
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier: 5bc29ZIRk/jHrqRe9ZLq+QRasGshbZE7DgXoUyWSGhY=
Subject key identifier: 1A:D7:28:53:16:9E:71:EA:25:4E:F5:F6:9B:B1:66:72:37:B1:F2:75
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 222C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number: 220A
Signing time: Fri 12 Jun 2026 15:51:23 +0000
Manifest this update: Fri 12 Jun 2026 15:51:23 +0000
Manifest next update: Fri 19 Jun 2026 15:51:23 +0000
Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: S9GzANSK1UPrEEQ21yAdMFd70/wRcIDLdHN5r9CZgxo=)
2: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=)
3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=)
4: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8748 (0x222c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Jun 12 15:51:23 2026 GMT
Not After : Jun 19 15:51:23 2026 GMT
Subject: CN=6a2c2afb-589b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:f6:f5:df:49:5e:1a:b8:06:95:10:90:ee:
60:03:42:28:dc:be:ec:34:b4:b3:ce:f0:60:1b:e7:
43:42:5f:04:8e:15:3d:fa:a9:02:44:d7:40:7e:72:
d9:7d:cf:59:ca:9c:da:f9:52:6e:52:bb:6e:49:c1:
30:ac:2b:8e:83:49:c5:05:fb:fb:62:37:24:7e:e9:
66:4f:4f:d5:87:28:51:c6:e5:3e:8b:82:03:7b:64:
96:24:07:79:e3:ed:f0:57:8d:27:2c:9a:93:eb:58:
93:e0:e3:cd:6d:11:a9:14:34:cf:7b:f5:61:54:f7:
0e:85:ba:43:38:84:12:dd:ef:33:8a:d8:02:0a:8c:
41:29:57:1b:57:1a:e4:59:6d:02:93:08:c0:bc:d5:
c5:b2:60:79:84:e6:68:2e:68:1c:6a:15:8c:be:56:
d0:1e:f4:8d:a9:f0:3c:16:bc:ee:02:3a:74:4a:74:
cf:92:5f:90:fa:6f:f3:32:f9:5a:24:3e:6b:73:85:
2a:de:65:7b:b0:05:75:ef:50:be:c9:76:b8:e4:b7:
7b:ce:c1:4e:20:eb:2b:f9:24:08:9f:cd:3a:ca:0f:
1f:b1:47:36:f1:c7:f7:d7:f6:f0:ba:82:c3:da:3f:
37:15:9b:05:59:ae:e4:d1:24:17:72:49:89:8d:af:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D7:28:53:16:9E:71:EA:25:4E:F5:F6:9B:B1:66:72:37:B1:F2:75
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:22:89:68:ff:4b:02:4d:a6:96:76:a6:67:92:c6:9b:7a:
69:33:95:28:00:1c:dc:31:55:12:52:16:c4:73:b2:3b:9a:1c:
d2:08:db:1b:4d:5b:02:4e:07:59:7d:ab:e9:1c:84:19:28:dd:
8a:73:20:7c:6e:5e:7a:fa:b3:d8:64:96:09:98:d3:d9:d6:23:
7b:9b:e5:dc:36:d9:12:09:73:11:fa:c3:bf:e8:1d:30:b6:b7:
93:48:14:01:94:bb:24:32:ec:94:9c:bc:4c:ce:3f:b4:80:a2:
3a:4c:15:42:42:dc:e3:34:26:66:d1:42:94:e6:4b:03:53:f2:
ea:38:be:9d:45:e5:a1:15:c2:86:ca:94:02:cf:3d:73:50:8e:
f1:47:47:4f:eb:08:c3:39:f5:71:66:00:36:2e:bd:41:46:7c:
42:91:11:ce:6d:8b:2b:42:39:9f:76:2f:2a:ae:a5:fa:28:e3:
e1:a2:01:7d:7f:6a:04:c4:09:aa:7e:4e:c1:f0:8c:43:b2:ad:
b8:03:19:25:ee:1b:8c:e7:bf:18:1f:f2:f5:1c:30:9b:f3:8c:
5f:47:f5:c1:8c:04:9c:c1:fd:c0:63:2a:29:55:26:29:af:d6:
fc:36:f8:1f:5b:af:25:21:b2:4d:a4:62:c2:f2:00:37:bc:fd:
20:12:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:48:58 2026 by rpki-client