$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: DOjTBSjYYNnGIUB13SxizWo2pRkQAtrJxlusrXXySVk= Subject key identifier: 65:1D:FB:71:0E:01:6D:9F:C1:7C:3E:13:FA:D7:5D:3C:64:38:8A:A2 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 13C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 139D Signing time: Tue 04 Nov 2025 15:00:51 +0000 Manifest this update: Tue 04 Nov 2025 15:00:50 +0000 Manifest next update: Tue 11 Nov 2025 15:00:50 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: 81EOGftAzzTXAY5C2ORf8fSswf6qhVX2LBcFdAS7jDU=) 2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=) 3: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 7: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) 9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Nov 4 15:00:50 2025 GMT Not After : Nov 11 15:00:50 2025 GMT Subject: CN=690a1522-89c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:12:c4:6a:d5:45:90:80:75:25:f2:c2:ad: 23:5c:87:57:e2:a9:fd:2e:4e:60:14:23:63:ea:44: 04:a3:a9:fe:19:0c:64:4e:40:68:29:e7:88:34:70: 6d:aa:47:32:b4:ab:b5:e3:78:97:f5:8c:85:b7:77: 07:d3:d6:83:46:3e:3f:fc:ce:0a:b8:43:6a:0f:35: 09:4a:1b:df:df:22:47:66:b0:9b:ee:a3:1b:f8:b4: 62:f6:c0:91:d8:b9:3e:8e:4c:31:52:4d:52:d8:b1: 4e:d3:e8:9b:e1:f8:ce:63:23:5b:19:e2:48:bf:73: 1c:6e:a3:9f:fe:10:b0:a6:c4:3f:1e:3c:10:f1:9c: b6:09:b3:9c:e6:10:4a:eb:51:e6:82:6b:51:e6:9d: fd:b9:6e:00:8b:fd:c7:6d:24:b8:dc:75:4c:11:39: 29:a9:27:03:f1:1b:ba:dc:35:be:ef:cb:f9:be:41: 6f:c2:e6:d8:dd:76:2e:1c:11:6a:b9:b8:fb:2c:57: b8:a5:47:ac:32:ff:ad:76:af:ff:91:75:88:20:3f: 6a:10:c8:79:cd:1b:62:f4:cb:1d:71:08:d9:6d:db: fb:36:b1:58:25:15:ba:97:d1:23:95:81:3c:f9:a6: 9b:ff:f3:68:60:81:ad:2b:50:c5:36:ba:66:46:88: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1D:FB:71:0E:01:6D:9F:C1:7C:3E:13:FA:D7:5D:3C:64:38:8A:A2 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:46:8e:04:b4:9f:2a:9a:12:4d:b0:51:e8:8f:41:3a:4e:f1: c0:ba:4f:9a:40:2a:ef:29:10:e7:3b:1e:5b:f3:26:8d:06:4a: 1b:17:8b:30:1c:92:53:de:cd:0d:e8:48:1e:8e:fd:a0:bd:3a: 97:60:58:d9:5b:93:97:c1:51:f6:ed:e6:a1:23:c8:ba:df:46: 61:f6:b5:cc:8e:87:31:aa:26:de:2f:20:ed:b3:6d:55:73:51: c0:c0:5a:3d:60:7e:1a:bf:ea:40:61:dd:56:73:01:72:39:b6: a5:8b:d3:f2:c3:2e:7e:d5:1e:2e:6f:ce:d7:b9:2b:61:a9:8a: e2:f4:0e:e1:0c:83:0e:a9:c1:9b:f7:59:0d:22:3c:c8:f4:8b: f7:d7:07:f0:02:5d:4f:08:ba:2e:9b:ac:a3:50:ca:57:3e:78: 7a:6e:80:2b:26:76:45:c9:b1:22:5a:78:a2:28:38:05:bd:e0: c2:f1:55:e9:cf:3e:49:e5:4d:82:65:b6:3a:39:35:cc:55:0a: f5:d6:44:e0:a2:47:4a:ab:36:04:8a:37:40:81:2a:72:7a:6f: 25:12:9c:a4:d9:d4:bb:8a:40:31:9e:fb:1c:bf:d7:cf:6e:b9: 73:e4:f0:33:b1:f7:f8:00:76:19:5c:86:1f:c9:0f:88:c7:b6: 3c:7d:cb:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUxMTA0MTUwMDUwWhcNMjUxMTExMTUwMDUwWjAYMRYwFAYD VQQDEw02OTBhMTUyMi04OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvQSxGrVRZCAdSXywq0jXIdX4qn9Lk5gFCNj6kQEo6n+GQxkTkBoKeeINHBt qkcytKu143iX9YyFt3cH09aDRj4//M4KuENqDzUJShvf3yJHZrCb7qMb+LRi9sCR 2Lk+jkwxUk1S2LFO0+ib4fjOYyNbGeJIv3McbqOf/hCwpsQ/HjwQ8Zy2CbOc5hBK 61HmgmtR5p39uW4Ai/3HbSS43HVMETkpqScD8Ru63DW+78v5vkFvwubY3XYuHBFq ubj7LFe4pUesMv+tdq//kXWIID9qEMh5zRti9MsdcQjZbdv7NrFYJRW6l9EjlYE8 +aab//NoYIGtK1DFNrpmRoi6TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUd+3EO AW2fwXw+E/rXXTxkOIqiMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGRo4EtJ8qmhJNsFHoj0E6TvHAuk+aQCrvKRDnOx5b8yaNBkobF4sw HJJT3s0N6Egejv2gvTqXYFjZW5OXwVH27eahI8i630Zh9rXMjocxqibeLyDts21V c1HAwFo9YH4av+pAYd1WcwFyObali9Pywy5+1R4ub87XuSthqYri9A7hDIMOqcGb 91kNIjzI9Iv31wfwAl1PCLoum6yjUMpXPnh6boArJnZFybEiWniiKDgFveDC8VXp zz5J5U2CZbY6OTXMVQr11kTgokdKqzYEijdAgSpyem8lEpyk2dS7ikAxnvscv9fP brlz5PAzsff4AHYZXIYfyQ+Ix7Y8fcsO -----END CERTIFICATE-----Generated at Wed Nov 5 04:46:46 2025 by rpki-client