$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: 0aNxYWms91rFvfY3aW6CBCkzh3kDApfrRsT3I+QFx8s= Subject key identifier: B5:FF:91:0E:47:96:93:87:94:D6:9A:D3:8B:66:4E:90:7B:69:80:C3 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 0563 Signing time: Mon 12 May 2025 23:09:55 +0000 Manifest this update: Mon 12 May 2025 23:09:54 +0000 Manifest next update: Mon 19 May 2025 23:09:54 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: sQGYnGMtJDez/qPgMZjv6H3hedROC14x9WsSyZqchCE=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: May 12 23:09:54 2025 GMT Not After : May 19 23:09:54 2025 GMT Subject: CN=68227fc2-0c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:77:fd:9d:47:80:6b:03:80:c3:8c:57:9c: 58:89:45:89:b2:ce:1f:f3:a7:d7:47:1e:9f:a2:05: a5:4c:32:29:31:a4:34:fe:d8:99:17:8f:e4:6b:cc: 0d:39:ba:61:20:fe:93:10:20:6d:71:1a:a2:8a:de: 1f:86:4a:e2:1f:e6:8a:fb:6d:a7:2a:98:10:64:9f: 1d:be:9d:e5:f9:e3:96:d3:35:37:5c:ab:a6:15:f3: fb:48:56:91:94:15:88:97:4f:2b:71:08:ac:c4:4f: a3:62:73:7c:e7:e3:d1:6c:a9:69:ee:66:2e:f1:46: 29:ed:17:8e:db:2a:b8:fb:47:5f:a5:97:49:fa:4c: 0b:11:92:70:6a:39:c8:84:03:9d:1d:b9:68:41:b5: 70:d7:58:46:bd:a2:63:5d:8a:01:46:03:8f:e0:b1: 87:58:f4:e5:83:ae:e7:40:d2:cb:04:6e:d2:3f:aa: a5:e4:53:7a:65:ea:05:9c:fa:53:8d:9f:81:89:57: c9:0a:2d:01:b7:05:60:b0:a7:54:cd:12:d4:25:0c: 56:51:23:0f:66:86:01:46:5d:ca:4d:79:d2:93:25: 90:52:6f:60:ba:30:42:26:51:5d:94:b9:b7:e9:ec: 33:fa:48:f3:d9:ee:ec:ab:3e:0d:7f:10:e4:ee:52: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FF:91:0E:47:96:93:87:94:D6:9A:D3:8B:66:4E:90:7B:69:80:C3 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ea:35:a8:a1:7d:36:de:4d:22:13:8e:61:0f:6f:57:b1:26: 90:4b:a8:6f:3b:a4:74:7c:ff:c6:b4:a1:87:9e:5d:3a:5a:ec: 3b:07:c0:ee:a3:fc:a2:02:d7:e2:80:e5:78:55:df:af:87:a7: 9b:3c:4b:5f:40:cd:aa:a1:2f:fd:19:66:af:ab:ab:47:6b:8b: df:68:07:e0:de:9b:7b:17:70:c4:4f:f6:7f:af:fd:e7:d9:ee: e8:fe:e7:1c:42:41:31:42:45:2f:93:61:79:f6:6d:e3:2d:05: fe:78:15:bb:3e:f9:99:bb:db:c0:4c:0b:2a:ae:e1:85:48:52: 89:98:18:70:53:af:55:34:c4:d5:cb:9d:4c:07:3b:df:e3:6e: 04:28:3d:65:3d:70:ff:d6:0a:c9:67:69:93:4f:d8:ed:bd:e8: b2:60:fa:ae:91:2d:1d:a6:29:4c:c9:f0:74:5c:ab:db:fb:45: 28:fc:42:ab:67:63:e1:30:f1:ee:2f:38:77:9f:21:32:5f:07: 68:19:94:a3:83:bb:16:e1:c4:cb:b3:b3:81:76:3f:c1:35:5b: 11:d7:42:de:14:cc:42:ad:66:bf:6a:b8:b4:79:f1:03:ca:44: e7:c3:22:cf:6e:a3:f0:9b:07:14:f5:1c:cd:63:2e:e8:24:d7: 2d:b0:89:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwNTEyMjMwOTU0WhcNMjUwNTE5MjMwOTU0WjAYMRYwFAYD VQQDEw02ODIyN2ZjMi0wYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsa53/Z1HgGsDgMOMV5xYiUWJss4f86fXRx6fogWlTDIpMaQ0/tiZF4/ka8wN ObphIP6TECBtcRqiit4fhkriH+aK+22nKpgQZJ8dvp3l+eOW0zU3XKumFfP7SFaR lBWIl08rcQisxE+jYnN85+PRbKlp7mYu8UYp7ReO2yq4+0dfpZdJ+kwLEZJwajnI hAOdHbloQbVw11hGvaJjXYoBRgOP4LGHWPTlg67nQNLLBG7SP6ql5FN6ZeoFnPpT jZ+BiVfJCi0BtwVgsKdUzRLUJQxWUSMPZoYBRl3KTXnSkyWQUm9gujBCJlFdlLm3 6ewz+kjz2e7sqz4NfxDk7lL+VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLX/kQ5H lpOHlNaa04tmTpB7aYDDMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm6jWooX023k0iE45hD29XsSaQS6hvO6R0fP/GtKGHnl06Wuw7B8Du o/yiAtfigOV4Vd+vh6ebPEtfQM2qoS/9GWavq6tHa4vfaAfg3pt7F3DET/Z/r/3n 2e7o/uccQkExQkUvk2F59m3jLQX+eBW7PvmZu9vATAsqruGFSFKJmBhwU69VNMTV y51MBzvf424EKD1lPXD/1grJZ2mTT9jtveiyYPqukS0dpilMyfB0XKvb+0Uo/EKr Z2PhMPHuLzh3nyEyXwdoGZSjg7sW4cTLs7OBdj/BNVsR10LeFMxCrWa/ari0efED ykTnwyLPbqPwmwcU9RzNYy7oJNctsInc -----END CERTIFICATE-----Generated at Thu May 15 00:04:03 2025 by rpki-client