$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: GOqlicDpaF23f2+BewokeZZbp6wDP4StOX1QIRhGgSg= Subject key identifier: DF:31:ED:CF:36:68:C1:96:C9:6B:36:E2:E9:E7:35:34:07:B9:19:65 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 216E Signing time: Fri 22 Aug 2025 15:58:00 +0000 Manifest this update: Fri 22 Aug 2025 15:57:59 +0000 Manifest next update: Fri 29 Aug 2025 15:57:59 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: WT6mO2GDSBqrPhEX0VQTLI5Me1Pt/QCSyr6NRTqnTlg=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8585 (0x2189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Aug 22 15:57:59 2025 GMT Not After : Aug 29 15:57:59 2025 GMT Subject: CN=68a89388-a59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:04:d7:2d:b9:0f:8f:dc:a4:d9:a8:cd:79: 5c:91:c2:d6:12:21:52:2d:2b:2b:61:1e:c0:bb:a5: 91:bf:77:97:8d:98:76:0b:7d:bd:5e:b9:cd:01:4f: 6c:36:e0:95:d0:03:49:56:4c:f3:4d:95:b7:4a:5a: b5:d9:06:cf:fd:25:f8:34:37:cd:a8:15:26:85:2c: ac:8e:33:92:3f:0d:f9:d4:8a:a0:71:6b:3e:ba:bf: bd:18:8e:bb:fd:d1:15:02:49:fa:04:7e:15:4e:b0: 62:17:d3:b6:23:28:0d:9c:03:89:58:ef:23:55:16: b6:24:09:10:a5:a4:e6:75:0f:6a:79:d1:fa:f9:e6: f6:34:fe:d4:ed:56:b6:bc:a7:b2:47:76:13:9e:d0: e5:cd:5d:90:98:3d:86:28:e7:78:f6:47:ed:a3:68: e1:52:22:d3:89:69:f0:99:c8:cf:1b:14:f2:54:cc: 37:64:b0:bf:25:a5:54:a0:76:24:c4:21:15:19:67: 6c:a7:2e:19:23:d3:de:93:59:60:75:f5:29:6a:b3: f1:09:92:88:a9:c1:15:7c:83:b4:19:e1:fb:a0:ef: ad:2e:05:d4:8d:89:33:2f:41:e1:ae:48:6d:97:f3: 59:3d:ce:2c:f0:a0:fb:50:63:b0:7d:67:b0:ef:ec: cd:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:31:ED:CF:36:68:C1:96:C9:6B:36:E2:E9:E7:35:34:07:B9:19:65 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:36:83:67:ee:6c:34:b4:dc:97:a1:b4:fe:fd:7b:fc:f3:90: 5c:a4:e7:88:0d:a0:de:32:f2:7d:2f:ba:89:f3:b9:88:fd:aa: 58:6d:6b:dd:80:47:59:6e:ac:ab:f8:c8:8c:01:84:eb:3d:55: 8d:90:d4:cc:48:7b:bd:93:51:5d:d3:c0:eb:7c:c4:c0:73:44: 9a:c7:a0:ea:b6:fc:a0:7c:e2:78:de:30:04:51:cb:3f:0f:5c: 78:88:37:0b:d4:83:15:b0:df:e7:49:dd:21:19:4f:0b:f4:c9: 08:d8:45:6c:e7:9b:d6:1a:41:9a:b2:3f:38:80:1c:00:c9:91: eb:34:df:16:dd:4c:d9:af:e2:fb:40:bf:01:08:5d:03:20:18: d6:d2:f1:0e:ae:db:87:1b:5c:b8:73:db:53:42:5e:ea:54:1f: 6f:8f:a6:a6:24:8f:c3:26:be:ad:d1:40:b8:02:ff:6d:63:18: 3a:89:c0:be:56:1f:e2:32:7e:99:17:96:70:d0:2c:25:71:da: ae:c5:02:14:5d:59:64:a5:9d:5f:3f:d3:9a:3f:38:60:b6:61: 4f:57:27:fa:72:b5:05:63:30:3c:42:0e:79:5b:6f:38:1c:e8: 6e:4d:fe:7c:76:4e:d2:a7:4a:42:63:89:83:12:dc:48:e3:4a: 27:ec:98:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUwODIyMTU1NzU5WhcNMjUwODI5MTU1NzU5WjAYMRYwFAYD VQQDEw02OGE4OTM4OC1hNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6ME1y25D4/cpNmozXlckcLWEiFSLSsrYR7Au6WRv3eXjZh2C329XrnNAU9s NuCV0ANJVkzzTZW3Slq12QbP/SX4NDfNqBUmhSysjjOSPw351IqgcWs+ur+9GI67 /dEVAkn6BH4VTrBiF9O2IygNnAOJWO8jVRa2JAkQpaTmdQ9qedH6+eb2NP7U7Va2 vKeyR3YTntDlzV2QmD2GKOd49kfto2jhUiLTiWnwmcjPGxTyVMw3ZLC/JaVUoHYk xCEVGWdspy4ZI9Pek1lgdfUparPxCZKIqcEVfIO0GeH7oO+tLgXUjYkzL0Hhrkht l/NZPc4s8KD7UGOwfWew7+zNNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8x7c82 aMGWyWs24unnNTQHuRllMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrNoNn7mw0tNyXobT+/Xv885BcpOeIDaDeMvJ9L7qJ87mI/apYbWvd gEdZbqyr+MiMAYTrPVWNkNTMSHu9k1Fd08DrfMTAc0Sax6DqtvygfOJ43jAEUcs/ D1x4iDcL1IMVsN/nSd0hGU8L9MkI2EVs55vWGkGasj84gBwAyZHrNN8W3UzZr+L7 QL8BCF0DIBjW0vEOrtuHG1y4c9tTQl7qVB9vj6amJI/DJr6t0UC4Av9tYxg6icC+ Vh/iMn6ZF5Zw0CwlcdquxQIUXVlkpZ1fP9OaPzhgtmFPVyf6crUFYzA8Qg55W284 HOhuTf58dk7Sp0pCY4mDEtxI40on7Jhl -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:29 2025 by rpki-client