$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: 9Q55OM9+TWoIdrtx6gvJ4Fcbf5U5MfhS/KvtH6APLSY= Subject key identifier: 39:F5:9F:78:B3:04:D0:F2:81:59:56:6A:A1:46:65:64:5C:E8:E4:4E Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 214B Signing time: Sat 14 Jun 2025 15:53:34 +0000 Manifest this update: Sat 14 Jun 2025 15:53:34 +0000 Manifest next update: Sat 21 Jun 2025 15:53:34 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: uqyq0uS9WyXMdFyzw8DobNJEmnKm3R7j4SH2DRqjllY=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8550 (0x2166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Jun 14 15:53:34 2025 GMT Not After : Jun 21 15:53:34 2025 GMT Subject: CN=684d9afe-3a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b3:75:3f:77:6f:be:99:d7:e6:74:a6:c5:9f: 43:0f:b4:8a:17:0c:0a:9e:bf:25:b1:60:34:d4:54: 76:61:36:d4:d5:12:40:85:fa:58:dc:87:c3:8b:2d: 4a:1b:a6:56:2b:ca:bc:32:08:38:e3:f1:e7:d2:69: 64:a0:d9:11:a7:5c:d0:2d:68:14:c7:57:b9:09:be: 90:1f:78:17:f3:a7:10:83:98:c0:ef:a5:05:fb:b8: 7f:1f:7b:3c:ae:30:d4:7f:e9:82:7d:be:02:52:af: 77:1b:da:29:a2:63:65:3a:29:d8:4d:df:17:e0:79: 2e:d3:c5:0d:9d:4f:89:c6:55:0c:de:aa:c0:a8:1b: 39:77:b4:f1:fd:8b:7b:cb:14:9e:ef:42:73:73:28: 13:a9:a2:af:2a:83:20:4b:a9:9e:f3:f1:d0:a5:f6: 1a:44:80:c6:02:a1:12:49:d8:f0:64:09:f9:9f:b8: a0:74:bb:0a:be:56:12:14:4e:1c:b0:cd:76:54:71: 49:a0:9b:12:c9:24:58:3c:19:16:b5:dd:52:41:12: 3c:58:45:b9:f5:17:45:d0:48:3a:95:07:d7:e3:1f: 50:73:51:7b:43:20:94:a3:17:53:66:76:93:24:43: 54:ab:7c:13:f2:6d:c2:bc:d4:76:3d:a3:10:5e:45: 08:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F5:9F:78:B3:04:D0:F2:81:59:56:6A:A1:46:65:64:5C:E8:E4:4E X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:78:63:70:6f:17:3f:05:39:9e:19:d3:84:1d:e8:11:3a:f0: 74:e3:80:5a:56:ca:da:7a:b5:83:7f:39:97:7b:b2:62:68:72: 31:a8:e1:53:d1:57:06:2a:f6:bb:99:14:08:09:a5:2d:c8:c9: dc:c6:82:a4:75:19:82:1b:1e:2c:4e:05:2a:0b:c8:db:12:ac: c9:2c:2a:b8:ce:08:3a:cd:f8:21:24:3f:71:7b:4c:45:52:5f: 13:d7:56:f6:f5:be:d9:6f:ed:e1:83:83:e8:3a:3b:96:ab:60: a7:d4:85:0c:7c:f8:7c:49:18:04:f9:37:89:34:7b:af:ec:7f: cb:5d:00:cd:5d:94:49:f2:d0:79:f9:89:2f:f3:c3:0e:9d:61: 4c:d1:33:25:3e:84:eb:1d:40:1d:bf:d0:83:3a:d1:84:2c:28: 9e:b1:05:85:f6:97:22:7a:38:7d:88:d4:9c:74:58:d4:62:89: ad:70:c0:5d:0a:9e:bb:f5:1b:4b:c5:bd:fb:64:b5:ff:61:fc: 0d:56:60:3e:a7:35:1c:a8:06:cd:e8:7f:0d:97:4f:ad:c9:ca: 5e:33:80:22:e0:6c:49:47:47:f8:cd:6e:3c:61:46:c7:e9:58: f9:b5:a2:30:7e:b4:95:c6:06:09:6e:d9:f6:a9:b5:3e:07:ed: 02:93:90:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUwNjE0MTU1MzM0WhcNMjUwNjIxMTU1MzM0WjAYMRYwFAYD VQQDEw02ODRkOWFmZS0zYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbN1P3dvvpnX5nSmxZ9DD7SKFwwKnr8lsWA01FR2YTbU1RJAhfpY3IfDiy1K G6ZWK8q8Mgg44/Hn0mlkoNkRp1zQLWgUx1e5Cb6QH3gX86cQg5jA76UF+7h/H3s8 rjDUf+mCfb4CUq93G9opomNlOinYTd8X4Hku08UNnU+JxlUM3qrAqBs5d7Tx/Yt7 yxSe70JzcygTqaKvKoMgS6me8/HQpfYaRIDGAqESSdjwZAn5n7igdLsKvlYSFE4c sM12VHFJoJsSySRYPBkWtd1SQRI8WEW59RdF0Eg6lQfX4x9Qc1F7QyCUoxdTZnaT JENUq3wT8m3CvNR2PaMQXkUI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn1n3iz BNDygVlWaqFGZWRc6OROMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8eGNwbxc/BTmeGdOEHegROvB044BaVsraerWDfzmXe7JiaHIxqOFT 0VcGKva7mRQICaUtyMncxoKkdRmCGx4sTgUqC8jbEqzJLCq4zgg6zfghJD9xe0xF Ul8T11b29b7Zb+3hg4PoOjuWq2Cn1IUMfPh8SRgE+TeJNHuv7H/LXQDNXZRJ8tB5 +Ykv88MOnWFM0TMlPoTrHUAdv9CDOtGELCiesQWF9pciejh9iNScdFjUYomtcMBd Cp679RtLxb37ZLX/YfwNVmA+pzUcqAbN6H8Nl0+tycpeM4Ai4GxJR0f4zW48YUbH 6Vj5taIwfrSVxgYJbtn2qbU+B+0Ck5Cg -----END CERTIFICATE-----Generated at Sun Jun 15 08:38:41 2025 by rpki-client