$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: kCY+PWLSHr//Bm31jXc0aUowVZUlbyGo3IQJTLUVdko= Subject key identifier: D4:3B:CA:F5:E7:DB:6B:B8:33:B4:32:38:DA:C2:0A:CC:1B:9C:82:B3 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2167 Signing time: Fri 08 Aug 2025 16:00:15 +0000 Manifest this update: Fri 08 Aug 2025 16:00:15 +0000 Manifest next update: Fri 15 Aug 2025 16:00:15 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: 5ubDO+g8jGmwA+4WARKXuHdU0AAK8iE1hDfVjlV4reA=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8578 (0x2182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Aug 8 16:00:15 2025 GMT Not After : Aug 15 16:00:15 2025 GMT Subject: CN=68961f0f-1c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:7e:f5:df:e4:52:ab:95:92:af:0b:ec:77: fd:2f:f7:10:2f:4b:04:0f:84:da:f3:3e:3a:d5:39: ed:c4:49:1e:8e:d9:37:49:f2:bb:6d:ca:65:d8:ff: 3d:17:d4:13:e6:4f:ae:bb:b2:52:66:cf:ed:ac:8c: 5b:82:f5:91:6f:87:62:53:b1:4c:01:85:d5:aa:c5: ed:1a:8b:00:b2:51:c8:85:aa:d2:87:0f:1c:e7:ce: 8f:b6:9b:d8:56:9f:80:07:3d:dc:a3:67:7d:49:bf: 69:f8:e6:37:ca:3a:3d:5d:23:00:50:68:3f:7e:c3: 59:74:e7:56:2a:e8:c3:ca:d1:71:11:fe:ee:d1:df: 13:d0:3d:12:83:51:5e:d5:ac:d9:e9:bf:ee:5c:9b: 97:7e:9c:19:8f:90:38:0d:44:ca:c2:65:57:ec:d0: 13:85:7e:4d:11:78:35:41:bf:19:a6:7f:50:1b:bb: db:c3:98:e2:35:5d:1a:76:8f:cf:be:d3:05:50:94: b8:3d:b6:f4:f7:28:45:90:f1:0c:05:61:d4:c7:f5: 47:08:e0:7c:b9:ba:da:a9:47:ab:7f:0f:8f:6c:33: 20:e6:cd:d0:ad:ec:47:c4:90:bb:8d:91:15:5f:ce: 76:ed:fe:e7:41:99:63:da:31:b2:79:44:a7:b5:c7: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3B:CA:F5:E7:DB:6B:B8:33:B4:32:38:DA:C2:0A:CC:1B:9C:82:B3 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:aa:2b:c1:c2:0c:ce:dd:7a:d9:74:38:76:b8:fb:df:28:81: 4b:2d:06:cf:de:c4:43:0a:84:0e:dc:72:80:ff:9a:4e:42:43: 2e:01:a2:c7:7c:20:a5:af:c2:02:42:ed:da:31:8d:5e:14:62: b1:44:b6:44:31:d9:15:10:6d:dd:ae:d3:69:56:1a:ee:59:0a: 4b:c2:c6:2a:25:94:a2:98:71:37:7e:b0:81:69:88:54:3c:2a: 22:56:ad:dd:7e:0e:37:28:68:0b:2c:8d:c2:4a:93:16:23:fd: 6c:c8:6c:ee:49:cf:ee:18:78:1f:6f:fe:a8:63:75:78:94:a9: 63:70:54:fc:c2:c9:ba:69:81:2f:0d:70:24:db:16:28:61:ab: 6e:30:41:43:95:2e:fc:87:b7:e4:6e:12:de:31:6d:07:6d:8e: 8a:c0:fc:71:ec:ae:d9:61:92:fd:1a:ea:cf:eb:3c:dc:81:db: 8a:46:6e:b9:22:ad:3d:b8:ea:1b:d3:80:a2:f7:51:33:e3:77: 74:32:76:f6:cd:a7:e0:85:71:38:11:d1:f2:88:8c:94:2b:c4: d7:a0:66:9b:e1:d9:5d:61:f5:ec:70:f6:47:e3:4f:f3:a2:4f: 71:92:45:de:12:f3:f6:b4:66:55:da:f1:f3:5a:1a:da:fc:0b: 51:cd:6f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUwODA4MTYwMDE1WhcNMjUwODE1MTYwMDE1WjAYMRYwFAYD VQQDEw02ODk2MWYwZi0xYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgN+9d/kUquVkq8L7Hf9L/cQL0sED4Ta8z461TntxEkejtk3SfK7bcpl2P89 F9QT5k+uu7JSZs/trIxbgvWRb4diU7FMAYXVqsXtGosAslHIharShw8c586PtpvY Vp+ABz3co2d9Sb9p+OY3yjo9XSMAUGg/fsNZdOdWKujDytFxEf7u0d8T0D0Sg1Fe 1azZ6b/uXJuXfpwZj5A4DUTKwmVX7NAThX5NEXg1Qb8Zpn9QG7vbw5jiNV0ado/P vtMFUJS4Pbb09yhFkPEMBWHUx/VHCOB8ubraqUerfw+PbDMg5s3QrexHxJC7jZEV X8527f7nQZlj2jGyeUSntcczTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ7yvXn 22u4M7QyONrCCswbnIKzMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJqivBwgzO3XrZdDh2uPvfKIFLLQbP3sRDCoQO3HKA/5pOQkMuAaLH fCClr8ICQu3aMY1eFGKxRLZEMdkVEG3drtNpVhruWQpLwsYqJZSimHE3frCBaYhU PCoiVq3dfg43KGgLLI3CSpMWI/1syGzuSc/uGHgfb/6oY3V4lKljcFT8wsm6aYEv DXAk2xYoYatuMEFDlS78h7fkbhLeMW0HbY6KwPxx7K7ZYZL9GurP6zzcgduKRm65 Iq09uOob04Ci91Ez43d0Mnb2zafghXE4EdHyiIyUK8TXoGab4dldYfXscPZH40/z ok9xkkXeEvP2tGZV2vHzWhra/AtRzW+L -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:05 2025 by rpki-client