$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: fsmc0gNH9jZ0kU0qj2SMq4RaCeFwneCNAaWSOcY3sVw= Subject key identifier: 42:D0:E9:3E:92:B3:82:0A:20:73:CD:A8:F3:94:96:FC:B8:6D:4C:5B Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: F1 Signing time: Mon 03 Nov 2025 05:25:45 +0000 Manifest this update: Mon 03 Nov 2025 05:25:44 +0000 Manifest next update: Mon 10 Nov 2025 05:25:44 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: 9d17+KlnIiFPXHPOcjONTP/oI9JCqbe5u+j9JQjfmWk=) 2: 5DC91E6E6E4611F09D8F426CC4F9AE02.roa (hash: y8hgCCBPI84qrp5W1tiqF8+NbZgro3HnrgturfTW64A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Nov 3 05:25:44 2025 GMT Not After : Nov 10 05:25:44 2025 GMT Subject: CN=69083cd9-464d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:da:a3:13:8b:20:ae:43:2a:fa:6a:81:a6:58: e3:2e:36:a5:89:3c:4c:aa:3e:57:d4:32:96:a9:46: dc:00:b8:a5:c7:5a:5d:a0:2f:7e:c4:b9:c2:09:84: 89:36:1e:6b:7c:9f:35:ab:ee:ed:77:3e:bc:c5:44: 8f:0c:c6:f4:89:bc:0e:64:1d:95:b6:f4:c6:c3:13: ad:be:6c:24:ea:35:a7:bf:b8:02:fe:d1:4f:f7:5d: 40:4e:ad:d6:1c:6c:79:97:71:c0:a6:3b:14:36:60: 1a:6a:23:6c:82:87:fe:d4:f4:00:e7:f9:51:2c:ed: 1f:9d:94:3d:46:b1:11:db:70:bd:a0:d9:98:5d:0e: da:5b:db:0a:1d:30:7f:7a:13:f0:77:c8:f0:4f:14: 33:fc:0d:d4:5f:cc:fa:9b:3c:e8:be:f8:88:6c:7e: ce:0c:4f:b0:fd:b6:a5:75:ad:7e:eb:34:f2:3c:2f: 9f:11:5a:8a:be:94:ed:89:35:17:92:86:5c:15:e5: 83:0b:d5:35:30:e7:d6:03:23:6e:82:6b:d4:d9:ad: 5a:9a:a2:d0:dd:95:44:91:3d:15:08:31:82:90:ec: 6c:e6:3e:9f:e6:d1:8b:0b:f2:e8:45:b4:e9:df:ad: 09:f6:ff:f3:e8:b5:9c:ac:dd:d0:a7:a7:22:c9:73: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D0:E9:3E:92:B3:82:0A:20:73:CD:A8:F3:94:96:FC:B8:6D:4C:5B X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ce:dc:39:57:d9:b5:3b:ec:4d:32:7b:6b:fe:ae:22:c4:d5: 32:03:39:82:8e:76:26:d0:0c:fe:e9:ae:9a:ec:00:d7:81:b2: f0:81:dd:d0:9c:00:69:59:b9:20:d1:2c:3d:f6:e5:0a:b9:fa: 3b:0d:37:6a:b7:f2:cf:71:01:95:cc:ff:9c:ba:95:cf:60:70: 2e:ad:49:ea:49:47:1e:9f:a3:bc:1e:55:01:6f:b8:48:f2:fb: c9:1b:62:32:a8:e9:7e:2e:6e:df:dc:39:b4:6f:52:09:76:e2: fa:f9:f0:bd:67:0f:d4:ae:13:dc:95:ca:5e:bf:e1:d0:67:68: ed:8c:2d:0f:b0:1a:63:68:cd:97:28:85:6b:9c:aa:40:0e:5b: d4:c6:d7:68:52:05:c7:d7:30:c8:6a:32:65:48:e4:41:08:52: c2:34:dd:8f:57:4d:a4:1c:04:f3:01:80:a0:a8:f8:8b:75:5d: 7f:6e:36:d2:94:8a:b6:4c:1c:76:44:f7:54:2c:a1:c1:ff:e8: 5c:e5:3b:c8:09:93:8d:d8:08:9e:4c:21:d0:ca:fa:47:26:f2: 6d:c1:5f:d1:c6:42:ae:da:44:26:2e:23:5b:61:20:2d:f0:e2: e6:59:36:4c:37:a9:0d:bd:10:f3:7b:e0:88:df:da:4f:84:80: 0c:72:f2:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUxMTAzMDUyNTQ0WhcNMjUxMTEwMDUyNTQ0WjAYMRYwFAYD VQQDEw02OTA4M2NkOS00NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA89qjE4sgrkMq+mqBpljjLjaliTxMqj5X1DKWqUbcALilx1pdoC9+xLnCCYSJ Nh5rfJ81q+7tdz68xUSPDMb0ibwOZB2VtvTGwxOtvmwk6jWnv7gC/tFP911ATq3W HGx5l3HApjsUNmAaaiNsgof+1PQA5/lRLO0fnZQ9RrER23C9oNmYXQ7aW9sKHTB/ ehPwd8jwTxQz/A3UX8z6mzzovviIbH7ODE+w/balda1+6zTyPC+fEVqKvpTtiTUX koZcFeWDC9U1MOfWAyNugmvU2a1amqLQ3ZVEkT0VCDGCkOxs5j6f5tGLC/LoRbTp 360J9v/z6LWcrN3Qp6ciyXPeNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELQ6T6S s4IKIHPNqPOUlvy4bUxbMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1ztw5V9m1O+xNMntr/q4ixNUyAzmCjnYm0Az+6a6a7ADXgbLwgd3Q nABpWbkg0Sw99uUKufo7DTdqt/LPcQGVzP+cupXPYHAurUnqSUcen6O8HlUBb7hI 8vvJG2IyqOl+Lm7f3Dm0b1IJduL6+fC9Zw/UrhPclcpev+HQZ2jtjC0PsBpjaM2X KIVrnKpADlvUxtdoUgXH1zDIajJlSORBCFLCNN2PV02kHATzAYCgqPiLdV1/bjbS lIq2TBx2RPdULKHB/+hc5TvICZON2AieTCHQyvpHJvJtwV/RxkKu2kQmLiNbYSAt 8OLmWTZMN6kNvRDze+CI39pPhIAMcvJE -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:06 2025 by rpki-client