$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: r6BzfPi0AuuBfwV/KMNJOSbp8FLRIel7FPfr+9skxok= Subject key identifier: 25:40:3D:8C:E1:22:83:B3:00:6D:DB:DF:71:E9:88:8C:79:56:67:8F Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 059B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 0596 Signing time: Fri 22 Aug 2025 23:24:23 +0000 Manifest this update: Fri 22 Aug 2025 23:24:23 +0000 Manifest next update: Fri 29 Aug 2025 23:24:23 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: 5S3NtiV5J0U+i49KeiJWC4T9JCJKGc05f2UjxofdS/4=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:24:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1435 (0x59b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Aug 22 23:24:23 2025 GMT Not After : Aug 29 23:24:23 2025 GMT Subject: CN=68a8fc27-2fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:b7:d4:36:11:6d:3f:cb:e0:b7:e9:ba:ee: 0b:0c:bd:fd:e5:03:1c:3b:3e:c8:41:94:ab:f9:e7: a9:30:a7:7f:fc:e5:83:c3:06:bf:86:c6:12:fc:93: ff:5d:c0:3b:79:12:8d:25:02:5d:4f:9d:20:bf:2b: 81:42:24:5d:12:f2:28:20:4d:2c:6b:fe:e0:b3:ec: f3:64:b0:4e:fd:35:43:a7:87:f6:e6:81:c6:da:cb: a7:99:eb:a3:00:5c:12:15:ef:20:2d:c9:31:9c:3a: 1d:c2:65:d7:85:b2:1a:73:58:77:2b:d6:87:27:4a: 10:f5:8a:76:94:bb:bf:1f:25:0b:a3:85:ab:82:56: 5a:53:31:f3:ed:43:97:e0:fe:1b:08:9c:b6:b1:fa: 20:55:1b:05:b1:89:cd:17:a4:07:24:e4:f6:c1:3f: 6d:0e:3a:78:a8:f3:94:a2:86:d8:0d:33:b1:2e:59: b9:59:39:88:01:f0:7a:cc:45:46:1b:ce:61:8a:d9: 9f:a9:26:9c:b3:91:4b:4a:07:d3:6f:70:e5:53:a1: be:b4:83:6a:40:b2:a1:f9:4b:4a:59:0e:7d:2d:9d: 24:a7:33:49:36:a2:ab:ff:00:51:92:38:3e:70:1b: d3:b5:77:32:4a:a0:14:4a:e1:b0:eb:62:8f:b2:0f: 72:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:40:3D:8C:E1:22:83:B3:00:6D:DB:DF:71:E9:88:8C:79:56:67:8F X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:da:66:df:d3:9c:d0:86:2d:b0:9e:f7:2c:46:31:ed:6f:43: 8b:02:5a:77:4d:05:27:f6:c2:07:8e:bb:4d:39:b1:86:81:4e: bb:70:88:d2:4f:e3:e2:cb:54:13:f8:14:01:93:2f:04:75:0c: 3b:69:bb:70:eb:66:7b:d4:bb:89:7e:60:70:67:fd:9b:92:aa: a7:b4:e4:c7:13:be:f7:8e:5b:81:a8:98:42:e9:44:3c:93:3e: 28:a3:e5:41:34:56:e5:85:bf:45:b0:26:c2:7f:32:2b:cb:52: 59:2b:56:e3:cc:4f:c6:36:54:0f:ca:b6:29:13:68:ee:a9:4a: 25:4d:5d:e5:fd:00:68:92:65:d6:13:9c:f8:e5:6f:57:dd:0e: 7e:38:fc:ff:1d:bf:2f:d6:3d:e0:4b:27:17:03:09:39:ea:18: 6d:6d:8f:b5:cb:32:ce:20:06:42:50:c9:f7:ab:46:86:72:2a: ac:23:5a:f1:fd:bc:68:7d:f7:72:37:9d:86:f8:b6:8b:bb:84: c0:e9:b3:e6:5b:00:34:a3:c2:dc:c7:76:61:92:8d:04:54:a2: 29:a1:80:e9:75:d5:1c:84:15:41:ce:1a:a7:e4:32:65:b2:f5: e1:97:25:d5:59:c0:e7:3c:89:b7:c8:4a:d3:b6:34:d2:9c:9c: 52:37:2c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwODIyMjMyNDIzWhcNMjUwODI5MjMyNDIzWjAYMRYwFAYD VQQDEw02OGE4ZmMyNy0yZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVy31DYRbT/L4Lfpuu4LDL395QMcOz7IQZSr+eepMKd//OWDwwa/hsYS/JP/ XcA7eRKNJQJdT50gvyuBQiRdEvIoIE0sa/7gs+zzZLBO/TVDp4f25oHG2sunmeuj AFwSFe8gLckxnDodwmXXhbIac1h3K9aHJ0oQ9Yp2lLu/HyULo4WrglZaUzHz7UOX 4P4bCJy2sfogVRsFsYnNF6QHJOT2wT9tDjp4qPOUoobYDTOxLlm5WTmIAfB6zEVG G85hitmfqSacs5FLSgfTb3DlU6G+tINqQLKh+UtKWQ59LZ0kpzNJNqKr/wBRkjg+ cBvTtXcySqAUSuGw62KPsg9ymwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVAPYzh IoOzAG3b33HpiIx5VmePMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp2mbf05zQhi2wnvcsRjHtb0OLAlp3TQUn9sIHjrtNObGGgU67cIjS T+Piy1QT+BQBky8EdQw7abtw62Z71LuJfmBwZ/2bkqqntOTHE773jluBqJhC6UQ8 kz4oo+VBNFblhb9FsCbCfzIry1JZK1bjzE/GNlQPyrYpE2juqUolTV3l/QBokmXW E5z45W9X3Q5+OPz/Hb8v1j3gSycXAwk56hhtbY+1yzLOIAZCUMn3q0aGciqsI1rx /bxoffdyN52G+LaLu4TA6bPmWwA0o8Lcx3Zhko0EVKIpoYDpddUchBVBzhqn5DJl svXhlyXVWcDnPIm3yErTtjTSnJxSNyyM -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:07 2025 by rpki-client