$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: rHnFQ6MntqwqCR0Izp1iCmVcJN01YTz31Vfo8cYIhrI= Subject key identifier: 6E:60:25:95:08:58:48:45:0C:8A:19:AA:92:E7:C1:B5:FA:88:3C:16 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 21B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2195 Signing time: Tue 04 Nov 2025 16:00:24 +0000 Manifest this update: Tue 04 Nov 2025 16:00:24 +0000 Manifest next update: Tue 11 Nov 2025 16:00:24 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: K+nN8YVvUWoNIGsWKz6lHpdROoAgjs+3QEYu6JTpXfc=) 2: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: lQXg+x/pxYEw6RZp1vPPXfhhm8xX80IO6STDBaCkyJw=) 3: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 4: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8625 (0x21b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Nov 4 16:00:24 2025 GMT Not After : Nov 11 16:00:24 2025 GMT Subject: CN=690a2318-4031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:c1:b3:5c:16:68:6a:45:c8:16:15:6f:e2: a9:a2:7b:f8:ab:c2:04:67:4a:54:3b:70:22:75:2d: 0e:e5:a6:74:d5:8e:70:ea:04:3b:43:7d:19:58:42: 99:6f:72:19:43:f4:23:bb:67:be:a7:9a:1d:e4:72: 43:ab:9c:e9:04:75:ef:58:8a:7a:aa:af:c3:d9:ba: c9:fd:1f:16:ab:b7:2f:6e:03:b1:e6:32:4d:d1:7a: e3:b8:3d:05:e3:ab:a9:d6:6f:d7:2e:26:5d:18:c2: 52:b6:3c:f8:85:6c:0e:06:5a:8d:6b:e8:64:67:8a: 3c:2a:81:03:6b:56:cf:ad:bb:f5:0f:91:bf:c1:16: dc:38:95:2a:72:b8:f0:fb:b9:2d:da:a4:f3:30:cb: 2a:9f:16:38:ef:c8:37:b2:3d:c2:98:3a:cc:af:cb: b6:9d:10:c2:6b:74:45:ee:72:7e:b9:7f:c3:ad:1a: 1a:7b:c6:bb:e8:8a:cb:4a:fe:29:59:fa:4b:61:f8: 58:be:4d:7d:d6:dc:6a:8e:9b:d7:e4:7e:f3:73:b6: 3c:f2:be:fa:93:12:9e:e8:81:f2:cc:10:21:bd:84: 47:5f:d3:db:78:5f:06:a2:e1:ea:28:8c:16:56:16: 16:6a:56:06:3c:f2:4d:c3:2b:19:91:20:5e:e3:33: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:60:25:95:08:58:48:45:0C:8A:19:AA:92:E7:C1:B5:FA:88:3C:16 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c9:46:62:df:0b:27:7f:d4:a9:c8:c0:4e:89:6e:5f:d7:7d: 01:3d:b6:18:35:5c:f9:25:01:93:4e:c9:a3:05:b1:3a:d1:41: 78:0c:8b:03:b9:55:b3:71:5f:48:ee:e8:9f:24:17:37:a7:cc: f1:d1:86:2a:30:1b:73:f8:ac:70:bf:92:09:b1:95:ac:6d:64: e1:5e:31:d0:be:d4:27:45:a1:98:24:f2:5a:14:84:bf:91:fe: c1:0e:09:95:65:97:4e:df:04:1e:41:b6:99:5d:5a:8d:fb:7e: 19:8c:95:6c:fb:97:ca:64:e3:7f:c7:5e:aa:96:8a:1b:15:76: c7:64:58:99:95:9d:c2:c4:56:1d:cf:10:0a:0e:06:93:39:36: 12:b9:6a:6d:45:79:fc:7d:96:aa:ce:9b:68:77:06:d9:5a:97: c4:9d:5f:ab:31:64:07:50:2f:f1:b3:6c:8b:44:a3:b2:6f:2d: 9d:61:81:5f:11:f0:05:fb:70:f1:85:cb:ac:d0:06:60:b4:15: 03:07:bc:1d:4d:1a:eb:cf:f6:4a:ed:b0:e2:45:fe:8a:82:0b: 69:4b:b4:8c:5a:64:6a:c0:31:e5:af:02:c0:d4:90:82:7c:f3: 31:12:53:fc:63:16:e7:99:80:ca:37:88:db:d8:49:03:df:48: a3:a0:0a:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUxMTA0MTYwMDI0WhcNMjUxMTExMTYwMDI0WjAYMRYwFAYD VQQDEw02OTBhMjMxOC00MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysXBs1wWaGpFyBYVb+Kponv4q8IEZ0pUO3AidS0O5aZ01Y5w6gQ7Q30ZWEKZ b3IZQ/Qju2e+p5od5HJDq5zpBHXvWIp6qq/D2brJ/R8Wq7cvbgOx5jJN0XrjuD0F 46up1m/XLiZdGMJStjz4hWwOBlqNa+hkZ4o8KoEDa1bPrbv1D5G/wRbcOJUqcrjw +7kt2qTzMMsqnxY478g3sj3CmDrMr8u2nRDCa3RF7nJ+uX/DrRoae8a76IrLSv4p WfpLYfhYvk191txqjpvX5H7zc7Y88r76kxKe6IHyzBAhvYRHX9PbeF8GouHqKIwW VhYWalYGPPJNwysZkSBe4zNbTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG5gJZUI WEhFDIoZqpLnwbX6iDwWMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuyUZi3wsnf9SpyMBOiW5f130BPbYYNVz5JQGTTsmjBbE60UF4DIsD uVWzcV9I7uifJBc3p8zx0YYqMBtz+Kxwv5IJsZWsbWThXjHQvtQnRaGYJPJaFIS/ kf7BDgmVZZdO3wQeQbaZXVqN+34ZjJVs+5fKZON/x16qloobFXbHZFiZlZ3CxFYd zxAKDgaTOTYSuWptRXn8fZaqzptodwbZWpfEnV+rMWQHUC/xs2yLRKOyby2dYYFf EfAF+3Dxhcus0AZgtBUDB7wdTRrrz/ZK7bDiRf6KggtpS7SMWmRqwDHlrwLA1JCC fPMxElP8YxbnmYDKN4jb2EkD30ijoArG -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:53 2025 by rpki-client