$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: 5EfBH2Iky99o9tBGisAluG9hkt5LZJFpWTp1T8n8b+s= Subject key identifier: 60:D4:24:F4:03:F1:04:08:A2:46:E1:29:CB:22:6D:8E:2C:A9:AE:86 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B0D Signing time: Tue 06 May 2025 19:18:30 +0000 Manifest this update: Tue 06 May 2025 19:18:30 +0000 Manifest next update: Tue 13 May 2025 19:18:30 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: vshLpzPD8v/mkBpzcU50MRXYnpDITxZPpvXDth5JAy0=) 2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 3: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: iquZHjCE4/Qw/4vvKK8+uSPsTNr1m+HxauH9ZmtALJ4=) 4: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 5: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 6: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=) 7: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: dyBuRF0L4k6t4ChH+kLE8IpmRvwCrRtPJ3LxkBtN1Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: May 6 19:18:30 2025 GMT Not After : May 13 19:18:30 2025 GMT Subject: CN=681a6086-33a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:d8:28:ff:af:50:5c:86:78:27:72:df:1e: 46:f3:5b:99:15:dd:cc:cb:fd:11:24:0b:fb:5a:cb: c9:5e:4a:a8:d2:00:e3:ef:33:a9:09:cb:cf:33:75: fe:d8:ab:8e:54:bd:1b:de:b0:65:03:9a:72:70:09: f5:d7:3d:e1:36:eb:d3:ff:af:dc:7a:9c:7f:42:fa: 5b:d2:83:ef:5e:4a:db:21:73:ab:ec:79:fb:72:c5: 0f:da:9c:ab:0f:24:5c:c5:6e:f4:3f:5b:27:96:7e: 07:c2:36:d6:f9:4b:b9:13:d3:26:5c:37:67:84:d2: 47:b3:24:ed:26:8a:59:1e:2c:3e:c1:41:50:4a:90: a2:ca:d1:ae:b1:62:d9:7c:aa:ad:50:d7:40:02:ab: cd:72:92:d8:b5:d1:4b:aa:4b:5b:a2:3d:c7:a3:e3: 47:4e:93:b1:c9:8f:7c:36:33:8d:42:19:9a:b5:6d: 8a:d1:5f:0b:ba:cd:a8:56:59:5e:a7:2b:ed:33:a2: da:e8:48:c5:69:8a:e0:16:79:ca:2c:0b:1c:6b:b4: 1a:98:c4:18:dc:ad:a9:4a:c9:14:75:7f:2b:a7:e7: fc:b2:40:1f:77:cb:e6:5c:a2:bd:f1:c9:68:c0:61: b3:d2:00:0d:ec:2a:58:dc:b1:e7:94:c9:b2:20:ac: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D4:24:F4:03:F1:04:08:A2:46:E1:29:CB:22:6D:8E:2C:A9:AE:86 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f0:f1:68:1f:2e:1e:c7:8a:50:6f:d4:af:ee:c0:f5:e9:5b: b5:86:57:ac:b2:e1:00:72:ff:20:e9:82:0a:5d:41:ae:c8:46: 22:67:65:fd:5c:5c:76:ce:ab:e4:5b:12:f0:d7:1f:ad:2e:b0: 5f:81:5a:0d:41:0a:48:d4:82:cb:23:6e:88:b8:0c:a7:f3:ff: fa:e3:cd:63:67:25:d6:1e:cc:c6:db:c7:e8:42:95:f5:48:0d: 9e:bf:0b:54:83:9b:55:99:c0:bf:55:ab:bb:9f:ac:2d:f4:3b: 80:65:96:69:d5:cf:1a:19:04:46:f8:bb:d4:67:43:17:82:8b: b8:77:98:3f:55:66:0b:7c:85:3b:f0:19:b2:50:8d:0e:b2:fc: 6b:fa:8b:54:97:d1:d6:14:21:37:ab:55:c8:48:54:70:bc:aa: 64:e3:06:ba:83:cf:1e:5f:31:15:43:5d:31:00:c2:8b:ad:90: b8:ac:82:93:40:79:28:78:60:92:51:7f:7e:99:1c:31:51:f0: 2c:36:06:e2:7b:7c:f4:9a:ac:b1:4d:a0:d8:41:ed:74:90:38: aa:cb:83:8c:1e:22:c4:f4:e9:87:a9:7d:7f:f8:9e:60:ef:51: 22:5c:90:1a:47:ba:c3:d0:11:71:09:90:aa:59:fe:61:6f:38: f4:62:ed:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNTA2MTkxODMwWhcNMjUwNTEzMTkxODMwWjAYMRYwFAYD VQQDEw02ODFhNjA4Ni0zM2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4avYKP+vUFyGeCdy3x5G81uZFd3My/0RJAv7WsvJXkqo0gDj7zOpCcvPM3X+ 2KuOVL0b3rBlA5pycAn11z3hNuvT/6/cepx/Qvpb0oPvXkrbIXOr7Hn7csUP2pyr DyRcxW70P1snln4HwjbW+Uu5E9MmXDdnhNJHsyTtJopZHiw+wUFQSpCiytGusWLZ fKqtUNdAAqvNcpLYtdFLqktboj3Ho+NHTpOxyY98NjONQhmatW2K0V8Lus2oVlle pyvtM6La6EjFaYrgFnnKLAsca7QamMQY3K2pSskUdX8rp+f8skAfd8vmXKK98clo wGGz0gAN7CpY3LHnlMmyIKy91QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDUJPQD 8QQIokbhKcsibY4sqa6GMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAV8PFoHy4ex4pQb9Sv7sD16Vu1hlessuEAcv8g6YIKXUGuyEYiZ2X9 XFx2zqvkWxLw1x+tLrBfgVoNQQpI1ILLI26IuAyn8//6481jZyXWHszG28foQpX1 SA2evwtUg5tVmcC/Vau7n6wt9DuAZZZp1c8aGQRG+LvUZ0MXgou4d5g/VWYLfIU7 8BmyUI0Osvxr+otUl9HWFCE3q1XISFRwvKpk4wa6g88eXzEVQ10xAMKLrZC4rIKT QHkoeGCSUX9+mRwxUfAsNgbie3z0mqyxTaDYQe10kDiqy4OMHiLE9OmHqX1/+J5g 71EiXJAaR7rD0BFxCZCqWf5hbzj0Yu1e -----END CERTIFICATE-----Generated at Thu May 8 14:34:39 2025 by rpki-client