
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json)
Hash identifier: VzVH4OZpq87/WU4VtuJ1iEKxiWjghButcWQUdbgPIjA=
Subject key identifier: 68:12:13:C6:C7:E4:54:E2:5B:F5:44:7B:D9:02:02:F1:4B:AE:79:A3
Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Certificate serial: 2248
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
Manifest number: 2226
Signing time: Thu 06 Aug 2026 15:51:10 +0000
Manifest this update: Thu 06 Aug 2026 15:51:09 +0000
Manifest next update: Thu 13 Aug 2026 15:51:09 +0000
Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: XMXxPUkR+Go02751lnqxhd3PExBmr2z4+1D+GpsEfZ8=)
2: 1BE0AAE6AE9A11F0B8FE6621C4F9AE02.roa (hash: qtDGFMhOJ0VDlUc12bIr/PPNosh512QuOLF2MOl6QGc=)
3: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: PFFhqDUXgOwHYlXLP448JNGm2ge+CUxQd0U8hOPUQgY=)
4: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: +kDsd0MsrUW9X5xLDAdvHx0LSDWy4PnbmaV19ILgdxk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 13 Aug 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8776 (0x2248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F
Validity
Not Before: Aug 6 15:51:09 2026 GMT
Not After : Aug 13 15:51:09 2026 GMT
Subject: CN=6a74ad6d-bccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:e0:74:4f:af:3c:32:58:e7:88:c7:1c:bc:
8e:0b:46:3a:98:cd:a5:5d:fb:bd:6a:11:95:a2:15:
9c:32:37:59:5d:d8:e0:60:b4:69:94:c3:9d:95:be:
10:ff:da:4f:18:d0:03:f0:83:7b:eb:70:f9:28:98:
97:51:bc:b7:61:56:70:4a:52:29:7b:14:06:8a:c0:
8c:6d:63:c8:8b:f7:c4:72:c4:02:6d:05:8d:4f:4e:
49:57:2e:fb:db:a2:2d:f2:4f:83:a2:68:2b:cf:43:
69:41:bf:b2:a9:78:b2:7f:4e:22:5e:bb:9b:df:93:
65:de:b8:3a:25:e7:19:85:67:04:7f:20:34:33:1a:
f0:97:5d:1f:79:73:bd:28:a2:cb:05:08:c4:f3:e1:
43:46:5f:60:3a:20:a8:11:b6:c7:16:3c:70:55:95:
3f:75:ea:56:b5:4b:6e:88:63:5a:e6:1b:c8:a1:f1:
eb:17:32:c4:c3:27:7a:58:d8:49:50:20:d3:13:85:
dc:bc:e1:54:56:bf:18:f7:cf:ef:10:71:9e:78:5c:
ff:36:55:d8:10:fd:53:45:89:f3:24:7c:c0:ad:3c:
88:75:62:c9:fa:14:3f:62:b1:98:54:ce:8b:ae:68:
84:8b:be:0d:f5:d4:db:a6:80:bf:f2:d7:c5:a8:3c:
08:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:12:13:C6:C7:E4:54:E2:5B:F5:44:7B:D9:02:02:F1:4B:AE:79:A3
X509v3 Authority Key Identifier:
keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8d:73:61:64:7b:72:66:d7:e0:25:f9:5c:79:35:ea:34:67:
24:c8:fd:28:76:45:a8:20:bf:d8:26:2d:3b:69:66:dd:de:93:
a3:e3:88:cc:96:49:ee:7f:81:9d:34:c3:2f:7f:a8:f1:ed:6d:
ce:41:4f:06:e0:10:d9:f4:82:83:9a:92:77:da:2e:95:ac:ba:
b0:3d:5e:28:d0:21:49:f1:36:8a:48:62:9b:39:9c:a3:f0:d3:
26:4b:c0:11:87:3d:22:12:54:25:ae:c0:e6:d3:75:a5:d3:94:
4f:fa:d4:44:e6:d9:1b:d6:e7:d2:92:d7:3f:99:7f:6e:0b:5f:
0a:e3:2c:e7:8e:52:b8:a8:d6:83:1b:c1:e5:36:cb:c2:12:08:
36:9e:d6:12:b6:a9:65:d6:97:19:1f:51:9d:55:e9:33:b9:5c:
d2:54:0c:18:9c:da:3a:a6:ea:69:e5:f6:f8:93:e5:30:1b:f0:
8e:f1:9c:ed:bd:7d:bc:0f:ca:80:cc:b1:7a:09:2e:17:99:5e:
12:c3:00:ce:b8:3e:28:25:15:d3:91:ba:aa:ac:9e:10:2c:91:
b2:7c:91:72:d7:89:92:c4:55:a3:11:4c:be:c7:4d:b3:34:0f:
d2:27:b8:13:9e:e4:1b:74:4e:35:75:6d:2f:57:d0:74:d5:16:
af:8e:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 17:33:46 2026 by rpki-client