$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: r+9ERS1uM9+iEoiHB9a5h0f8/8g+HCr2Labd+7YwuR8= Subject key identifier: D4:A3:4A:03:6B:C1:06:40:70:82:CE:82:56:F1:CC:5E:E9:E2:2F:2C Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 0550 Signing time: Fri 04 Apr 2025 23:32:33 +0000 Manifest this update: Fri 04 Apr 2025 23:32:33 +0000 Manifest next update: Fri 11 Apr 2025 23:32:33 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: NQoW7QKYNasmn5wdEgeYIQ2UXCdq2UkT5vKmQ5IGI1k=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB Validity Not Before: Apr 4 23:32:33 2025 GMT Not After : Apr 11 23:32:33 2025 GMT Subject: CN=67f06c11-bf87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:1b:34:f5:67:a6:e6:b8:30:75:86:a5:df: 77:8e:76:f5:24:9c:7b:af:b0:47:b0:ee:13:30:c1: 5c:89:bd:95:77:24:fd:46:87:ab:20:c7:d4:48:02: 31:bb:59:77:47:4d:dd:af:2f:d0:7d:6f:e2:8a:c7: 3a:78:d7:bc:7d:85:fd:54:d4:df:df:98:01:33:19: 0b:96:05:f6:86:02:e6:e4:ff:b8:fc:94:99:fd:d7: b8:d4:38:46:4a:57:f8:94:41:5e:a9:2f:95:62:f5: 8a:a2:ac:19:1f:0e:ae:5c:3d:5a:48:a6:ef:05:f1: ee:62:41:e5:1c:03:2e:74:a3:b4:9f:7c:e1:e0:54: 7f:8b:8b:89:57:08:16:74:6e:1f:3d:33:3f:de:ce: c9:2e:fc:2d:02:ca:61:00:07:99:f6:61:a1:51:2c: 1f:40:20:3b:d9:d7:aa:1e:ae:2c:41:32:ac:66:96: 43:04:57:89:db:79:0c:4f:19:e9:1a:e4:42:f1:86: a2:b5:54:de:74:57:af:b8:09:dc:c9:ad:ba:b7:5d: ec:9b:b6:75:a4:e7:77:4a:40:b9:5c:2c:7b:dc:6c: ef:29:1a:df:00:6c:49:f0:13:43:a0:cc:90:4f:dd: ae:22:96:72:e9:1d:41:8d:75:51:cf:f9:23:1e:7d: 47:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:4A:03:6B:C1:06:40:70:82:CE:82:56:F1:CC:5E:E9:E2:2F:2C X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:2b:99:8e:9f:1c:af:15:62:d2:7b:aa:3b:ae:eb:7b:02:30: 3a:c6:9c:09:e1:ce:dc:e6:6d:d1:e5:b6:62:31:8e:17:ce:4d: ac:7c:5a:28:57:39:b4:16:5a:12:2b:ac:9d:2b:50:20:4e:be: 11:dd:05:da:7d:99:03:8a:2b:43:6c:21:5c:14:6c:44:a7:47: a5:df:a2:5f:34:c0:6d:ae:d6:7c:d9:4a:68:9a:4a:c6:0a:7e: 23:ce:f5:46:db:b9:33:1a:ba:d7:14:6c:0f:16:b9:58:95:e0: 6f:1a:5c:98:6f:91:66:bf:7f:63:e5:14:54:2f:6a:e4:b4:6f: 63:55:3d:75:ef:a1:89:a1:0a:b4:6e:11:49:32:3b:c6:f7:25: 11:bb:e2:bb:a6:c5:40:36:ff:dc:55:52:a4:e1:52:c7:5d:f1: 57:15:e8:73:5b:35:0e:93:da:35:0c:0f:ab:9e:e6:e1:35:b2: 17:55:c4:09:9d:eb:43:7c:fd:09:a2:ac:e3:8a:63:b7:29:77: af:82:c9:25:2f:60:de:9b:fe:a4:9d:d0:1b:9a:30:2d:80:3d: 6c:ae:0e:f4:b7:cd:c8:2b:40:13:27:99:c3:86:0c:fa:73:d8: 23:16:af:da:68:ab:40:56:de:eb:5d:8d:71:bd:f3:69:9e:8b: 46:ab:8b:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwNDA0MjMzMjMzWhcNMjUwNDExMjMzMjMzWjAYMRYwFAYD VQQDEw02N2YwNmMxMS1iZjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLYbNPVnpua4MHWGpd93jnb1JJx7r7BHsO4TMMFcib2VdyT9RoerIMfUSAIx u1l3R03dry/QfW/iisc6eNe8fYX9VNTf35gBMxkLlgX2hgLm5P+4/JSZ/de41DhG Slf4lEFeqS+VYvWKoqwZHw6uXD1aSKbvBfHuYkHlHAMudKO0n3zh4FR/i4uJVwgW dG4fPTM/3s7JLvwtAsphAAeZ9mGhUSwfQCA72deqHq4sQTKsZpZDBFeJ23kMTxnp GuRC8YaitVTedFevuAncya26t13sm7Z1pOd3SkC5XCx73GzvKRrfAGxJ8BNDoMyQ T92uIpZy6R1BjXVRz/kjHn1HHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSjSgNr wQZAcILOglbxzF7p4i8sMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoK5mOnxyvFWLSe6o7rut7AjA6xpwJ4c7c5m3R5bZiMY4Xzk2sfFoo Vzm0FloSK6ydK1AgTr4R3QXafZkDiitDbCFcFGxEp0el36JfNMBtrtZ82UpomkrG Cn4jzvVG27kzGrrXFGwPFrlYleBvGlyYb5Fmv39j5RRUL2rktG9jVT1176GJoQq0 bhFJMjvG9yURu+K7psVANv/cVVKk4VLHXfFXFehzWzUOk9o1DA+rnubhNbIXVcQJ netDfP0JoqzjimO3KXevgsklL2Dem/6kndAbmjAtgD1srg70t83IK0ATJ5nDhgz6 c9gjFq/aaKtAVt7rXY1xvfNpnotGq4tx -----END CERTIFICATE-----Generated at Sat Apr 5 22:59:45 2025 by rpki-client