$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: rrJ7jMU6lu3h2mMo1Wp2Bk4CL7yFIFjlpyq7loa4Q9Y= Subject key identifier: 72:EE:66:B9:20:10:E1:19:9B:AF:B3:10:25:DD:A2:C3:A5:C6:CE:DE Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 05AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 05A6 Signing time: Thu 18 Sep 2025 23:30:01 +0000 Manifest this update: Thu 18 Sep 2025 23:30:01 +0000 Manifest next update: Thu 25 Sep 2025 23:30:01 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: kBNaGavuupcSMuJONU/yhcfVGc53Z1/DjM3dUGkc7tc=) 2: 9C3424A08F7F11F09A0D9529C4F9AE02.roa (hash: cwF8COUkuSrij9NX2KXpkgFn2IJIbJrzIKS8a9AaFJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1452 (0x5ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Sep 18 23:30:01 2025 GMT Not After : Sep 25 23:30:01 2025 GMT Subject: CN=68cc95f9-6466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:44:7b:d9:bf:70:1b:e1:b8:6c:39:a6:0b:f6: a6:ce:fe:fa:47:ee:ac:cb:53:8c:38:d1:0d:79:78: 0e:bd:52:18:c6:21:af:c5:7d:b7:d0:d0:71:d0:a6: 3c:ed:1a:86:5a:94:e3:47:ee:c1:11:78:a6:57:32: 41:6a:55:e3:de:95:98:53:d8:07:6b:a9:b1:6b:06: 42:c8:c4:83:04:d1:d9:d1:14:c6:24:1f:4b:f1:dd: 76:cd:fc:ae:8d:12:d5:55:24:3c:4e:ad:60:1f:a5: 90:3e:2d:1b:22:e2:4d:3e:d6:33:7f:e5:87:dd:0f: 7a:48:f8:3a:4b:2c:be:e7:71:ca:20:53:9b:14:89: 7d:41:43:e6:12:4f:04:2c:8d:87:6b:04:69:ab:ee: 2b:0c:52:a6:ec:48:27:2d:74:99:67:bd:5b:29:e9: d5:d4:d9:7a:60:6d:b5:aa:3e:b4:0c:14:c9:48:40: 45:ff:a9:6d:93:44:fe:f1:bb:55:fe:06:68:b2:fb: 83:1b:19:83:1e:1e:bf:10:54:29:f1:33:fb:2f:9a: 7d:84:d0:56:23:84:24:66:c0:28:db:cf:3c:89:8a: 17:99:b8:1c:d8:ec:4b:aa:7d:a6:64:5c:e6:81:4b: a9:5a:e5:b3:93:ff:0f:46:55:9c:77:2e:28:a2:32: 6b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EE:66:B9:20:10:E1:19:9B:AF:B3:10:25:DD:A2:C3:A5:C6:CE:DE X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ae:2a:a1:17:ec:e4:36:37:da:a8:09:7d:93:56:90:fc:32: df:55:78:ff:96:ef:16:6b:16:82:20:9a:16:30:4e:f4:dc:ad: f5:3a:93:ef:04:a4:c5:b2:1d:ee:81:32:6a:50:d5:73:8e:12: 58:bf:fe:46:9b:d7:55:d1:63:2b:81:bf:4c:82:87:e9:ba:54: b4:a6:6c:fa:c7:98:aa:4b:90:5e:21:a5:81:62:03:63:d3:cb: 40:ea:5c:c9:47:b1:f7:cd:ae:18:c3:68:4b:30:9c:b3:f2:47: 1f:a3:d2:a8:52:e3:6a:68:e6:3c:71:ad:1a:f2:97:d3:ad:7e: 22:e5:58:b0:73:b0:8c:dc:7d:11:d7:b6:ee:a1:ec:97:01:86: fd:e8:32:7a:f7:87:0b:0d:b9:19:d3:5e:95:06:e3:16:0f:64: 31:2c:8c:37:49:7f:3f:49:ac:30:b3:14:04:07:cf:6a:d3:20: 32:32:69:c1:7e:fc:c4:4b:86:34:d1:14:ec:fe:eb:e0:98:99: 85:3b:f3:eb:5d:fd:06:68:86:af:7e:3a:83:07:5d:a2:64:a9: 02:e0:fd:9f:be:a1:f6:c7:f6:b6:7c:a0:96:00:c8:d6:a3:38: 4d:94:64:f8:c4:27:ab:ec:bb:59:da:68:ad:f5:2d:7d:9d:78: d8:c7:6f:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwOTE4MjMzMDAxWhcNMjUwOTI1MjMzMDAxWjAYMRYwFAYD VQQDEw02OGNjOTVmOS02NDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA30R72b9wG+G4bDmmC/amzv76R+6sy1OMONENeXgOvVIYxiGvxX230NBx0KY8 7RqGWpTjR+7BEXimVzJBalXj3pWYU9gHa6mxawZCyMSDBNHZ0RTGJB9L8d12zfyu jRLVVSQ8Tq1gH6WQPi0bIuJNPtYzf+WH3Q96SPg6Syy+53HKIFObFIl9QUPmEk8E LI2HawRpq+4rDFKm7EgnLXSZZ71bKenV1Nl6YG21qj60DBTJSEBF/6ltk0T+8btV /gZosvuDGxmDHh6/EFQp8TP7L5p9hNBWI4QkZsAo2888iYoXmbgc2OxLqn2mZFzm gUupWuWzk/8PRlWcdy4oojJrqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLuZrkg EOEZm6+zECXdosOlxs7eMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmriqhF+zkNjfaqAl9k1aQ/DLfVXj/lu8WaxaCIJoWME703K31OpPv BKTFsh3ugTJqUNVzjhJYv/5Gm9dV0WMrgb9MgofpulS0pmz6x5iqS5BeIaWBYgNj 08tA6lzJR7H3za4Yw2hLMJyz8kcfo9KoUuNqaOY8ca0a8pfTrX4i5Viwc7CM3H0R 17buoeyXAYb96DJ694cLDbkZ016VBuMWD2QxLIw3SX8/SawwsxQEB89q0yAyMmnB fvzES4Y00RTs/uvgmJmFO/PrXf0GaIavfjqDB12iZKkC4P2fvqH2x/a2fKCWAMjW ozhNlGT4xCer7LtZ2mit9S19nXjYx2+X -----END CERTIFICATE-----Generated at Fri Sep 19 12:58:19 2025 by rpki-client