$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: O5Hs3t2DlAN+P/bOQ2P2xIt1tw+2KRcITHjf7aF3ZKY= Subject key identifier: 0A:D5:68:AA:95:66:FD:3A:19:4A:20:78:82:9F:A3:EA:FF:E0:49:2C Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: 87 Signing time: Fri 25 Apr 2025 05:36:28 +0000 Manifest this update: Fri 25 Apr 2025 05:36:28 +0000 Manifest next update: Fri 02 May 2025 05:36:28 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: b5VmFe6aK0AwvmlX4ZI4JU9+faz/ddcFnmjThzbTRGk=) 2: 569067B25D5B11EF9EA49613C4F9AE02.roa (hash: Eb5PgB8qCSXbKshJheWAx+0IvpK6iLnUnQ56W+fCnec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Apr 25 05:36:28 2025 GMT Not After : May 2 05:36:28 2025 GMT Subject: CN=680b1f5c-6346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:c9:96:36:55:18:55:f7:0f:53:03:53:ec: ed:9a:30:ba:d2:16:fb:aa:31:fb:a1:04:b4:34:aa: cf:7a:4c:41:8c:0c:6e:75:d5:e6:f3:ad:d4:37:90: c8:ee:86:8e:42:2f:c8:1d:a4:dc:f7:0a:13:26:61: 2f:a5:16:e6:68:f7:9d:59:c0:d3:65:99:1d:1f:4c: b6:1b:c0:36:c5:d3:57:93:ac:bb:50:22:30:61:0d: 0f:21:65:14:ab:3b:18:a6:71:78:b4:98:ad:08:28: 3f:80:e4:b3:62:85:e5:6c:18:ba:33:48:ec:5c:d4: 47:eb:a5:19:e7:ff:e2:41:ec:c2:9a:2f:35:e1:a9: 7b:4e:e2:62:6e:38:8c:bc:01:00:de:ec:7a:89:d4: 75:63:d4:f2:6a:aa:7a:2f:76:7a:ab:21:9f:4d:20: 05:d4:80:00:9a:26:de:b8:9c:56:b4:32:13:05:f8: c8:a3:33:89:2c:b1:7a:ce:84:f2:5a:2a:18:b2:4f: a2:11:35:98:ef:61:0b:5c:90:57:b0:f7:c0:fe:53: 17:6c:41:c9:c2:39:90:c1:3d:d8:76:d5:3a:a6:3f: 9e:91:94:88:5c:4d:94:2a:94:21:e2:28:fd:02:2c: ac:be:c4:66:34:5b:2e:2b:11:dd:e1:26:a7:df:ed: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:68:AA:95:66:FD:3A:19:4A:20:78:82:9F:A3:EA:FF:E0:49:2C X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8e:a2:f6:aa:d5:eb:83:b6:ec:62:95:94:10:a0:09:e0:f0: 6c:6c:84:2a:8a:66:d5:1b:43:bc:25:dd:9b:06:9e:a1:31:de: a5:8d:b3:b1:00:21:54:59:6c:49:f1:28:ba:6f:93:53:17:eb: 5e:7d:61:88:97:c4:fa:62:a4:60:44:5c:71:12:89:c2:3d:67: 54:ee:49:ac:fa:53:5b:5d:56:86:90:2e:59:65:10:df:29:26: ec:a2:40:66:c9:8b:59:88:70:bd:2d:e5:26:e3:a9:cf:a4:9f: e1:11:bc:a7:8c:a8:2f:d9:ea:6a:a5:49:b6:e0:ee:b9:30:61: 58:1b:83:41:fd:67:65:01:c7:89:e5:2a:f9:7f:a8:7f:b7:f5: c7:ba:20:d8:67:21:18:41:49:ba:fb:c0:5c:19:86:83:f2:5e: a3:b1:63:a9:bb:e8:8b:ba:15:4f:49:29:c7:31:b4:05:19:b4: cc:14:d8:7a:48:d6:4f:b5:e7:9b:76:ed:46:65:6e:30:8e:18: 77:b0:47:4b:8d:66:7e:b0:96:32:3c:c6:43:7f:3f:ff:d6:2f: 6a:8a:d5:83:7f:c6:df:8a:7f:b1:11:56:05:90:72:04:76:d2: 58:8a:5d:02:32:6b:c7:8e:af:eb:9e:84:c1:26:81:e9:02:22: d8:db:97:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUwNDI1MDUzNjI4WhcNMjUwNTAyMDUzNjI4WjAYMRYwFAYD VQQDEw02ODBiMWY1Yy02MzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdrJljZVGFX3D1MDU+ztmjC60hb7qjH7oQS0NKrPekxBjAxuddXm863UN5DI 7oaOQi/IHaTc9woTJmEvpRbmaPedWcDTZZkdH0y2G8A2xdNXk6y7UCIwYQ0PIWUU qzsYpnF4tJitCCg/gOSzYoXlbBi6M0jsXNRH66UZ5//iQezCmi814al7TuJibjiM vAEA3ux6idR1Y9Tyaqp6L3Z6qyGfTSAF1IAAmibeuJxWtDITBfjIozOJLLF6zoTy WioYsk+iETWY72ELXJBXsPfA/lMXbEHJwjmQwT3YdtU6pj+ekZSIXE2UKpQh4ij9 AiysvsRmNFsuKxHd4San3+06WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArVaKqV Zv06GUogeIKfo+r/4EksMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAjqL2qtXrg7bsYpWUEKAJ4PBsbIQqimbVG0O8Jd2bBp6hMd6ljbOx ACFUWWxJ8Si6b5NTF+tefWGIl8T6YqRgRFxxEonCPWdU7kms+lNbXVaGkC5ZZRDf KSbsokBmyYtZiHC9LeUm46nPpJ/hEbynjKgv2epqpUm24O65MGFYG4NB/WdlAceJ 5Sr5f6h/t/XHuiDYZyEYQUm6+8BcGYaD8l6jsWOpu+iLuhVPSSnHMbQFGbTMFNh6 SNZPteebdu1GZW4wjhh3sEdLjWZ+sJYyPMZDfz//1i9qitWDf8bfin+xEVYFkHIE dtJYil0CMmvHjq/rnoTBJoHpAiLY25dQ -----END CERTIFICATE-----Generated at Sat Apr 26 03:54:01 2025 by rpki-client