$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: 0Rpv+FhcB1tpvy2BKJBvX1L0+d/eI1PnXZJ0O3JRWbE= Subject key identifier: 3D:48:69:AB:A0:9E:F3:56:D5:82:98:B4:74:08:62:EC:51:35:06:66 Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: A0 Signing time: Sun 15 Jun 2025 05:24:29 +0000 Manifest this update: Sun 15 Jun 2025 05:24:29 +0000 Manifest next update: Sun 22 Jun 2025 05:24:29 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: AE0P4A5QReRVQ/ceozNQmAkjML7Bda8blRaHLfvvgbs=) 2: 569067B25D5B11EF9EA49613C4F9AE02.roa (hash: Eb5PgB8qCSXbKshJheWAx+0IvpK6iLnUnQ56W+fCnec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Jun 15 05:24:29 2025 GMT Not After : Jun 22 05:24:29 2025 GMT Subject: CN=684e590d-b556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a9:31:d7:19:85:4c:9a:37:a2:0f:14:17:c8: 98:c6:8e:58:70:ab:11:0d:a1:d0:fc:bc:21:c7:06: e5:60:9e:36:a4:47:03:84:42:2e:83:df:7c:9d:88: 75:d6:c5:ac:66:c7:c8:d7:8b:73:63:71:65:68:f1: 08:4a:2a:fe:f9:fb:15:68:97:ea:d9:ec:0c:5c:6a: 53:82:30:fc:ff:ff:7b:a8:42:5e:ed:05:a5:0c:58: 74:88:f5:38:41:f8:f4:7e:22:cc:30:ce:a4:33:7f: a3:10:97:b6:e6:d1:b0:06:95:8b:f2:6e:23:66:7e: 88:f0:a8:c1:54:c1:c2:86:9c:aa:e4:b8:e3:ad:52: 71:7f:b9:97:c8:58:f1:88:78:75:e9:a5:2f:e9:2a: 6d:69:46:63:31:ca:07:59:10:08:f2:7a:ed:b5:04: b8:26:ac:44:11:75:c0:a0:57:cb:70:e1:ff:65:29: db:d1:a3:44:cb:e3:3c:21:e5:71:90:3c:a4:fc:1e: 84:db:97:03:ea:76:03:6e:7e:8d:17:15:85:b2:55: e6:b5:3d:5e:63:2a:59:ee:43:7d:fb:52:89:56:42: 47:f2:59:03:8e:15:28:16:96:e6:26:4a:e7:98:e9: 32:08:e7:37:c1:6d:21:87:83:36:44:07:bb:23:9b: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:48:69:AB:A0:9E:F3:56:D5:82:98:B4:74:08:62:EC:51:35:06:66 X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:52:8d:09:61:5c:9e:b9:cd:60:62:28:93:fb:e1:13:23:91: ee:0d:75:49:41:49:29:f3:c6:e4:5e:df:d6:fa:02:f3:18:89: 5e:9d:1d:26:77:ba:20:d0:65:a0:81:4c:cf:f3:a1:f4:ba:8d: e6:fb:8e:f6:c3:d4:54:ae:76:6f:57:bf:b4:c2:12:9f:8b:73: 5a:cf:d2:fb:f8:ad:5b:bc:8f:5f:2b:ab:e9:4e:8a:22:90:7b: 34:e1:c0:d7:bb:21:01:69:a1:63:f9:5f:84:98:33:45:d9:70: 08:1c:97:43:b7:a0:51:a5:d5:8f:6f:2f:51:ff:1e:c9:46:12: 7e:0f:8f:f5:a8:94:ff:a8:7b:3b:e2:f5:1b:0b:49:c4:f2:f6: 66:24:b6:48:1f:d3:27:0e:0b:83:51:b1:5a:43:5e:15:11:ae: b3:03:cf:b0:a0:25:40:36:0a:f6:48:68:f0:27:e0:f4:72:98: 8d:8a:78:be:18:99:11:44:15:fc:5c:2d:1f:bc:2f:6b:9c:e0: 8c:5a:51:11:65:09:87:b9:3c:25:f6:ec:53:3e:6a:c9:67:62: bb:3f:eb:02:a6:be:26:07:ad:67:56:88:d4:07:24:41:72:58: 29:40:b0:57:6c:37:e2:e9:28:9e:99:91:b2:06:e3:90:68:12: e7:17:b8:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUwNjE1MDUyNDI5WhcNMjUwNjIyMDUyNDI5WjAYMRYwFAYD VQQDEw02ODRlNTkwZC1iNTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqkx1xmFTJo3og8UF8iYxo5YcKsRDaHQ/LwhxwblYJ42pEcDhEIug998nYh1 1sWsZsfI14tzY3FlaPEISir++fsVaJfq2ewMXGpTgjD8//97qEJe7QWlDFh0iPU4 Qfj0fiLMMM6kM3+jEJe25tGwBpWL8m4jZn6I8KjBVMHChpyq5LjjrVJxf7mXyFjx iHh16aUv6SptaUZjMcoHWRAI8nrttQS4JqxEEXXAoFfLcOH/ZSnb0aNEy+M8IeVx kDyk/B6E25cD6nYDbn6NFxWFslXmtT1eYypZ7kN9+1KJVkJH8lkDjhUoFpbmJkrn mOkyCOc3wW0hh4M2RAe7I5v8DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1Iaaug nvNW1YKYtHQIYuxRNQZmMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXUo0JYVyeuc1gYiiT++ETI5HuDXVJQUkp88bkXt/W+gLzGIlenR0m d7og0GWggUzP86H0uo3m+472w9RUrnZvV7+0whKfi3Naz9L7+K1bvI9fK6vpTooi kHs04cDXuyEBaaFj+V+EmDNF2XAIHJdDt6BRpdWPby9R/x7JRhJ+D4/1qJT/qHs7 4vUbC0nE8vZmJLZIH9MnDguDUbFaQ14VEa6zA8+woCVANgr2SGjwJ+D0cpiNini+ GJkRRBX8XC0fvC9rnOCMWlERZQmHuTwl9uxTPmrJZ2K7P+sCpr4mB61nVojUByRB clgpQLBXbDfi6SiemZGyBuOQaBLnF7gr -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:30 2025 by rpki-client