$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: mlFl5k6dv8Wc7pe2ZTfsu+qOLjVqGKtTtk5svJNxB+k= Subject key identifier: 41:8E:8C:D1:94:F6:C2:95:D5:FE:5E:A3:17:F3:7B:0D:59:D0:58:85 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2155 Signing time: Fri 04 Jul 2025 16:08:52 +0000 Manifest this update: Fri 04 Jul 2025 16:08:51 +0000 Manifest next update: Fri 11 Jul 2025 16:08:51 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: SQOUekMJ+6T3t5Uem+DptniNQNYohUT2vSI92L7Yyjg=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8560 (0x2170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Jul 4 16:08:51 2025 GMT Not After : Jul 11 16:08:51 2025 GMT Subject: CN=6867fc94-b30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:ca:e3:2f:3a:2d:e8:ef:b6:6a:07:a4:45: f7:1e:d2:c3:7b:8d:08:a6:31:40:3b:25:0b:99:24: 6a:d8:dd:2c:c0:64:1a:e3:a7:e4:c2:c7:3a:bc:35: 7d:71:7e:2d:a4:ce:31:7c:59:40:84:8c:2c:55:f9: e4:32:87:e0:ed:7b:a7:ff:60:8a:43:c6:63:22:a6: d3:d3:d6:f5:3f:ff:84:20:78:4b:10:61:b9:38:5f: 14:ba:1e:83:91:dd:6b:d9:24:27:03:3a:48:b7:1c: f1:54:00:62:b8:fd:8f:af:54:1c:43:68:b9:15:cb: 48:a0:22:dc:63:be:38:d2:4c:6c:4c:5b:41:2d:d0: eb:67:36:65:09:42:7e:a9:1e:f6:20:3b:68:9c:f8: e3:45:b1:c2:53:18:30:30:ee:2c:6e:9e:4f:56:07: c0:ef:42:54:47:9c:68:e1:ce:93:e9:70:24:b0:f6: 27:31:6b:e7:51:9c:c1:16:2b:97:f7:82:be:c0:92: 66:14:21:0e:64:21:fd:f5:f3:e9:3f:a7:f4:52:c8: 61:a4:a5:9b:02:8e:4c:08:d7:90:9a:78:f2:e2:07: e7:e7:df:9e:a7:36:23:49:e7:de:c6:1c:5f:7d:88: d8:00:dd:b9:4a:62:84:79:89:7a:43:ee:06:e7:f2: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:8E:8C:D1:94:F6:C2:95:D5:FE:5E:A3:17:F3:7B:0D:59:D0:58:85 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:26:ee:83:49:d7:91:8d:fb:64:3a:b7:b1:7a:94:0c:ae:92: 9c:d1:ee:18:c2:7f:8d:8b:56:55:35:7d:80:26:19:6e:1e:7e: af:48:0b:91:e6:ed:54:dc:d3:af:2d:21:15:3e:dc:73:67:02: 24:da:5b:d2:c7:49:e7:9c:92:07:15:4a:d3:11:6c:e8:96:0b: be:a9:df:a3:49:c2:d8:1b:c2:16:b9:7c:60:1e:4a:cb:aa:93: 92:32:6f:2d:89:ec:af:4f:37:47:33:44:c3:56:fd:07:8f:00: 08:e0:43:c3:bf:6d:cf:b7:89:fd:d3:d4:c9:b6:f6:39:89:c3: a0:5a:bb:33:d0:77:e9:71:70:c1:b9:b1:96:74:03:87:cc:a4: 69:49:f6:1f:bc:cf:68:60:92:63:72:2e:31:c4:8c:4c:b2:0a: be:b8:b5:ff:5d:16:95:fb:5e:d7:ab:1e:d1:58:21:7a:1b:8c: cd:56:92:5d:c4:9b:4d:30:81:c2:80:02:4b:f5:cb:be:0b:40: c7:47:dd:06:ff:29:3b:a0:f2:4d:f9:6e:ff:60:38:8b:f4:71: af:1a:6b:75:2c:3d:39:bb:56:e5:db:ed:22:ac:07:7d:13:b4: 32:f4:1f:4c:d6:06:2d:64:ee:30:02:fa:c2:31:ad:fb:f3:a2: 92:09:9e:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUwNzA0MTYwODUxWhcNMjUwNzExMTYwODUxWjAYMRYwFAYD VQQDEw02ODY3ZmM5NC1iMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl73K4y86LejvtmoHpEX3HtLDe40IpjFAOyULmSRq2N0swGQa46fkwsc6vDV9 cX4tpM4xfFlAhIwsVfnkMofg7Xun/2CKQ8ZjIqbT09b1P/+EIHhLEGG5OF8Uuh6D kd1r2SQnAzpItxzxVABiuP2Pr1QcQ2i5FctIoCLcY7440kxsTFtBLdDrZzZlCUJ+ qR72IDtonPjjRbHCUxgwMO4sbp5PVgfA70JUR5xo4c6T6XAksPYnMWvnUZzBFiuX 94K+wJJmFCEOZCH99fPpP6f0UshhpKWbAo5MCNeQmnjy4gfn59+epzYjSefexhxf fYjYAN25SmKEeYl6Q+4G5/J+KwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGOjNGU 9sKV1f5eoxfzew1Z0FiFMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXJu6DSdeRjftkOrexepQMrpKc0e4Ywn+Ni1ZVNX2AJhluHn6vSAuR 5u1U3NOvLSEVPtxzZwIk2lvSx0nnnJIHFUrTEWzolgu+qd+jScLYG8IWuXxgHkrL qpOSMm8tieyvTzdHM0TDVv0HjwAI4EPDv23Pt4n909TJtvY5icOgWrsz0HfpcXDB ubGWdAOHzKRpSfYfvM9oYJJjci4xxIxMsgq+uLX/XRaV+17Xqx7RWCF6G4zNVpJd xJtNMIHCgAJL9cu+C0DHR90G/yk7oPJN+W7/YDiL9HGvGmt1LD05u1bl2+0irAd9 E7Qy9B9M1gYtZO4wAvrCMa3786KSCZ7V -----END CERTIFICATE-----Generated at Fri Jul 4 18:16:54 2025 by rpki-client