$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: v0Ft+TBtucK2L8Rh56OAL597s+mzIl/cZ9EGiZLe5xk= Subject key identifier: EF:33:F0:C4:6E:6E:40:87:20:E2:02:71:06:39:73:C4:02:3A:1B:ED Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B46 Signing time: Fri 22 Aug 2025 19:25:29 +0000 Manifest this update: Fri 22 Aug 2025 19:25:28 +0000 Manifest next update: Fri 29 Aug 2025 19:25:28 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: icVCEv6470F/5OJXVDpf3u96Su/7hP6LE119gBOtXEU=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: M5MFheEe6PxTWB7Wz5J5r55zoAQSHJDym66hYRrpkxA=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: DNzgYLTa4x8Yro4MUg5YZJaz6+PS7oRCf/le1/gHgMk=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: RlTMy4TJXhXKultUfVeXAOaXLFxv6x12ebX75GuXSzI=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: TPTNq9QHWPAeb6j5VL0idZl08rj3AisqQKQHhOnPNHc=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: HyYsRkYWrhLH7/eFiE9ZKiELMhyobWoxmzKJXnew4uE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: wLOrSqw7qLHdzdLMjtTkfhjjFQPjvligZ3Sh55JbmkA=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: bJICkOqPemUJF5TGuWsSKV7U9E+Ul0qCieaSTwZ43T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2946 (0xb82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Aug 22 19:25:28 2025 GMT Not After : Aug 29 19:25:28 2025 GMT Subject: CN=68a8c429-d668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:96:9a:f0:5a:8d:c4:dd:90:dd:d4:f7:56: d5:ae:33:2c:42:ee:3f:aa:27:0e:41:eb:da:f2:04: cf:59:05:4c:eb:38:41:f0:cd:c8:94:f7:25:ac:16: 09:f6:9d:9e:fe:1d:b5:03:93:90:f9:f2:21:0d:27: 5e:b8:95:4c:2c:fd:ff:46:a8:da:1b:54:48:93:42: 6d:9e:44:85:a9:59:97:aa:cb:01:f4:80:50:31:41: c3:87:7b:e9:da:1a:ed:c7:e2:e9:46:ac:d2:48:b6: f4:da:ec:44:f9:21:0c:e4:a9:2e:4a:55:72:4c:96: 28:87:42:7a:80:07:20:a1:c4:1d:02:ee:89:ed:1e: ac:5d:34:b9:0f:ff:30:de:d4:46:ab:e5:2f:6e:5f: 7c:f8:a5:52:7b:dc:ce:a3:85:65:8e:a7:c7:c5:d1: 31:2c:b4:b7:21:f9:69:72:72:02:30:0c:22:23:ce: 91:40:9e:45:30:65:1d:77:34:1c:19:bd:64:d6:37: 49:45:39:8c:79:e0:b5:96:13:cf:89:1c:e0:e6:19: 56:20:9b:8e:15:81:ef:bc:f4:fa:0b:a3:2c:32:69: 63:90:f5:97:b5:1a:69:e8:3f:81:d2:db:a1:cc:7c: db:00:d3:d8:48:a6:6d:b2:5e:fb:a3:cc:98:be:c2: b4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:33:F0:C4:6E:6E:40:87:20:E2:02:71:06:39:73:C4:02:3A:1B:ED X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a8:ba:31:ba:d2:90:75:9a:18:09:5d:d1:4f:d7:9e:5c:1f: 45:20:29:10:64:6b:bf:06:b1:f1:ce:d7:6c:fe:e1:09:4b:97: b4:98:e1:3c:1b:37:d1:b3:3e:25:52:2f:67:c0:99:fd:36:a8: f2:5a:92:cb:35:4c:83:5f:fa:3a:56:27:ee:82:8b:86:22:72: 8a:5d:ea:a5:a7:55:f0:fd:d3:b2:2f:32:02:ae:3b:9c:52:e4: 65:5e:10:68:15:00:81:14:99:6b:92:5b:f0:fa:35:77:b0:c0: 79:45:7d:bb:53:dd:32:be:d0:e6:ff:be:1e:a0:02:d9:13:67: 78:49:ff:15:76:98:d3:6c:fd:70:ab:da:b2:4a:a9:52:9c:04: 58:29:c1:d7:e4:9b:10:a9:29:ff:bd:76:78:8c:f8:ef:7f:92: cf:1d:e8:b4:14:9b:e7:8a:3c:1f:17:93:92:51:d9:23:e5:42: be:0d:d7:ba:a5:8c:e6:35:48:91:b3:3a:21:21:2d:25:73:15: ba:4a:80:db:da:14:5a:6b:12:4a:70:91:54:c9:46:cf:b0:3c: 32:89:3e:10:1c:31:06:cd:45:bb:4f:67:71:be:dd:13:d5:17: fd:8c:bb:66:ba:32:55:0a:97:b3:f7:5b:3f:60:0e:56:15:52: 23:9e:2e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwODIyMTkyNTI4WhcNMjUwODI5MTkyNTI4WjAYMRYwFAYD VQQDEw02OGE4YzQyOS1kNjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kCWmvBajcTdkN3U91bVrjMsQu4/qicOQeva8gTPWQVM6zhB8M3IlPclrBYJ 9p2e/h21A5OQ+fIhDSdeuJVMLP3/RqjaG1RIk0JtnkSFqVmXqssB9IBQMUHDh3vp 2hrtx+LpRqzSSLb02uxE+SEM5KkuSlVyTJYoh0J6gAcgocQdAu6J7R6sXTS5D/8w 3tRGq+Uvbl98+KVSe9zOo4VljqfHxdExLLS3IflpcnICMAwiI86RQJ5FMGUddzQc Gb1k1jdJRTmMeeC1lhPPiRzg5hlWIJuOFYHvvPT6C6MsMmljkPWXtRpp6D+B0tuh zHzbANPYSKZtsl77o8yYvsK0FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8z8MRu bkCHIOICcQY5c8QCOhvtMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgqLoxutKQdZoYCV3RT9eeXB9FICkQZGu/BrHxztds/uEJS5e0mOE8 GzfRsz4lUi9nwJn9NqjyWpLLNUyDX/o6VifugouGInKKXeqlp1Xw/dOyLzICrjuc UuRlXhBoFQCBFJlrklvw+jV3sMB5RX27U90yvtDm/74eoALZE2d4Sf8VdpjTbP1w q9qySqlSnARYKcHX5JsQqSn/vXZ4jPjvf5LPHei0FJvnijwfF5OSUdkj5UK+Dde6 pYzmNUiRszohIS0lcxW6SoDb2hRaaxJKcJFUyUbPsDwyiT4QHDEGzUW7T2dxvt0T 1Rf9jLtmujJVCpez91s/YA5WFVIjni5R -----END CERTIFICATE-----Generated at Sat Aug 23 16:10:59 2025 by rpki-client