$ rpki-client -vvf rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft File: waLHH9itWCWJ8EkC3a-DmIXf0zc.mft (raw, json) Hash identifier: 75X92GS0Pk4BwUgweHJq92irlIJMWvv3ZGWQBwhTm1A= Subject key identifier: BE:F5:3A:3D:C5:C3:34:55:C3:A3:2C:A5:F9:81:6A:4B:51:FE:9E:C2 Authority key identifier: C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 Certificate issuer: /CN=A91A87AB/serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Certificate serial: 055F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft Manifest number: 055A Signing time: Thu 24 Apr 2025 23:11:24 +0000 Manifest this update: Thu 24 Apr 2025 23:11:23 +0000 Manifest next update: Thu 01 May 2025 23:11:23 +0000 Files and hashes: 1: waLHH9itWCWJ8EkC3a-DmIXf0zc.crl (hash: CtrCgRmqWWWjRWP1pQX7E6xSeZG2/70H5/3UGyi23AU=) 2: A5F75EF6E44F11EB8F902E86C4F9AE02.roa (hash: YPj6nSUJyVOM+G20GuBeDESuyg6nIZO73yJWHRIRq/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1375 (0x55f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A87AB, serialNumber=C1A2C71FD8AD582589F04902DDAF839885DFD337 Validity Not Before: Apr 24 23:11:23 2025 GMT Not After : May 1 23:11:23 2025 GMT Subject: CN=680ac51b-daf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:9f:44:aa:e6:de:d8:76:07:58:41:bc:52: bb:6e:d6:52:58:83:6c:80:a9:1b:dd:bd:ad:04:44: 9c:1f:ae:b5:0b:63:66:26:de:1a:af:a1:94:26:64: be:4c:30:33:24:ec:50:5a:2e:49:4e:c2:d9:4b:17: 41:62:47:ad:45:75:55:a5:e5:f4:a7:53:2a:79:9b: 49:05:85:cb:63:23:8a:89:65:3e:66:ab:fd:b1:80: 7b:fe:85:88:c0:ce:4c:8f:4b:49:17:2c:32:ff:be: fd:13:41:1d:1f:0b:d4:91:b0:4b:97:e6:88:91:ab: 1e:c5:67:f2:43:54:d2:0d:4d:04:d3:1d:5a:40:b1: aa:e7:05:28:73:d9:58:76:9a:45:56:d3:7c:92:5f: 85:79:f4:42:bb:d5:eb:92:c0:03:f2:dc:69:46:80: 4f:65:d7:aa:59:42:0d:49:da:af:3f:9c:41:5e:b1: 7e:2a:94:21:6a:11:55:9e:2e:23:cb:8f:b1:3c:2e: 45:b5:93:0a:a8:4c:30:5f:92:cd:48:1d:c1:bc:1a: 3e:d0:32:be:d8:57:89:ae:c8:a9:09:b5:9b:88:39: 47:21:bb:24:11:1d:6e:8a:30:56:46:65:d5:bf:c6: 84:a6:09:11:0e:e9:77:a1:b1:57:a2:b1:55:70:3b: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F5:3A:3D:C5:C3:34:55:C3:A3:2C:A5:F9:81:6A:4B:51:FE:9E:C2 X509v3 Authority Key Identifier: keyid:C1:A2:C7:1F:D8:AD:58:25:89:F0:49:02:DD:AF:83:98:85:DF:D3:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/waLHH9itWCWJ8EkC3a-DmIXf0zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A87AB/F096DCC4E44B11EBB2C81E80C4F9AE02/waLHH9itWCWJ8EkC3a-DmIXf0zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:23:d4:09:9b:12:43:6e:bb:ce:59:fe:03:3d:19:06:a4:68: 