$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: ESBSGSJVG65UMl/va0mGYWhWse8CmfKL04wftb7wD0Y= Subject key identifier: F7:28:EE:B2:0C:28:40:23:24:F9:36:BF:A2:DE:54:07:F4:9D:02:20 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2221 Signing time: Tue 28 Jul 2026 15:58:12 +0000 Manifest this update: Tue 28 Jul 2026 15:58:11 +0000 Manifest next update: Tue 04 Aug 2026 15:58:11 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: 1UKyhiqhsn6Q3dw2ogB8wewtW1Ee90jMZgEobY5Pwz4=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=) 3: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=) 4: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8771 (0x2243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Jul 28 15:58:11 2026 GMT Not After : Aug 4 15:58:11 2026 GMT Subject: CN=6a68d193-23aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:ff:fa:70:8c:a5:d5:56:be:af:f4:2b:bc: ec:ac:4f:35:d6:7c:8d:b3:b8:a5:b5:47:a8:d0:07: 86:b9:0a:2a:fc:5e:2a:0a:87:8d:61:7e:10:bb:cc: 57:53:4e:79:65:20:72:09:30:c3:ca:07:2c:de:68: dd:59:9c:b3:ef:75:1e:c9:1b:91:5e:69:cf:a3:a2: aa:dd:6c:fb:5f:84:73:37:75:6f:ff:df:02:17:e0: 08:fd:e4:47:1a:42:ed:5a:15:e9:c0:c3:d8:ee:b1: 0b:c0:dc:4c:75:1d:33:8e:a4:50:2e:8c:80:b5:d6: c1:24:f7:4b:f2:65:2e:f0:1d:fb:f8:21:22:59:75: 85:ab:7a:00:2c:dd:cd:de:55:cb:15:f1:0f:bf:b8: d9:29:5c:df:13:34:b3:81:49:e1:d6:c7:63:9b:a0: 3e:6d:50:f0:29:7e:c0:97:fb:72:a6:3e:94:cb:02: fa:0d:9f:41:aa:e6:06:2f:59:ff:78:80:b8:96:d0: 0f:b1:cb:f1:bb:10:64:c0:46:3b:2d:f5:6e:bd:dd: 8e:32:9f:6d:c2:0b:92:1e:06:57:bb:d6:de:0c:c8: 8a:a9:ed:71:38:38:d5:98:0a:47:b3:19:2a:73:fd: 2b:f0:b3:df:1e:a5:6f:43:b1:ff:25:8a:ad:89:dd: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:28:EE:B2:0C:28:40:23:24:F9:36:BF:A2:DE:54:07:F4:9D:02:20 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:97:49:11:81:51:a0:b6:f8:0f:9a:bd:55:6e:5f:7d:82:c0: d3:68:0a:c4:bc:87:aa:17:53:9d:55:53:89:8b:16:c4:38:6a: a4:0f:c2:bb:28:36:e2:99:5a:8d:e9:37:86:0f:c5:a4:e1:64: cc:4a:b1:a1:7b:76:8c:d0:20:39:b4:f3:95:1e:fd:d6:6f:62: b2:17:7a:4e:b1:a2:a2:34:52:fd:de:79:12:c9:04:42:08:16: 08:ce:2b:3b:85:b9:50:47:a1:70:13:3f:47:ca:7f:bc:77:3e: 14:86:5f:b9:cc:5c:29:89:cf:6e:03:8f:74:de:18:ee:aa:74: 03:9f:a7:3e:4e:07:0f:83:c8:3d:1c:40:c5:4b:46:1d:d1:63: a3:d4:d0:ca:77:02:15:88:f2:89:f0:00:3a:72:ce:cd:d1:57: 61:1a:ca:2d:e4:45:5b:a8:f7:95:64:ac:62:6f:3d:bc:47:b1: 6e:bf:4a:45:83:d0:35:8c:3d:ab:c0:c0:67:f8:14:51:c4:60: 52:7f:1e:7b:6f:d7:03:76:d6:23:ad:5e:e8:5e:8d:54:0c:29: 8f:29:73:06:8f:95:ff:51:a8:37:6f:e1:66:cd:a0:ed:2c:2c: 25:5b:5c:00:cb:54:40:47:6e:e8:3f:b7:7c:86:18:55:7d:57: 67:65:40:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwNzI4MTU1ODExWhcNMjYwODA0MTU1ODExWjAYMRYwFAYD VQQDEw02YTY4ZDE5My0yM2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsy3/+nCMpdVWvq/0K7zsrE811nyNs7iltUeo0AeGuQoq/F4qCoeNYX4Qu8xX U055ZSByCTDDygcs3mjdWZyz73UeyRuRXmnPo6Kq3Wz7X4RzN3Vv/98CF+AI/eRH GkLtWhXpwMPY7rELwNxMdR0zjqRQLoyAtdbBJPdL8mUu8B37+CEiWXWFq3oALN3N 3lXLFfEPv7jZKVzfEzSzgUnh1sdjm6A+bVDwKX7Al/typj6UywL6DZ9BquYGL1n/ eIC4ltAPscvxuxBkwEY7LfVuvd2OMp9twguSHgZXu9beDMiKqe1xODjVmApHsxkq c/0r8LPfHqVvQ7H/JYqtid11aQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPco7rIM KEAjJPk2v6LeVAf0nQIgMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACZdJEYFRoLb4D5q9VW5ffYLA02gKxLyHqhdTnVVTiYsWxDhqpA/Cuyg24pla jek3hg/FpOFkzEqxoXt2jNAgObTzlR791m9ishd6TrGiojRS/d55EskEQggWCM4r O4W5UEehcBM/R8p/vHc+FIZfucxcKYnPbgOPdN4Y7qp0A5+nPk4HD4PIPRxAxUtG HdFjo9TQyncCFYjyifAAOnLOzdFXYRrKLeRFW6j3lWSsYm89vEexbr9KRYPQNYw9 q8DAZ/gUUcRgUn8ee2/XA3bWI61e6F6NVAwpjylzBo+V/1GoN2/hZs2g7SwsJVtc AMtUQEdu6D+3fIYYVX1XZ2VAzQ== -----END CERTIFICATE-----Generated at Wed Jul 29 15:47:46 2026 by rpki-client