$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft File: -wh2koh5X11QS5QJlAVzEWaLYpc.mft (raw, json) Hash identifier: TVtySCUxf+k2a9m/D8L/mG6uZxUmB8d2jlGXTYt0UDs= Subject key identifier: DB:9C:BC:10:45:33:67:34:EF:BB:A2:07:6A:CD:38:56:83:C7:0E:FE Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: A0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft Manifest number: 9C Signing time: Wed 15 Apr 2026 06:55:21 +0000 Manifest this update: Wed 15 Apr 2026 06:55:21 +0000 Manifest next update: Wed 22 Apr 2026 06:55:21 +0000 Files and hashes: 1: -wh2koh5X11QS5QJlAVzEWaLYpc.crl (hash: 16M+L7xwYb9H5QmkQQOH+GSff5zWevSeOtO5WzXHI0s=) 2: E74C08AE4B1911F08F30867AC4F9AE02.roa (hash: hBBegN02Z62Y863ej/zbkPgcNxABVq6jWnQuNefd9is=) 3: E7F6F23C4B1911F08F30867AC4F9AE02.roa (hash: zIMly+FS9YUi3pvudCV4ThJ4KJbFHoU/zWu/5zHps80=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Apr 15 06:55:21 2026 GMT Not After : Apr 22 06:55:21 2026 GMT Subject: CN=69df3659-d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:57:88:b5:f7:91:b1:3e:ee:8b:6e:6a:f0: 7d:c7:f1:11:29:7b:35:37:2a:b4:1a:30:8a:db:33: 09:d7:60:02:e3:c7:1a:55:4a:58:06:d9:af:80:5e: 05:59:fc:13:3d:a8:78:06:39:4a:c5:5f:84:3c:31: d8:ab:a3:5a:0d:5a:90:15:f0:0b:26:0d:fc:13:1d: 64:84:20:76:c5:08:0b:cc:61:f9:31:6f:4b:3e:bb: 25:ca:bf:d5:e3:dc:3f:b0:3e:5f:05:d3:51:a8:e2: c8:78:45:92:55:e2:79:d4:6a:93:60:e4:ce:73:14: a8:2d:45:85:5d:e6:dc:c7:a9:af:cb:0f:c8:89:e0: 5f:75:66:c1:28:1b:d8:7d:b6:92:ab:3d:6d:9c:97: 27:74:87:8f:44:14:c6:51:2b:9e:d7:e9:62:20:02: 53:77:f0:e9:3a:39:f6:a3:06:5f:0c:7f:07:9a:39: e2:a2:b0:d4:62:e4:4d:62:a0:0d:79:76:29:8b:56: 1c:0d:66:f6:01:25:9f:4e:15:cc:d9:db:78:99:44: 0d:d7:2e:a2:75:33:f1:a1:40:ec:be:d7:ce:83:67: e9:3a:ac:c3:1d:3b:f4:d5:8c:02:49:ab:a1:e6:7b: f3:6f:0c:50:3a:6c:07:f9:1d:a3:14:08:f7:2b:99: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9C:BC:10:45:33:67:34:EF:BB:A2:07:6A:CD:38:56:83:C7:0E:FE X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:bf:8c:2c:af:7f:2c:cc:b0:f4:57:35:13:e2:31:12:fc:fb: a0:44:69:3f:b7:ff:02:ed:6c:6d:d1:46:b6:3d:b9:48:ba:d4: 93:62:27:8c:79:32:76:15:90:93:5d:48:fb:8e:0f:8d:c1:c8: 0b:39:07:94:a2:16:3f:16:a1:11:55:90:b9:88:b2:ab:5a:07: 40:8e:81:91:a6:57:df:45:cd:38:0f:e5:b4:44:b9:cb:9e:fa: a1:5c:af:e4:35:90:83:96:6f:40:19:64:fd:29:ef:40:2e:8c: 1b:a1:e2:14:fb:04:ad:80:e1:7a:d8:cb:b9:8b:a2:31:d8:09: 6c:d5:a8:41:4a:60:56:f0:91:a1:d9:6c:03:ea:c4:ed:c4:c1: 33:ad:ad:95:b8:d5:bd:55:34:a5:e2:ef:73:11:be:b9:e6:f1: 7d:11:4a:5f:20:c4:d1:0d:9c:28:8b:40:62:b0:cf:7c:62:42: c3:06:d4:14:66:49:dc:77:1b:78:dd:69:9f:25:da:44:84:b8: 97:ea:a3:f7:0e:68:fc:bc:c4:68:8b:dc:34:b2:8f:3e:06:5f: 8b:27:e2:a3:9d:80:da:56:7d:72:8b:1c:0d:a1:ac:a7:c0:65: 1b:c3:63:b6:dc:f9:29:06:e0:4a:76:8b:a0:cd:36:9e:ab:f9: d3:ce:c3:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhBODYxMTAvBgNVBAUTKEZCMDg3NjkyODg3OTVGNUQ1MDRCOTQwOTk0MDU3MzEx NjY4QjYyOTcwHhcNMjYwNDE1MDY1NTIxWhcNMjYwNDIyMDY1NTIxWjAYMRYwFAYD VQQDEw02OWRmMzY1OS1kMTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi4VXiLX3kbE+7otuavB9x/ERKXs1Nyq0GjCK2zMJ12AC48caVUpYBtmvgF4F WfwTPah4BjlKxV+EPDHYq6NaDVqQFfALJg38Ex1khCB2xQgLzGH5MW9LPrslyr/V 49w/sD5fBdNRqOLIeEWSVeJ51GqTYOTOcxSoLUWFXebcx6mvyw/IieBfdWbBKBvY fbaSqz1tnJcndIePRBTGUSue1+liIAJTd/DpOjn2owZfDH8HmjniorDUYuRNYqAN eXYpi1YcDWb2ASWfThXM2dt4mUQN1y6idTPxoUDsvtfOg2fpOqzDHTv01YwCSauh 5nvzbwxQOmwH+R2jFAj3K5n3kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNucvBBF M2c077uiB2rNOFaDxw7+MB8GA1UdIwQYMBaAFPsIdpKIeV9dUEuUCZQFcxFmi2KX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEE4Ni9BQzcwNEM2QzRC MTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgxMVFTNVFKbEFWekVXYUxZ cGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi8td2gya29oNVgx MVFTNVFKbEFWekVXYUxZcGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi7+MLK9/LMyw9Fc1E+IxEvz7oERpP7f/Au1sbdFGtj25SLrUk2InjHkydhWQ k11I+44PjcHICzkHlKIWPxahEVWQuYiyq1oHQI6BkaZX30XNOA/ltES5y576oVyv 5DWQg5ZvQBlk/SnvQC6MG6HiFPsErYDhetjLuYuiMdgJbNWoQUpgVvCRodlsA+rE 7cTBM62tlbjVvVU0peLvcxG+uebxfRFKXyDE0Q2cKItAYrDPfGJCwwbUFGZJ3Hcb eN1pnyXaRIS4l+qj9w5o/LzEaIvcNLKPPgZfiyfio52A2lZ9coscDaGsp8BlG8Nj ttz5KQbgSnaLoM02nqv5087DUA== -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:49 2026 by rpki-client