$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: N9U0m677ZQt2cv7SA78TRBAo1natA+hO+bk38Md174U= Subject key identifier: AA:DE:A7:52:D9:2C:9F:E4:8A:75:8B:1F:CE:02:E3:9B:D2:7D:2B:DC Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: EE Signing time: Mon 21 Sep 2026 06:22:36 +0000 Manifest this update: Mon 21 Sep 2026 06:22:36 +0000 Manifest next update: Mon 28 Sep 2026 06:22:36 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: I1Ph9SI7mrchXkPawAzLDDvjRG2HIhVPnjXYaYZsP7k=) 2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: 8A0Ncvr0z3oh8CthhOuSyPoN4FbTMeFRsZZhlyB56aY=) 3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: sNv7081XtV8EyLFPiBsb9HAMJSD9GQXf3Qs+h2VetI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Sep 21 06:22:36 2026 GMT Not After : Sep 28 06:22:36 2026 GMT Subject: CN=6ab0cd2c-e37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:e9:55:17:2c:a1:9a:29:0f:c6:f2:5e:3f: 8d:ca:00:e9:ba:38:9d:93:ee:52:5b:e7:77:06:3f: f3:98:1f:33:20:49:c0:8a:d5:66:17:28:b8:5b:14: bd:ca:78:9c:5a:16:19:4a:02:8f:01:3c:fa:ba:30: b3:c0:bc:96:10:6a:37:16:0d:f1:3b:ad:19:db:c4: ce:33:3a:41:11:3b:b5:0e:22:27:95:89:a5:4e:af: ff:0e:d7:70:36:d3:08:10:06:45:c9:45:b1:5c:94: 06:08:af:c5:2f:ff:23:f0:57:df:8e:7d:e9:6f:e0: 42:a2:1a:0c:d5:3d:6a:a5:c1:13:28:ae:3e:e8:8f: 76:29:e7:cf:b7:1f:68:a1:07:59:e5:53:8f:9c:74: 35:58:11:ce:8e:64:c2:4d:2c:e8:ec:5b:2a:02:ba: 9a:be:27:a8:35:46:17:a4:76:5e:f7:cc:42:df:97: b1:0e:8e:a8:ac:97:3a:7f:39:7b:07:c3:06:f5:30: 52:fa:50:62:26:13:92:2c:7d:95:5f:71:8d:14:cf: b5:77:06:c6:0c:2d:a6:41:07:7f:d2:1c:ff:b9:c3: 18:5d:35:b3:76:59:83:89:f8:a7:d4:be:16:1a:f5: a0:c6:e9:e7:53:45:5d:d3:23:a4:a4:e1:10:a1:e3: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DE:A7:52:D9:2C:9F:E4:8A:75:8B:1F:CE:02:E3:9B:D2:7D:2B:DC X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:72:08:d9:c4:76:58:1d:a0:ef:8e:a4:bd:41:54:83:61:e5: bf:54:4a:c5:87:f6:3a:4f:a4:d8:f7:a7:ec:f8:bb:40:fe:9f: 20:22:8c:a1:81:37:e5:4b:53:61:a0:cf:8d:a7:16:c4:d8:ff: 75:7c:8f:a6:29:aa:40:b3:c9:68:0a:29:2c:d0:14:cc:df:90: b5:e6:91:82:59:b5:0c:c0:f3:f3:9f:34:5c:28:6d:20:e7:99: 23:78:2a:90:a1:8b:f9:a4:1c:b9:df:1c:07:a0:ce:72:8c:45: 65:3e:09:c4:a7:bd:37:57:ad:3f:7e:6b:e9:14:17:95:7e:c6: f6:e4:dd:2f:94:8e:2b:99:fc:c3:64:fa:69:38:ed:28:3e:e4: 58:9c:db:3d:3f:24:9c:62:f9:2f:c9:87:91:ac:44:a8:32:f5: 2d:74:63:cb:29:30:4c:95:02:fa:ac:ef:26:e6:90:78:52:d0: 50:42:74:41:ee:83:25:43:c6:db:5c:cf:8b:63:a9:7b:54:2f: c7:31:f2:a2:fc:5c:f9:e9:29:7a:6e:8f:70:74:09:4b:9a:a7: 7d:b9:96:86:a6:c8:b2:4a:30:f7:48:51:d7:30:d3:d6:6a:55: 6e:9e:71:43:c7:c2:08:80:22:f0:04:20:1f:95:fe:14:53:54: b7:a2:d4:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwOTIxMDYyMjM2WhcNMjYwOTI4MDYyMjM2WjAYMRYwFAYD VQQDEw02YWIwY2QyYy1lMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkbpVRcsoZopD8byXj+NygDpujidk+5SW+d3Bj/zmB8zIEnAitVmFyi4WxS9 ynicWhYZSgKPATz6ujCzwLyWEGo3Fg3xO60Z28TOMzpBETu1DiInlYmlTq//Dtdw NtMIEAZFyUWxXJQGCK/FL/8j8Fffjn3pb+BCohoM1T1qpcETKK4+6I92KefPtx9o oQdZ5VOPnHQ1WBHOjmTCTSzo7FsqArqavieoNUYXpHZe98xC35exDo6orJc6fzl7 B8MG9TBS+lBiJhOSLH2VX3GNFM+1dwbGDC2mQQd/0hz/ucMYXTWzdlmDifin1L4W GvWgxunnU0Vd0yOkpOEQoeNoFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKrep1LZ LJ/kinWLH84C45vSfSvcMB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPHII2cR2WB2g746kvUFUg2Hlv1RKxYf2Ok+k2Pen7Pi7QP6fICKMoYE35UtT YaDPjacWxNj/dXyPpimqQLPJaAopLNAUzN+QteaRglm1DMDz8580XChtIOeZI3gq kKGL+aQcud8cB6DOcoxFZT4JxKe9N1etP35r6RQXlX7G9uTdL5SOK5n8w2T6aTjt KD7kWJzbPT8knGL5L8mHkaxEqDL1LXRjyykwTJUC+qzvJuaQeFLQUEJ0Qe6DJUPG 21zPi2Ope1QvxzHyovxc+ekpem6PcHQJS5qnfbmWhqbIskow90hR1zDT1mpVbp5x Q8fCCIAi8AQgH5X+FFNUt6LUiQ== -----END CERTIFICATE-----Generated at Tue Sep 22 10:13:32 2026 by rpki-client