$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: rek9tgp10QG1vxli3N8eQlIJVoSkeVZY3AZIEgqWIDY= Subject key identifier: 73:07:00:4C:3D:93:96:01:66:18:04:58:0A:8E:BE:DB:93:81:A3:61 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 221C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 21FA Signing time: Tue 12 May 2026 15:53:28 +0000 Manifest this update: Tue 12 May 2026 15:53:27 +0000 Manifest next update: Tue 19 May 2026 15:53:27 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: t3g7L3HtcFnCtII+bVSmqEZjF47zyBWKSZ+xdiwKsWM=) 2: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=) 4: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8732 (0x221c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: May 12 15:53:27 2026 GMT Not After : May 19 15:53:27 2026 GMT Subject: CN=6a034cf8-9880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:6b:e6:17:06:33:d2:30:2e:2b:69:41:f3: d3:87:3a:ad:ac:8c:8f:38:d6:53:cb:16:c7:77:41: c6:e6:d8:04:50:79:4b:ea:66:b0:9f:70:18:e9:2e: 73:88:f2:3b:c7:08:d5:03:0c:51:f2:d1:12:d3:af: cb:cc:8a:af:1f:84:79:c5:74:04:0d:09:9a:dd:88: df:a2:39:22:e5:d7:ff:cc:59:ae:db:f4:29:39:49: 2b:af:6d:ff:f8:ff:dc:dc:fb:50:7d:69:a0:15:42: 6c:e0:78:14:ba:07:08:55:78:36:51:ed:31:3c:0d: e2:d8:15:43:9d:69:f3:8f:dd:67:52:86:1b:b0:ea: b7:c9:3e:93:82:67:38:f7:be:4b:5b:4a:e8:ca:36: 18:6e:07:e1:37:55:2a:18:6d:2c:c3:e9:0f:7c:0a: fa:67:78:2c:6f:34:bb:b5:a6:52:59:1e:d2:84:ee: 05:26:92:f4:2c:72:8d:54:2e:86:c5:c0:4f:18:f3: 9c:ec:aa:c3:c1:f8:7b:51:08:f6:7e:76:e1:ea:17: 28:d6:17:71:1f:30:48:1d:6c:d6:f8:ab:f8:ee:52: 51:4f:b8:3c:07:98:ec:1f:93:59:cd:ab:5e:23:94: b5:70:0d:da:07:6a:3d:30:53:4e:cb:ce:83:14:95: cb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:07:00:4C:3D:93:96:01:66:18:04:58:0A:8E:BE:DB:93:81:A3:61 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:02:f7:6f:a7:ab:a9:55:e8:ef:75:60:d4:0a:b6:fa:a9: 2b:bf:cc:9c:f6:09:ab:a7:08:68:78:48:4a:16:76:91:74:0f: 0d:ee:1a:37:1f:8c:28:3f:76:35:e2:2d:3a:2b:79:fa:e1:e8: 59:d9:c5:89:64:4b:cd:23:77:94:fd:2b:c9:bc:66:6c:e2:70: 0a:b3:2c:35:c0:05:6e:6d:87:00:6c:f4:e1:31:9d:7c:ce:3a: 9f:3a:ad:d5:1c:46:58:e4:ba:16:41:29:d0:e4:24:87:61:e3: 00:8f:be:40:36:77:d7:f9:6b:e3:b3:d0:65:96:7b:a4:42:65: 21:42:f0:b6:06:b2:16:30:40:d5:0e:49:1c:36:d2:4a:75:53: 9e:80:19:08:aa:02:cf:af:b1:41:21:5d:16:de:5e:41:63:cd: ef:80:9d:eb:08:f5:55:cf:42:c5:1f:08:e9:6f:3a:bb:d2:cb: 88:b3:73:4b:4d:83:e3:23:7a:bb:32:15:51:da:01:80:54:ac: cd:09:fc:5a:dd:42:f7:b4:09:81:fd:56:c4:80:30:cf:f9:78: 0f:a2:5e:5f:69:ea:bc:c9:d6:60:e8:9e:c5:5f:87:22:df:f6: 4d:b3:c5:06:30:fe:7a:73:0d:3f:fe:dd:f4:29:51:f4:14:42: f2:4b:3e:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwNTEyMTU1MzI3WhcNMjYwNTE5MTU1MzI3WjAYMRYwFAYD VQQDEw02YTAzNGNmOC05ODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h1r5hcGM9IwLitpQfPThzqtrIyPONZTyxbHd0HG5tgEUHlL6mawn3AY6S5z iPI7xwjVAwxR8tES06/LzIqvH4R5xXQEDQma3Yjfojki5df/zFmu2/QpOUkrr23/ +P/c3PtQfWmgFUJs4HgUugcIVXg2Ue0xPA3i2BVDnWnzj91nUoYbsOq3yT6Tgmc4 975LW0royjYYbgfhN1UqGG0sw+kPfAr6Z3gsbzS7taZSWR7ShO4FJpL0LHKNVC6G xcBPGPOc7KrDwfh7UQj2fnbh6hco1hdxHzBIHWzW+Kv47lJRT7g8B5jsH5NZzate I5S1cA3aB2o9MFNOy86DFJXLjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMHAEw9 k5YBZhgEWAqOvtuTgaNhMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAINcC92+nq6lV6O91YNQKtvqpK7/MnPYJq6cIaHhIShZ2kXQPDe4aNx+MKD92 NeItOit5+uHoWdnFiWRLzSN3lP0rybxmbOJwCrMsNcAFbm2HAGz04TGdfM46nzqt 1RxGWOS6FkEp0OQkh2HjAI++QDZ31/lr47PQZZZ7pEJlIULwtgayFjBA1Q5JHDbS SnVTnoAZCKoCz6+xQSFdFt5eQWPN74Cd6wj1Vc9CxR8I6W86u9LLiLNzS02D4yN6 uzIVUdoBgFSszQn8Wt1C97QJgf1WxIAwz/l4D6JeX2nqvMnWYOiexV+HIt/2TbPF BjD+enMNP/7d9ClR9BRC8ks+uQ== -----END CERTIFICATE-----Generated at Wed May 13 07:47:03 2026 by rpki-client