$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: vllGvxzHAIEyBUS3JPAcEmsGl84cIMjponYyLqJhCqI= Subject key identifier: 7A:7E:47:89:19:EF:4D:75:21:98:96:96:BE:E1:AF:0A:67:78:FF:BF Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 2264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2240 Signing time: Tue 22 Sep 2026 15:49:14 +0000 Manifest this update: Tue 22 Sep 2026 15:49:14 +0000 Manifest next update: Tue 29 Sep 2026 15:49:14 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: maSHSBHzqYIEgWxHC3ARMlfYQSUvrLCRSoZzv+BIZkA=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=) 4: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=) 5: 47D9BDECB09511F19F7126F35A11F970.roa (hash: mZN/3zgpNk+AZ6JAlUUhY+2aqWlwlMcE9iiivGrhDBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8804 (0x2264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Sep 22 15:49:14 2026 GMT Not After : Sep 29 15:49:14 2026 GMT Subject: CN=6ab2a37a-47fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:fa:b4:8a:46:ab:61:73:05:93:d5:f3:df: 90:e4:c2:5d:3c:b8:37:b5:0e:99:ae:cc:72:45:5a: ae:25:f1:15:44:d7:29:dc:86:bb:71:ba:fe:6b:5f: 6e:2a:7b:ff:4e:72:e7:4e:a7:63:ba:0a:b3:b2:26: 4b:6f:52:82:34:d1:01:32:68:80:8f:10:73:ff:17: 11:64:a3:36:ae:82:14:3e:00:55:34:7b:ff:92:d1: cd:44:9f:fe:ea:c4:64:32:46:28:a0:86:20:34:c3: 13:b7:64:5a:ac:49:92:f9:88:d3:98:75:b0:e0:c9: a2:7f:ad:38:e4:17:a5:87:47:bf:54:d3:c1:bd:da: cf:01:11:89:d3:33:28:c3:d7:20:61:ed:d4:b3:a3: 6e:98:20:6c:5b:89:bf:72:de:61:c5:16:41:c6:23: 77:22:8f:13:2f:d5:5b:12:56:8b:e1:c7:e3:6f:6f: 2b:64:d9:29:97:48:c5:31:a7:e9:d2:ef:b8:ed:35: 40:52:76:8e:90:f8:8e:52:43:20:d2:c2:92:a7:49: fe:63:c6:1c:26:82:f1:d8:e4:84:fd:e6:51:5b:ab: 4c:df:41:3a:00:a8:ac:3a:5e:2c:0e:95:67:4c:a0: 76:02:e7:5e:40:47:cc:6f:9c:2e:e3:89:64:ff:f9: b5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7E:47:89:19:EF:4D:75:21:98:96:96:BE:E1:AF:0A:67:78:FF:BF X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:28:78:a1:34:15:47:70:8a:54:01:66:ab:a6:3c:7c:c4:7b: 73:c6:fb:80:ac:66:4b:cd:d9:05:3d:a8:01:25:e0:24:7e:37: 63:cf:51:7a:7c:09:9e:52:5e:94:38:13:c6:c7:77:0b:46:d7: ed:1d:de:c7:70:2c:54:f6:09:44:a2:fa:f1:bd:9d:8b:73:2a: 9e:06:42:7a:61:e4:f2:ad:47:98:39:62:f2:2a:56:7f:e2:c4: e3:09:8c:49:1f:8f:9b:c6:38:27:ab:94:4a:23:6f:7a:a2:a3: 90:37:eb:81:56:d7:34:12:48:cd:db:2e:8d:15:e4:a2:0b:47: 0c:2f:b2:b1:1e:11:e1:d9:c6:39:b6:b0:52:d6:53:cd:0b:ff: 2b:36:bc:17:20:f5:60:2a:39:1b:13:99:3a:cb:44:71:de:18: c8:f5:dc:24:3a:d7:43:0c:09:55:bc:20:19:91:ad:e8:72:ff: 04:58:77:e3:f4:ac:86:1a:77:b5:2c:53:45:c5:7a:c6:8b:d1: 64:8a:07:55:d5:54:bc:4f:c2:e1:09:b4:84:88:6c:a7:cf:f9: 94:a9:10:db:dc:cf:69:7a:e0:da:c0:41:3f:42:80:17:5e:f8: f5:2a:a1:cf:1d:d0:71:37:25:15:a0:e4:b9:cb:2d:ef:7e:f2: df:22:55:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICImQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjYwOTIyMTU0OTE0WhcNMjYwOTI5MTU0OTE0WjAYMRYwFAYD VQQDEw02YWIyYTM3YS00N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZX6tIpGq2FzBZPV89+Q5MJdPLg3tQ6ZrsxyRVquJfEVRNcp3Ia7cbr+a19u Knv/TnLnTqdjugqzsiZLb1KCNNEBMmiAjxBz/xcRZKM2roIUPgBVNHv/ktHNRJ/+ 6sRkMkYooIYgNMMTt2RarEmS+YjTmHWw4Mmif6045Belh0e/VNPBvdrPARGJ0zMo w9cgYe3Us6NumCBsW4m/ct5hxRZBxiN3Io8TL9VbElaL4cfjb28rZNkpl0jFMafp 0u+47TVAUnaOkPiOUkMg0sKSp0n+Y8YcJoLx2OSE/eZRW6tM30E6AKisOl4sDpVn TKB2AudeQEfMb5wu44lk//m1CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHp+R4kZ 7011IZiWlr7hrwpneP+/MB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARyh4oTQVR3CKVAFmq6Y8fMR7c8b7gKxmS83ZBT2oASXgJH43Y89RenwJnlJe lDgTxsd3C0bX7R3ex3AsVPYJRKL68b2di3MqngZCemHk8q1HmDli8ipWf+LE4wmM SR+Pm8Y4J6uUSiNveqKjkDfrgVbXNBJIzdsujRXkogtHDC+ysR4R4dnGObawUtZT zQv/Kza8FyD1YCo5GxOZOstEcd4YyPXcJDrXQwwJVbwgGZGt6HL/BFh34/Sshhp3 tSxTRcV6xovRZIoHVdVUvE/C4Qm0hIhsp8/5lKkQ29zPaXrg2sBBP0KAF1749Sqh zx3QcTclFaDkucst737y3yJVTQ== -----END CERTIFICATE-----Generated at Wed Sep 23 20:36:51 2026 by rpki-client