3e:10:80:35:75:db:56:a3:12:9d:a5:36:5c:d8:2b:43:c9:ce: 8c:37:bb:35:d1:e7:8a:82:b5:3c:22:6f:2c:df:89:f3:64:5d: bf:88:e8:2a:ea:94:92:9e:50:e3:54:11:32:23:26:49:eb:5d: f8:c0:9e:df:3e:a3:5a:ed:e7:93:83:15:ef:95:8d:00:3b:c9: 94:92:31:ca:a4:8e:86:26:70:97:1c:b0:45:18:08:16:4e:95: 76:0a:c9:b9:5c:69:88:34:a7:31:d3:94:51:39:ba:3c:51:8d: 47:56:cd:31:50:7d:ca:96:19:b1:77:48:e7:55:ae:3b:1a:38: 83:c3:6f:4a:6b:95:2f:b0:00:6a:ce:e8:88:be:92:c0:61:70: 9f:8e:e2:48:11:66:a6:f2:f9:b1:ca:5f:81:db:7f:94:b4:86: 2a:33:79:57:5f:9c:0e:73:d2:2b:a0:6f:12:cf:d6:74:d1:c2: 8d:49:09:0f:f6:5b:61:f8:b7:6d:24:65:f8:00:66:dc:9a:a2: a7:e2:81:5d:30:43:9b:b7:db:49:12:fd:79:d5:1f:e5:33:ee: 2c:f3:9c:66:4a:1b:f7:6d:f6:5b:fe:33:11:f7:07:89:af:32: 61:65:1e:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg3QUIxMTAvBgNVBAUTKEMxQTJDNzFGRDhBRDU4MjU4OUYwNDkwMkREQUY4Mzk4 ODVERkQzMzcwHhcNMjUwNDI0MjMxMTIzWhcNMjUwNTAxMjMxMTIzWjAYMRYwFAYD VQQDEw02ODBhYzUxYi1kYWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9+fRKrm3th2B1hBvFK7btZSWINsgKkb3b2tBEScH661C2NmJt4ar6GUJmS+ TDAzJOxQWi5JTsLZSxdBYketRXVVpeX0p1MqeZtJBYXLYyOKiWU+Zqv9sYB7/oWI wM5Mj0tJFywy/779E0EdHwvUkbBLl+aIkasexWfyQ1TSDU0E0x1aQLGq5wUoc9lY dppFVtN8kl+FefRCu9XrksAD8txpRoBPZdeqWUINSdqvP5xBXrF+KpQhahFVni4j y4+xPC5FtZMKqEwwX5LNSB3BvBo+0DK+2FeJrsipCbWbiDlHIbskER1uijBWRmXV v8aEpgkRDul3obFXorFVcDvv9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL71Oj3F wzRVw6MspfmBaktR/p7CMB8GA1UdIwQYMBaAFMGixx/YrVglifBJAt2vg5iF39M3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODdBQi9GMDk2RENDNEU0 NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdDV0o4RWtDM2EtRG1JWGYw emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dhTEhIOWl0V0NXSjhFa0MzYS1EbUlYZjB6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODdBQi9GMDk2RENDNEU0NEIxMUVCQjJDODFFODBDNEY5QUUwMi93YUxISDlpdFdD V0o4RWtDM2EtRG1JWGYwemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDII9QJmxJDbrvOWf4DPRkGpGg+EIA1ddtWoxKdpTZc2CtDyc6MN7s1 0eeKgrU8Im8s34nzZF2/iOgq6pSSnlDjVBEyIyZJ6134wJ7fPqNa7eeTgxXvlY0A O8mUkjHKpI6GJnCXHLBFGAgWTpV2Csm5XGmINKcx05RRObo8UY1HVs0xUH3Klhmx d0jnVa47GjiDw29Ka5UvsABqzuiIvpLAYXCfjuJIEWam8vmxyl+B23+UtIYqM3lX X5wOc9IroG8Sz9Z00cKNSQkP9lth+LdtJGX4AGbcmqKn4oFdMEObt9tJEv151R/l M+4s85xmShv3bfZb/jMR9weJrzJhZR7g -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:02 2025 by rpki-client