$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: +Bx67nSuD8UaIsP8X7CEcN+2kZXU0G3XAnw4MW18guY= Subject key identifier: CC:03:B8:3E:A1:34:A3:AB:E6:5D:C2:C6:28:7C:0D:56:69:2C:22:00 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B20 Signing time: Thu 12 Jun 2025 19:09:08 +0000 Manifest this update: Thu 12 Jun 2025 19:09:07 +0000 Manifest next update: Thu 19 Jun 2025 19:09:07 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: F310fSl8Nu50ignbVVy9oUVxC2F2x1L0DRTocIM4X7g=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: thphz9NCmSOYT7NGHErxiiKjTWp6caTDH+8orak5Xqc=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: iquZHjCE4/Qw/4vvKK8+uSPsTNr1m+HxauH9ZmtALJ4=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: dyBuRF0L4k6t4ChH+kLE8IpmRvwCrRtPJ3LxkBtN1Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2901 (0xb55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jun 12 19:09:07 2025 GMT Not After : Jun 19 19:09:07 2025 GMT Subject: CN=684b25d3-8ac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8d:24:71:22:f8:09:f8:30:53:2a:4a:dc:48: 69:c4:b6:b5:53:f1:3a:80:36:c7:b4:8f:cb:8d:59: 70:2a:b9:b8:c7:89:a3:af:9b:b6:75:78:75:79:e4: 6e:f0:12:da:e8:86:8d:22:45:aa:f6:ef:55:a3:7d: 25:c6:ea:9e:64:66:d3:e6:51:4e:96:21:12:b8:35: e1:f3:7a:1f:39:89:50:bd:10:ac:0e:c4:26:7b:69: d2:73:6e:5c:39:bd:b2:78:24:83:9a:38:d6:d1:e6: 10:e6:18:87:5a:b3:d5:ff:36:3b:d9:08:80:3e:3d: 01:da:88:e1:5d:07:28:5d:ad:ff:43:45:47:a0:c5: 0d:24:93:00:eb:42:a8:1b:66:7b:2f:85:51:0c:6a: ac:53:0b:9a:13:3c:bb:02:ae:de:b8:d8:51:d1:ff: fd:ea:d0:bd:17:24:3d:be:54:86:8f:54:9a:4a:e7: b8:26:07:a9:25:b7:91:d5:d4:8c:9a:8f:b0:7f:4b: d5:36:a9:4c:15:cb:fb:5a:7f:20:7c:ba:99:92:f7: 13:c2:30:aa:03:ae:22:17:4a:92:be:30:4c:c2:7c: 2c:bc:20:85:a0:e4:ba:23:bc:bf:87:9f:0d:d9:74: 90:db:a9:53:79:3b:a7:98:2d:6e:bd:69:fc:47:1f: 9f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:03:B8:3E:A1:34:A3:AB:E6:5D:C2:C6:28:7C:0D:56:69:2C:22:00 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8f:20:92:4b:49:ca:75:b2:a4:fe:f3:c0:3b:8b:a3:37:60: 0b:f3:67:14:1e:d8:6b:03:5a:fe:30:8d:4f:18:9b:c6:de:61: 75:1c:51:ad:09:15:38:a0:e7:ab:26:d1:b6:31:c5:e8:c9:dd: f7:8e:d5:a1:d6:51:02:28:51:d6:fe:a3:4a:3c:69:03:7a:b4: 62:42:1f:69:ef:c2:ee:99:08:7f:64:6e:b0:8b:87:09:bd:08: 5d:36:a3:70:d4:69:3d:02:42:2a:80:62:44:cf:57:90:96:05: 9c:63:54:bf:4a:5b:15:e8:0d:8a:93:9a:1c:87:14:97:b8:85: 3e:43:6f:35:f6:bf:5f:f3:f2:8b:53:7b:46:45:81:a1:32:71: 8c:b8:ce:8d:4e:5f:8a:9f:9a:d1:b3:ce:c0:80:0b:23:52:50: d5:ce:da:7c:1e:bf:ce:6d:fe:86:c8:34:ad:77:c4:b2:72:ef: 35:61:fe:76:97:79:ba:86:b4:a0:81:1a:4f:48:2d:7e:20:ba: 2d:23:b7:54:cf:55:6b:8b:11:f9:8a:b6:92:fa:35:2b:33:a7: f6:cc:3b:11:e4:21:c3:07:43:69:de:9b:df:b7:96:aa:8b:7d: f0:50:ee:62:ed:dd:52:5e:e8:5d:d1:31:f7:38:13:25:b5:38: 62:be:74:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNjEyMTkwOTA3WhcNMjUwNjE5MTkwOTA3WjAYMRYwFAYD VQQDEw02ODRiMjVkMy04YWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv40kcSL4CfgwUypK3EhpxLa1U/E6gDbHtI/LjVlwKrm4x4mjr5u2dXh1eeRu 8BLa6IaNIkWq9u9Vo30lxuqeZGbT5lFOliESuDXh83ofOYlQvRCsDsQme2nSc25c Ob2yeCSDmjjW0eYQ5hiHWrPV/zY72QiAPj0B2ojhXQcoXa3/Q0VHoMUNJJMA60Ko G2Z7L4VRDGqsUwuaEzy7Aq7euNhR0f/96tC9FyQ9vlSGj1SaSue4JgepJbeR1dSM mo+wf0vVNqlMFcv7Wn8gfLqZkvcTwjCqA64iF0qSvjBMwnwsvCCFoOS6I7y/h58N 2XSQ26lTeTunmC1uvWn8Rx+fNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwDuD6h NKOr5l3Cxih8DVZpLCIAMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3jyCSS0nKdbKk/vPAO4ujN2AL82cUHthrA1r+MI1PGJvG3mF1HFGt CRU4oOerJtG2McXoyd33jtWh1lECKFHW/qNKPGkDerRiQh9p78LumQh/ZG6wi4cJ vQhdNqNw1Gk9AkIqgGJEz1eQlgWcY1S/SlsV6A2Kk5ochxSXuIU+Q2819r9f8/KL U3tGRYGhMnGMuM6NTl+Kn5rRs87AgAsjUlDVztp8Hr/Obf6GyDStd8Sycu81Yf52 l3m6hrSggRpPSC1+ILotI7dUz1VrixH5iraS+jUrM6f2zDsR5CHDB0Np3pvft5aq i33wUO5i7d1SXuhd0TH3OBMltThivnSw -----END CERTIFICATE-----Generated at Sat Jun 14 18:44:32 2025 by rpki-client