$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft File: WaZHKO4B1q40_newHohZyCCX5X8.mft (raw, json) Hash identifier: oW70b8ril0SKao/NiitcJ3gk3Prwcy30a+I6xNc7jSY= Subject key identifier: 4B:B4:3B:E6:86:DF:53:7B:D6:C5:0F:8F:44:3C:26:E4:7B:C4:35:99 Authority key identifier: 59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F Certificate issuer: /CN=A91BF27F/serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Certificate serial: 214C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft Manifest number: 2131 Signing time: Thu 24 Apr 2025 15:56:49 +0000 Manifest this update: Thu 24 Apr 2025 15:56:48 +0000 Manifest next update: Thu 01 May 2025 15:56:48 +0000 Files and hashes: 1: WaZHKO4B1q40_newHohZyCCX5X8.crl (hash: iXnJC1qJj8Yt6bjje/uYxWsYBfDQ8AdcHmDVnI0DDtI=) 2: 9B1ABC54486111E8AA9B1B45C4F9AE02.roa (hash: Ms90FxESevmJJSUHqdATBiDii797QEYyZU7sr0gTu+4=) 3: 431D19069E8211EAAD86AC51C4F9AE02.roa (hash: Y1Cpa5UdPfcspNdJq+tFu9S//D6d+al37ZNPf+vz/uQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8524 (0x214c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF27F, serialNumber=59A64728EE01D6AE34FE77B01E8859C82097E57F Validity Not Before: Apr 24 15:56:48 2025 GMT Not After : May 1 15:56:48 2025 GMT Subject: CN=680a5f41-01b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:50:bb:ad:e0:6d:6c:ef:77:a3:ca:62:15: ac:7a:3d:59:29:52:d4:39:6d:68:33:79:82:51:69: 37:69:d9:e3:07:e1:b8:30:91:e6:3d:6f:98:bb:f4: 2d:78:04:f2:2e:9e:1d:cf:06:6d:db:0c:81:5b:1c: 89:db:b4:2f:48:fa:54:9f:ca:9a:7a:3d:a0:ab:db: 62:c0:a9:a6:13:18:ed:86:7c:25:19:af:81:fe:d5: b7:08:91:10:45:13:1a:b0:8e:a2:94:d0:e2:f7:64: 90:bd:96:5f:65:77:24:c1:fe:6d:cb:ab:15:c7:93: b3:4e:16:88:5b:94:ac:14:5d:94:d4:a4:88:12:d5: e8:2f:64:71:b1:51:c1:91:c6:3f:77:d1:19:4a:8e: 4d:5b:ba:ef:ae:5b:fa:80:97:bb:ec:12:3a:d3:d1: 22:25:48:1c:42:a7:1b:3b:d9:db:0c:9a:c7:d4:57: 93:03:30:a5:40:af:2a:1b:96:8a:3f:aa:fa:15:a9: a2:5d:ac:c5:7d:1b:d2:3f:60:0a:e8:b1:14:c2:b9: aa:44:50:dd:db:2c:22:6c:a8:6a:a6:b1:f2:df:74: 13:d4:f7:16:74:f8:22:c2:2e:d5:e0:75:47:3a:83: c9:85:13:94:0a:9c:86:29:df:76:1f:23:54:6f:74: df:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:3B:E6:86:DF:53:7B:D6:C5:0F:8F:44:3C:26:E4:7B:C4:35:99 X509v3 Authority Key Identifier: keyid:59:A6:47:28:EE:01:D6:AE:34:FE:77:B0:1E:88:59:C8:20:97:E5:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WaZHKO4B1q40_newHohZyCCX5X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF27F/9C3256A2E98F11E5B2ADC567C4F9AE02/WaZHKO4B1q40_newHohZyCCX5X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:f2:d3:f0:db:77:f8:ed:2b:4d:56:78:86:25:6c:e5:9e:10: 