$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: tU0tYjW4Ps6OD2UTzYGNB9vCUeESd1gbwKvxHhOvIgI= Subject key identifier: ED:A6:4C:D1:B0:3C:B5:B2:7B:99:D9:A9:2D:ED:95:EE:63:0E:39:57 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 058F Signing time: Fri 08 Aug 2025 23:41:23 +0000 Manifest this update: Fri 08 Aug 2025 23:41:23 +0000 Manifest next update: Fri 15 Aug 2025 23:41:23 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: SnYgwNfkqqrqn4r3zTmlAHlYbItqLc78cy3nZ97c8MQ=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Aug 8 23:41:23 2025 GMT Not After : Aug 15 23:41:23 2025 GMT Subject: CN=68968b23-340b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:eb:e6:bc:06:e7:49:da:71:ba:e2:04:ef: 01:f3:e3:40:4c:95:10:3b:70:ec:c0:40:64:6e:56: b8:cd:69:7d:ae:5e:b6:db:07:f8:24:8e:6b:93:de: 99:1d:11:3e:b1:37:7a:05:a6:79:34:55:2f:cb:b5: 5c:ba:e3:6c:38:a4:6f:fc:84:29:5f:51:e9:b1:2b: 30:af:0e:37:9e:13:4e:6a:52:f4:8f:c9:57:78:0f: df:e9:d3:e1:f6:a9:20:be:00:65:bf:e1:e5:6e:55: 11:d9:59:88:75:b9:b6:e8:82:90:3c:d8:66:a4:e1: 16:a9:da:58:34:77:16:72:73:b3:b5:c7:bf:66:27: 51:4f:89:3a:99:98:8e:21:68:7a:fd:b8:9f:ce:9f: 6d:17:0d:3c:77:e9:59:fb:4f:4a:44:77:ca:7c:c2: 61:ea:5c:f2:74:01:bf:5c:39:c5:90:67:45:64:94: 54:09:62:5c:97:24:77:21:86:6f:4b:3d:44:a9:17: 2e:8c:6c:f2:32:26:d9:0b:11:1c:b7:8b:43:03:7f: 1d:4f:fc:31:7f:e1:7c:da:47:3c:fe:36:40:03:e5: e7:7e:db:56:c1:10:19:ad:0f:91:77:64:9c:4c:9c: be:9c:4e:7e:f5:2c:0a:e3:de:c2:28:e8:49:5a:c4: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A6:4C:D1:B0:3C:B5:B2:7B:99:D9:A9:2D:ED:95:EE:63:0E:39:57 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:73:e3:4c:5a:a2:39:6f:41:b7:ff:bd:ee:c6:53:dd:b2:42: a2:cc:15:9b:c2:63:e5:82:e2:12:91:2c:5f:e8:27:ce:28:aa: 9f:8b:cb:39:cd:28:d7:57:f1:1b:3e:c6:4f:d9:a3:a2:ad:b1: 6a:03:d4:63:ff:96:00:ec:c7:85:21:1f:62:e3:c5:34:cc:a9: b6:ef:be:ba:25:5d:f3:6a:fe:6c:4b:3d:9b:52:fe:16:54:c0: b3:fc:83:51:3e:a5:3c:b3:24:83:83:02:66:4e:1f:95:a4:eb: 98:b7:35:4a:fc:84:b9:07:10:84:fe:99:cb:66:2b:bb:d1:e4: 98:6e:b2:e5:e7:b4:04:a6:d9:8b:5f:47:73:9e:ca:a0:68:9c: 01:fd:4a:f5:84:a0:b1:3b:9d:4c:b0:f8:0a:86:87:c1:1a:76: 6c:58:77:15:65:af:ea:41:f7:cb:83:29:f4:c5:4c:19:47:14: fe:65:18:22:8f:7d:18:19:6c:ec:c2:fe:9f:d2:78:84:da:e0: 42:b0:e4:a5:06:bf:1b:87:b1:91:b4:8d:da:5d:71:2f:93:3a: a0:9d:bf:3b:67:7e:8a:a8:8f:59:92:bc:78:63:ce:50:4f:7c: 3f:a6:db:d8:4a:ee:1e:0e:dd:01:de:7d:81:80:ff:c9:cf:1c: a9:f5:f8:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwODA4MjM0MTIzWhcNMjUwODE1MjM0MTIzWjAYMRYwFAYD VQQDEw02ODk2OGIyMy0zNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhDr5rwG50nacbriBO8B8+NATJUQO3DswEBkbla4zWl9rl622wf4JI5rk96Z HRE+sTd6BaZ5NFUvy7VcuuNsOKRv/IQpX1HpsSswrw43nhNOalL0j8lXeA/f6dPh 9qkgvgBlv+HlblUR2VmIdbm26IKQPNhmpOEWqdpYNHcWcnOztce/ZidRT4k6mZiO IWh6/bifzp9tFw08d+lZ+09KRHfKfMJh6lzydAG/XDnFkGdFZJRUCWJclyR3IYZv Sz1EqRcujGzyMibZCxEct4tDA38dT/wxf+F82kc8/jZAA+XnfttWwRAZrQ+Rd2Sc TJy+nE5+9SwK497CKOhJWsQJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2mTNGw PLWye5nZqS3tle5jDjlXMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRc+NMWqI5b0G3/73uxlPdskKizBWbwmPlguISkSxf6CfOKKqfi8s5 zSjXV/EbPsZP2aOirbFqA9Rj/5YA7MeFIR9i48U0zKm27766JV3zav5sSz2bUv4W VMCz/INRPqU8sySDgwJmTh+VpOuYtzVK/IS5BxCE/pnLZiu70eSYbrLl57QEptmL X0dznsqgaJwB/Ur1hKCxO51MsPgKhofBGnZsWHcVZa/qQffLgyn0xUwZRxT+ZRgi j30YGWzswv6f0niE2uBCsOSlBr8bh7GRtI3aXXEvkzqgnb87Z36KqI9Zkrx4Y85Q T3w/ptvYSu4eDt0B3n2BgP/Jzxyp9fj6 -----END CERTIFICATE-----Generated at Sun Aug 10 18:25:20 2025 by rpki-client