$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: VZvevlqh71tWI5NvrT686dDefaqW+PQXDvVnrcchxi4= Subject key identifier: D9:D9:AC:83:4E:5E:41:44:34:04:BD:49:70:B7:A8:03:34:03:23:33 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B3C Signing time: Sat 02 Aug 2025 19:34:01 +0000 Manifest this update: Sat 02 Aug 2025 19:34:00 +0000 Manifest next update: Sat 09 Aug 2025 19:34:00 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: KcFJa4c+q++SbXKOwil3ucW8bPbvChO14ayuQJtdS5Q=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: M5MFheEe6PxTWB7Wz5J5r55zoAQSHJDym66hYRrpkxA=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: DNzgYLTa4x8Yro4MUg5YZJaz6+PS7oRCf/le1/gHgMk=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: RlTMy4TJXhXKultUfVeXAOaXLFxv6x12ebX75GuXSzI=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: TPTNq9QHWPAeb6j5VL0idZl08rj3AisqQKQHhOnPNHc=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: HyYsRkYWrhLH7/eFiE9ZKiELMhyobWoxmzKJXnew4uE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: wLOrSqw7qLHdzdLMjtTkfhjjFQPjvligZ3Sh55JbmkA=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: bJICkOqPemUJF5TGuWsSKV7U9E+Ul0qCieaSTwZ43T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2936 (0xb78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Aug 2 19:34:00 2025 GMT Not After : Aug 9 19:34:00 2025 GMT Subject: CN=688e6828-5038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c9:72:7d:50:03:9d:d3:3f:d8:5e:21:35:c2: 74:16:43:1a:52:6c:cd:d7:4c:97:dc:02:5f:f3:c5: ad:69:ef:f6:66:ed:93:c0:86:c3:1e:74:a7:5c:a8: af:0c:d6:f4:95:8e:21:b0:91:fd:6e:bc:ab:79:54: 48:83:de:81:c2:e3:52:ab:c9:22:98:52:d2:0a:77: ea:49:74:42:3d:11:a6:02:71:d3:c7:14:8c:83:1a: 4d:3b:5f:a7:c0:ca:56:d8:93:66:84:cb:2b:ad:95: 6c:21:9d:0c:f3:9b:ff:e9:1c:b5:98:be:3c:8f:f0: 55:20:54:2a:0f:1b:16:52:c5:09:34:7f:ec:f6:96: 5f:d0:05:a2:0c:77:52:fc:3f:e9:b8:89:25:81:6b: b5:e1:42:3b:6c:8c:e1:d1:af:26:5f:91:da:2d:2a: f3:f0:b2:d1:a6:f7:88:74:e9:63:86:a4:08:ec:52: 24:a2:ab:85:2e:92:cf:bf:50:d2:39:c6:e0:db:c1: cc:af:5e:d3:a9:6e:02:72:a3:2d:51:1d:aa:e8:f4: 59:82:42:71:e1:d6:90:48:6a:81:ba:67:07:71:d1: 9b:2a:58:c7:71:80:27:93:ec:0c:3f:c8:d2:a8:5a: b8:23:b0:b2:58:1b:be:9a:a5:3b:0d:7a:79:4a:f3: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D9:AC:83:4E:5E:41:44:34:04:BD:49:70:B7:A8:03:34:03:23:33 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:eb:c3:bf:a2:28:6b:c4:98:41:ff:58:b2:b2:c9:4f:04:f4: c0:55:d3:ee:1a:a8:a4:ec:4c:08:16:5f:88:8d:5a:ef:83:1c: f8:24:ee:7c:98:a8:2f:1a:ee:26:c2:65:e4:76:32:1b:8b:a6: 87:54:1b:a4:2d:d2:e4:3f:1b:34:f3:27:df:33:f6:eb:10:e7: b7:d6:17:7d:f6:38:a8:0b:05:2e:6a:d7:be:94:a5:90:8b:82: dd:2a:49:71:9d:10:03:1c:1e:92:a9:d4:28:ca:dc:38:2c:42: 15:ee:da:6a:c1:9f:7d:44:14:c7:69:e3:1f:93:1f:3b:b3:28: 94:10:11:54:68:26:8c:14:34:b5:b0:e7:b1:b4:ad:db:18:a7: 97:b7:3b:6a:54:af:ce:0c:be:18:f3:21:2d:89:9c:da:a3:d4: b6:a7:70:bc:16:78:74:f1:2d:34:d5:63:d6:9d:7a:03:e3:af: 7b:cb:9b:1e:98:21:cf:b4:41:f1:88:c9:41:f2:6b:78:00:09: f4:3c:85:4d:32:d1:65:35:3f:8a:a8:1c:09:1e:bd:eb:5d:1b: 51:61:33:ba:75:a9:cf:71:9e:f1:aa:e8:82:63:15:b6:b3:cc: 6b:f2:2c:41:21:ab:ae:e5:68:ce:f5:e6:53:34:69:ac:7b:f0: 0e:1a:ed:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwODAyMTkzNDAwWhcNMjUwODA5MTkzNDAwWjAYMRYwFAYD VQQDEw02ODhlNjgyOC01MDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MlyfVADndM/2F4hNcJ0FkMaUmzN10yX3AJf88Wtae/2Zu2TwIbDHnSnXKiv DNb0lY4hsJH9bryreVRIg96BwuNSq8kimFLSCnfqSXRCPRGmAnHTxxSMgxpNO1+n wMpW2JNmhMsrrZVsIZ0M85v/6Ry1mL48j/BVIFQqDxsWUsUJNH/s9pZf0AWiDHdS /D/puIklgWu14UI7bIzh0a8mX5HaLSrz8LLRpveIdOljhqQI7FIkoquFLpLPv1DS Ocbg28HMr17TqW4CcqMtUR2q6PRZgkJx4daQSGqBumcHcdGbKljHcYAnk+wMP8jS qFq4I7CyWBu+mqU7DXp5SvN3cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnZrINO XkFENAS9SXC3qAM0AyMzMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf68O/oihrxJhB/1iysslPBPTAVdPuGqik7EwIFl+IjVrvgxz4JO58 mKgvGu4mwmXkdjIbi6aHVBukLdLkPxs08yffM/brEOe31hd99jioCwUuate+lKWQ i4LdKklxnRADHB6SqdQoytw4LEIV7tpqwZ99RBTHaeMfkx87syiUEBFUaCaMFDS1 sOextK3bGKeXtztqVK/ODL4Y8yEtiZzao9S2p3C8Fnh08S001WPWnXoD4697y5se mCHPtEHxiMlB8mt4AAn0PIVNMtFlNT+KqBwJHr3rXRtRYTO6danPcZ7xquiCYxW2 s8xr8ixBIauu5WjO9eZTNGmse/AOGu0P -----END CERTIFICATE-----Generated at Mon Aug 4 16:07:50 2025 by rpki-client