$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: 3SNqiufUVO4Uhv1Y5JRc2vu53mcia7Xt7QZT8Gm+P1s= Subject key identifier: 94:A5:49:48:FC:6F:41:EE:D5:FE:FE:82:24:BC:1D:16:A1:85:54:8D Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 21FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 21E0 Signing time: Thu 26 Mar 2026 15:53:21 +0000 Manifest this update: Thu 26 Mar 2026 15:53:20 +0000 Manifest next update: Thu 02 Apr 2026 15:53:20 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: vosmXgs3qM/oQChPUEHDvBc+5QdeulZjUzND8ebQjMU=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: 5g3UB7PkGdv29Z5SCWubN0v2fUQJ0C7K/L9HhQY3p7Y=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: hA/fmykI3XeiZHCbiTTARBykOTtuxS/5r6lg/JS2YzU=) 4: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: kXAepDosnfMA1DrO07uYXTdUTk5OxqtBiA3vNI2kZ1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8703 (0x21ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Mar 26 15:53:20 2026 GMT Not After : Apr 2 15:53:20 2026 GMT Subject: CN=69c55671-e173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:76:bc:36:15:75:b2:cb:bf:41:b0:a1:30: 16:c2:35:0c:35:70:a2:e8:8a:c2:05:cc:cc:19:0a: d4:e4:89:13:3d:b7:03:35:a6:f5:ec:07:7c:87:2e: df:35:fe:01:ee:81:7a:b6:59:37:ac:00:fb:f7:87: 58:26:d3:e1:31:05:20:36:24:eb:ba:1b:81:fb:b0: ff:be:47:f0:30:c8:93:4c:f6:ed:61:0b:89:1f:7f: 87:b1:6f:d5:f6:34:88:ad:d0:5d:83:fe:14:d4:4e: 44:7f:f6:4c:35:9b:41:ea:ef:1e:26:71:dc:fe:ea: 98:b5:f9:8f:48:b7:38:b7:39:36:53:75:65:d5:15: 1f:fd:9c:d8:d3:12:74:53:a3:9c:8e:a2:4d:49:61: c9:a7:c8:c4:1b:96:b4:6a:c3:e7:b9:da:68:9c:3f: 0e:88:8f:f3:15:a4:68:d2:5a:2b:53:9f:f0:e0:bd: 4c:e8:9d:ae:db:da:64:fe:d7:4f:fa:0b:1f:ee:dc: 60:35:3f:03:37:06:b3:62:ec:d9:bc:11:8c:b0:6f: f5:77:3d:97:eb:41:38:7f:e2:49:c5:dd:34:3a:b0: 0c:ea:8d:9c:ce:ce:70:61:71:af:ca:cd:3a:c5:06: a1:1f:0c:65:16:10:b4:25:4a:94:0b:69:4d:66:ca: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A5:49:48:FC:6F:41:EE:D5:FE:FE:82:24:BC:1D:16:A1:85:54:8D X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:c6:50:b3:90:28:cb:69:6e:f9:88:1e:6e:01:b9:ca:b5:05: e5:22:a8:13:c3:f5:da:96:2b:18:dc:f2:45:01:9f:a7:a5:52: af:43:94:c7:13:7e:4f:85:a1:fb:57:5a:2d:3e:b8:8f:06:7f: fb:f2:93:bb:fe:8f:fa:aa:79:ee:7b:7f:92:ec:17:ec:b7:9f: 3d:74:0c:0b:4c:90:90:0e:79:29:b0:10:33:38:1f:4f:12:1c: 33:97:f0:2f:6d:72:6c:86:b6:75:7c:19:c8:1b:c4:95:20:03: e1:22:87:1b:cd:62:28:41:09:fe:21:7d:06:ef:f7:0e:a3:e3: 6a:87:f3:b5:b1:dd:13:f8:b3:f3:5b:e3:89:b2:bb:f8:8e:0c: ce:b6:23:63:12:4b:b7:ca:a2:31:53:4a:a4:56:d0:e9:2f:e3: 0e:f2:56:69:73:30:e3:c4:f5:ee:ae:28:ed:98:04:4e:20:8d: cc:ff:07:dd:a0:89:cc:79:fd:69:ae:32:68:70:17:66:0e:a5: 03:f5:79:13:f7:d4:2e:f0:73:19:8c:ef:d1:8c:f3:e3:7e:96: b6:a4:5f:61:d4:79:52:21:12:8f:51:cf:72:0c:ab:55:01:1b: 43:69:ee:7d:8d:77:36:08:f5:39:8c:24:21:33:15:fa:68:10: a4:32:11:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwMzI2MTU1MzIwWhcNMjYwNDAyMTU1MzIwWjAYMRYwFAYD VQQDEw02OWM1NTY3MS1lMTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCB2vDYVdbLLv0GwoTAWwjUMNXCi6IrCBczMGQrU5IkTPbcDNab17Ad8hy7f Nf4B7oF6tlk3rAD794dYJtPhMQUgNiTruhuB+7D/vkfwMMiTTPbtYQuJH3+HsW/V 9jSIrdBdg/4U1E5Ef/ZMNZtB6u8eJnHc/uqYtfmPSLc4tzk2U3Vl1RUf/ZzY0xJ0 U6OcjqJNSWHJp8jEG5a0asPnudponD8OiI/zFaRo0lorU5/w4L1M6J2u29pk/tdP +gsf7txgNT8DNwazYuzZvBGMsG/1dz2X60E4f+JJxd00OrAM6o2czs5wYXGvys06 xQahHwxlFhC0JUqUC2lNZspSuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJSlSUj8 b0Hu1f7+giS8HRahhVSNMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH8ZQs5Aoy2lu+YgebgG5yrUF5SKoE8P12pYrGNzyRQGfp6VSr0OUxxN+T4Wh +1daLT64jwZ/+/KTu/6P+qp57nt/kuwX7LefPXQMC0yQkA55KbAQMzgfTxIcM5fw L21ybIa2dXwZyBvElSAD4SKHG81iKEEJ/iF9Bu/3DqPjaofztbHdE/iz81vjibK7 +I4MzrYjYxJLt8qiMVNKpFbQ6S/jDvJWaXMw48T17q4o7ZgETiCNzP8H3aCJzHn9 aa4yaHAXZg6lA/V5E/fULvBzGYzv0Yzz436WtqRfYdR5UiESj1HPcgyrVQEbQ2nu fY13Ngj1OYwkITMV+mgQpDIR1g== -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:19 2026 by rpki-client