$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: iZd/9X+MfA7ways8KdkuQe8FHtBGZFJFMKj6RyA+IpU= Subject key identifier: 4A:5B:47:C4:17:36:F2:13:65:C0:14:9D:1F:76:DE:83:47:5F:3C:66 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0BA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B65 Signing time: Sat 18 Oct 2025 20:08:28 +0000 Manifest this update: Sat 18 Oct 2025 20:08:27 +0000 Manifest next update: Sat 25 Oct 2025 20:08:27 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: 80lGukz4k748nfD9GVPOMbrR93/hcJKCVyWvpXcISOM=) 2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=) 3: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2984 (0xba8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Oct 18 20:08:27 2025 GMT Not After : Oct 25 20:08:27 2025 GMT Subject: CN=68f3f3bc-4e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b1:28:71:2c:07:b5:a2:7d:ea:9c:42:c1:c2: 22:5d:4a:c4:3c:c0:8f:ae:34:69:af:3c:41:c7:95: 40:18:d6:43:cd:8c:58:6e:ef:f7:7a:bc:ed:d3:e3: f3:cf:2b:48:c9:9e:b5:7f:3b:c1:15:53:f8:28:17: ae:87:30:86:b8:be:06:a2:bf:d1:d5:35:93:86:84: 77:e1:23:73:d0:7d:7b:3e:ca:06:01:fa:1c:fd:46: a1:49:ec:d2:12:d6:27:b5:ff:f9:e0:c4:1b:ed:4c: 17:8d:23:3d:9a:ce:1a:13:bf:48:3b:82:77:5d:78: 4a:3e:37:ed:7c:08:27:38:96:5f:0c:c5:f9:1a:94: b8:59:d2:d8:da:ed:3f:47:5d:a3:1b:34:c7:45:54: 36:96:76:a4:e0:08:3b:fc:42:bb:4b:24:85:cc:a4: 44:85:7a:c2:52:c1:40:22:58:a5:4b:58:9f:86:e3: 61:2b:30:40:24:12:25:40:bb:88:fe:a0:f9:2c:d8: b7:bf:f3:a9:e4:df:71:c2:03:2e:0e:38:e5:d4:f5: 31:3c:72:d2:c1:88:9a:0e:65:57:06:09:37:5f:4a: 96:5b:4b:95:43:a6:2d:8f:3c:9d:25:22:0e:a9:22: 6f:59:1f:c7:fb:76:29:73:b9:c3:89:c8:3a:13:5e: 6e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5B:47:C4:17:36:F2:13:65:C0:14:9D:1F:76:DE:83:47:5F:3C:66 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:f8:e8:4b:f6:9b:71:78:f4:45:40:93:bc:6e:58:29:cc:e6: 43:59:12:f4:a9:6b:16:09:cc:f8:1b:04:e2:17:31:20:c6:be: bf:09:a2:6e:5d:a8:13:39:d2:75:98:c1:8b:aa:2e:43:55:42: e6:5b:3d:dd:fe:a7:66:7a:ba:d8:cc:07:5e:b4:9f:7a:97:a7: 2f:8c:09:9e:38:29:dd:f2:19:44:8e:6f:8d:ea:65:dd:df:c9: c8:79:1b:40:32:4a:35:2c:84:9a:00:4d:0e:ef:6f:8c:01:08: a3:ca:b6:ec:dc:e0:5b:ec:3b:ec:98:2e:85:6a:b3:72:0d:0b: 80:5f:c2:69:6e:c8:76:00:02:d5:1f:3c:ec:01:df:bd:1a:01: 28:6d:a6:4a:fe:6a:91:ed:d7:77:00:5c:e9:c8:a3:2b:4e:46: 1c:ee:00:ba:31:7d:f0:2d:85:47:9b:31:5b:f0:3b:74:51:fd: 63:26:38:2e:a4:b1:72:de:15:ba:4a:56:40:8c:7f:b9:9d:e5: f7:08:5a:28:68:e2:e3:38:f0:eb:b8:65:c4:6c:38:6b:9a:3a: de:29:c1:cc:51:53:fa:16:12:8f:a9:ca:91:a7:35:32:21:7a: bb:30:b8:d5:53:42:a5:1d:3c:52:b6:00:3c:97:e1:79:21:22: 74:48:f4:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUxMDE4MjAwODI3WhcNMjUxMDI1MjAwODI3WjAYMRYwFAYD VQQDEw02OGYzZjNiYy00ZTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37EocSwHtaJ96pxCwcIiXUrEPMCPrjRprzxBx5VAGNZDzYxYbu/3erzt0+Pz zytIyZ61fzvBFVP4KBeuhzCGuL4Gor/R1TWThoR34SNz0H17PsoGAfoc/UahSezS EtYntf/54MQb7UwXjSM9ms4aE79IO4J3XXhKPjftfAgnOJZfDMX5GpS4WdLY2u0/ R12jGzTHRVQ2lnak4Ag7/EK7SySFzKREhXrCUsFAIlilS1ifhuNhKzBAJBIlQLuI /qD5LNi3v/Op5N9xwgMuDjjl1PUxPHLSwYiaDmVXBgk3X0qWW0uVQ6YtjzydJSIO qSJvWR/H+3Ypc7nDicg6E15uBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpbR8QX NvITZcAUnR923oNHXzxmMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR+OhL9ptxePRFQJO8blgpzOZDWRL0qWsWCcz4GwTiFzEgxr6/CaJu XagTOdJ1mMGLqi5DVULmWz3d/qdmerrYzAdetJ96l6cvjAmeOCnd8hlEjm+N6mXd 38nIeRtAMko1LISaAE0O72+MAQijyrbs3OBb7DvsmC6FarNyDQuAX8Jpbsh2AALV HzzsAd+9GgEobaZK/mqR7dd3AFzpyKMrTkYc7gC6MX3wLYVHmzFb8Dt0Uf1jJjgu pLFy3hW6SlZAjH+5neX3CFooaOLjOPDruGXEbDhrmjreKcHMUVP6FhKPqcqRpzUy IXq7MLjVU0KlHTxStgA8l+F5ISJ0SPRn -----END CERTIFICATE-----Generated at Mon Oct 20 04:07:49 2025 by rpki-client