$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: GOP1Nfgvb8z32IPEFzufs6O2m2VGQjp5nsXCe8+nr/w= Subject key identifier: 09:93:D2:B3:6D:E6:43:86:38:47:86:4B:DF:21:CE:9C:5E:9B:0B:D3 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 056B Signing time: Fri 30 May 2025 23:33:22 +0000 Manifest this update: Fri 30 May 2025 23:33:21 +0000 Manifest next update: Fri 06 Jun 2025 23:33:21 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: O6UxSPDl5u6Y4mfa31AUi6sEx5wZbahUwTXROTv4CYo=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: May 30 23:33:21 2025 GMT Not After : Jun 6 23:33:21 2025 GMT Subject: CN=683a4042-e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f1:67:e8:0e:0a:58:80:8d:60:87:08:aa:c0: 98:9f:6e:71:8c:ec:7a:dd:af:ee:7e:36:09:93:52: e9:0e:90:55:df:ce:25:eb:06:7d:2a:65:af:46:9e: a3:66:fc:d4:00:11:01:fd:48:36:fe:88:b1:49:ac: 89:b9:ec:26:1c:48:41:71:4b:1f:85:43:2f:ae:7a: 20:3b:66:70:b8:22:a4:63:76:71:f8:92:1a:ef:c6: 21:f8:13:00:c9:06:ff:5d:cf:a0:f7:90:b5:c3:af: c1:57:2e:40:90:06:e4:2e:70:68:51:5e:fb:ce:d8: f9:58:db:43:22:fd:d5:2d:07:ee:44:cb:b5:a2:b2: c7:e2:2b:6a:ac:1e:09:5f:ac:ea:33:02:b5:11:1c: 93:54:e3:12:2f:eb:c9:ba:ba:42:92:ce:1d:16:d5: 84:8d:6f:dd:9c:ed:0f:88:28:2d:e0:0a:6e:0f:20: d8:f4:f1:e7:25:ba:77:d9:06:47:0d:c6:a7:dd:c3: c4:58:b1:08:32:99:02:ac:7e:2b:e1:d8:c9:36:14: 37:fc:0e:fb:f1:3c:f3:52:7a:53:44:75:d2:7b:85: eb:68:16:07:83:40:ea:f4:4c:04:58:b2:30:24:51: 92:fb:38:88:b1:64:ab:22:20:fe:d0:99:82:2e:db: 4d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:93:D2:B3:6D:E6:43:86:38:47:86:4B:DF:21:CE:9C:5E:9B:0B:D3 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:33:e6:70:a2:63:56:7a:92:3a:15:f8:20:f4:8b:a6:00:d3: d3:86:c5:cb:cb:82:2b:e2:a6:0a:39:86:54:3f:2f:b6:50:c6: fd:06:92:7d:36:54:42:a5:c9:cf:68:fe:6b:ac:90:dd:12:3f: 0e:76:52:ed:88:a7:7e:b8:76:46:00:ff:e9:51:a4:0a:ee:4d: 95:3b:5b:89:9d:18:7f:31:d9:dc:98:41:01:c5:d5:9a:40:aa: bf:72:b5:41:8d:0e:84:7c:f6:f1:d5:8e:b1:e7:ef:ec:16:99: e9:f7:56:ba:13:5a:ac:9f:1f:75:46:33:87:7a:3c:1a:e4:84: fb:b2:b8:8f:f0:5e:6d:b2:ab:81:25:1f:40:15:3a:6b:1c:f6: 48:5e:0c:64:31:b5:fb:f5:9c:c2:d6:84:9d:9f:d2:8d:71:94: 6b:23:9d:07:18:4d:3c:ef:2c:2a:3b:4e:47:3a:b9:cd:c7:de: bb:7f:21:ee:52:26:79:d1:18:47:db:47:c0:9d:d6:4f:30:8a: 40:7e:25:b5:a2:ea:05:3a:23:d6:04:64:73:74:c8:48:d5:87: 62:60:c4:dd:de:ee:50:ec:d3:5c:b5:b8:c6:a4:8e:f0:44:fe: 2d:02:e7:5c:79:05:3c:db:89:37:29:c3:c0:9b:7a:31:e5:f7: f8:db:b6:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwNTMwMjMzMzIxWhcNMjUwNjA2MjMzMzIxWjAYMRYwFAYD VQQDEw02ODNhNDA0Mi1lMzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfFn6A4KWICNYIcIqsCYn25xjOx63a/ufjYJk1LpDpBV384l6wZ9KmWvRp6j ZvzUABEB/Ug2/oixSayJuewmHEhBcUsfhUMvrnogO2ZwuCKkY3Zx+JIa78Yh+BMA yQb/Xc+g95C1w6/BVy5AkAbkLnBoUV77ztj5WNtDIv3VLQfuRMu1orLH4itqrB4J X6zqMwK1ERyTVOMSL+vJurpCks4dFtWEjW/dnO0PiCgt4ApuDyDY9PHnJbp32QZH Dcan3cPEWLEIMpkCrH4r4djJNhQ3/A778TzzUnpTRHXSe4XraBYHg0Dq9EwEWLIw JFGS+ziIsWSrIiD+0JmCLttNuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmT0rNt 5kOGOEeGS98hzpxemwvTMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPM+ZwomNWepI6Ffgg9IumANPThsXLy4Ir4qYKOYZUPy+2UMb9BpJ9 NlRCpcnPaP5rrJDdEj8OdlLtiKd+uHZGAP/pUaQK7k2VO1uJnRh/MdncmEEBxdWa QKq/crVBjQ6EfPbx1Y6x5+/sFpnp91a6E1qsnx91RjOHejwa5IT7sriP8F5tsquB JR9AFTprHPZIXgxkMbX79ZzC1oSdn9KNcZRrI50HGE087ywqO05HOrnNx967fyHu UiZ50RhH20fAndZPMIpAfiW1ouoFOiPWBGRzdMhI1YdiYMTd3u5Q7NNctbjGpI7w RP4tAudceQU824k3KcPAm3ox5ff427aj -----END CERTIFICATE-----Generated at Sat May 31 17:28:52 2025 by rpki-client