49:81:64:b7:4c:69:29:7b:6a:ec:8c:4e:14:52:b3:3e:a4:d0: d4:b5:31:54:19:cd:42:73:b6:c0:95:04:07:57:4b:44:a4:d0: e2:a4:cb:e2:9c:ab:3d:53:7b:29:4c:10:6a:6e:be:68:c6:ac: 17:29:6f:b5:00:85:a4:63:8f:19:6b:6d:43:d6:25:19:52:1a: a0:93:0d:9f:82:06:08:58:39:03:8b:b7:c9:39:6b:fe:52:6c: 6b:d3:8a:24:0a:6c:23:99:92:a7:92:4e:46:27:1e:cb:45:fe: 9b:44:ee:20:bf:7c:b8:4d:c3:c7:2e:af:98:d7:26:fd:be:84: 47:14:28:1e:60:40:c6:4d:8e:7e:49:e8:55:15:36:03:2c:08: 5a:b6:d9:c4:97:dc:da:91:6a:4c:a0:61:94:cf:3c:13:db:1f: 17:46:d9:33:25:1a:2a:55:38:70:2e:1f:5c:30:05:c7:5c:0d: bd:15:ea:38:e2:58:b2:3e:48:bd:1e:e0:b8:97:85:a0:3c:9d: a2:fd:f7:79:22:46:d8:f3:e6:e6:68:73:5d:dd:51:f9:09:f0: 9c:ea:d1:5b:94:75:95:ae:97:8e:85:e9:39:75:70:f8:74:5c: b6:53:d9:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyN0YxMTAvBgNVBAUTKDU5QTY0NzI4RUUwMUQ2QUUzNEZFNzdCMDFFODg1OUM4 MjA5N0U1N0YwHhcNMjUwNDI0MTU1NjQ4WhcNMjUwNTAxMTU1NjQ4WjAYMRYwFAYD VQQDEw02ODBhNWY0MS0wMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjhQu63gbWzvd6PKYhWsej1ZKVLUOW1oM3mCUWk3adnjB+G4MJHmPW+Yu/Qt eATyLp4dzwZt2wyBWxyJ27QvSPpUn8qaej2gq9tiwKmmExjthnwlGa+B/tW3CJEQ RRMasI6ilNDi92SQvZZfZXckwf5ty6sVx5OzThaIW5SsFF2U1KSIEtXoL2RxsVHB kcY/d9EZSo5NW7rvrlv6gJe77BI609EiJUgcQqcbO9nbDJrH1FeTAzClQK8qG5aK P6r6FamiXazFfRvSP2AK6LEUwrmqRFDd2ywibKhqprHy33QT1PcWdPgiwi7V4HVH OoPJhROUCpyGKd92HyNUb3TfrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEu0O+aG 31N71sUPj0Q8JuR7xDWZMB8GA1UdIwQYMBaAFFmmRyjuAdauNP53sB6IWcggl+V/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjI3Ri85QzMyNTZBMkU5 OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFxNDBfbmV3SG9oWnlDQ1g1 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dhWkhLTzRCMXE0MF9uZXdIb2haeUNDWDVYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjI3Ri85QzMyNTZBMkU5OEYxMUU1QjJBREM1NjdDNEY5QUUwMi9XYVpIS080QjFx NDBfbmV3SG9oWnlDQ1g1WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA48tPw23f47StNVniGJWzlnhBJgWS3TGkpe2rsjE4UUrM+pNDUtTFU Gc1Cc7bAlQQHV0tEpNDipMvinKs9U3spTBBqbr5oxqwXKW+1AIWkY48Za21D1iUZ Uhqgkw2fggYIWDkDi7fJOWv+Umxr04okCmwjmZKnkk5GJx7LRf6bRO4gv3y4TcPH Lq+Y1yb9voRHFCgeYEDGTY5+SehVFTYDLAhattnEl9zakWpMoGGUzzwT2x8XRtkz JRoqVThwLh9cMAXHXA29Feo44liyPki9HuC4l4WgPJ2i/fd5IkbY8+bmaHNd3VH5 CfCc6tFblHWVrpeOhek5dXD4dFy2U9m7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:00 2025 by rpki-client