
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier: 6saYFZoLaTTp4luqNeNRbXlq6RWSzJRV4/BG64Ud/jU=
Subject key identifier: DB:CC:35:47:93:94:AA:43:09:3C:0A:C7:47:C4:55:D5:19:72:E6:3F
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 21ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number: 21D1
Signing time: Sat 28 Feb 2026 15:55:35 +0000
Manifest this update: Sat 28 Feb 2026 15:55:35 +0000
Manifest next update: Sat 07 Mar 2026 15:55:35 +0000
Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: IHtFqO8dvSvs8aPuvJX2fyg7DbCCJ0Eh4Ku1HGSr85I=)
2: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: lQXg+x/pxYEw6RZp1vPPXfhhm8xX80IO6STDBaCkyJw=)
3: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=)
4: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 15:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8685 (0x21ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Feb 28 15:55:35 2026 GMT
Not After : Mar 7 15:55:35 2026 GMT
Subject: CN=69a30ff7-b75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d1:6e:a6:d2:cd:41:2c:b1:fa:ad:b0:85:0a:
86:86:da:a4:85:4a:0b:23:b0:f0:3e:0c:b1:67:4c:
9c:07:5d:de:ed:17:e9:04:eb:45:7d:df:16:8d:31:
96:0c:b3:94:83:89:56:4c:51:e3:6d:bb:ac:72:d2:
f1:9e:8f:5e:10:6a:9a:0c:a2:ed:5c:72:5e:5e:49:
09:e0:58:2b:bf:18:c9:5e:75:a3:85:05:56:51:16:
6d:5b:0f:1a:86:fa:62:67:b6:42:85:6b:98:22:a3:
92:5c:62:91:ef:5d:91:5d:fd:fa:b7:38:82:4d:c8:
82:43:1b:8c:89:8d:f5:97:4d:9a:4a:63:0d:08:49:
2d:ea:19:ff:5b:60:72:da:ac:14:9b:cb:4d:59:e6:
3a:6e:25:c3:be:61:22:fd:24:6f:75:4e:d7:57:f9:
5a:79:89:64:11:9d:8e:be:bc:b4:20:22:d9:d8:29:
0e:c7:1d:2d:89:aa:45:a9:f1:5b:35:63:af:c0:51:
33:a2:40:58:8a:32:49:9d:d6:52:72:01:b6:61:f0:
62:fd:08:37:13:02:69:c3:5e:66:b7:9c:fa:bf:8a:
1e:5d:5e:e4:04:c3:8f:65:f9:23:1b:3c:f0:6d:a7:
c9:2b:e3:73:65:e5:67:dc:4a:a0:ef:42:36:0a:dc:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:35:47:93:94:AA:43:09:3C:0A:C7:47:C4:55:D5:19:72:E6:3F
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:d6:e2:af:5e:45:de:1b:51:08:d7:c6:85:af:98:d5:f0:15:
e9:6f:cf:a7:7e:f3:93:ff:91:40:ff:4a:c1:f6:b1:e9:05:41:
35:99:83:2e:d4:0f:c3:fc:7c:eb:bb:43:f7:5e:a5:9d:8c:8d:
68:00:90:bf:76:29:ec:65:c0:d1:02:2f:09:33:e2:ef:a3:ca:
45:60:c7:a6:37:c8:d4:5b:80:28:de:b1:84:28:5f:36:89:52:
3e:96:45:72:0d:00:49:8e:87:85:4e:2d:92:0f:6d:99:de:bb:
a6:8e:9b:85:8d:ab:16:d1:76:3a:34:48:bb:8d:6c:5e:8b:60:
60:97:37:21:29:92:c8:81:43:eb:16:53:b6:2d:0b:c9:1d:b2:
57:19:1c:7b:b3:d4:3f:57:74:86:58:ed:af:2c:74:f2:b1:0f:
2f:9a:0d:2f:8b:b2:6d:33:43:b0:74:ae:45:84:42:c1:36:67:
c3:b2:61:e0:31:72:0d:91:2c:5d:5e:74:6a:21:0e:c0:28:f2:
c2:f5:78:e4:27:af:2d:d5:5d:90:2b:af:05:be:9c:6f:0b:6d:
47:f0:06:43:dd:f7:8b:d0:6a:d0:f0:21:b1:56:49:8c:f4:5c:
8c:85:ca:45:f9:12:cb:1a:16:28:4c:3d:88:22:94:08:e2:8c:
4c:fa:d1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:58 2026 by rpki-client