ8G SZk3DCAsV/UeDhy1kakFx5yukjvCoXHiF2VkYrfgNgLKIhALZKWseHsTKqoEdg9N 0zElfOa0RzNd4N0ldEYevv6k7XhorLb3afmmnJDKPox2rcNSfm2zufeEK7FqviMd fnQuKDp3ZJOWzVjHz3DsuLsq2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBXb4lES 9oGOXDQpucFPAEjIIYZ1MB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaMIQbDq4dE8tRXUFxMayIAb1FHnTx5h3GXjBO0/C2S3iVbSV9ic3igBq0rjV +ecqYAU83SABIHZRVVcLZAhnbLgLaNL0GlU8znAkkiB3qHz2+LSpLgcGgGYqg5dr WyIP+pKrAIOZvsyYIO+vCxCn87vy1++9IMgKhEAyfCdD5RXplOuud9E8OXJrZZan E4C0lTgT6uz+ywRt3MYozXUd9q44/EkVcqYbea/lcXp0ve7Wl05Kd+JNx/J9DaU9 0N9IZ0bPj7JvowKbXCcP1EDe+0U/2GXhkvNXHqUOYj4z0JZ2ih0VhsSWeQaeTnRh Qi+YQNubtnfZQnFAzYXq+CcQqw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:00:57 2026 by rpki-client