$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: 6Vr547ImqMXO7yvkzfJgcYa0elJad9IblWiahqbujEw= Subject key identifier: D9:3D:97:9E:04:B8:F4:15:6F:A0:B9:66:6D:7B:43:26:05:DF:F5:12 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B2A Signing time: Wed 02 Jul 2025 19:33:47 +0000 Manifest this update: Wed 02 Jul 2025 19:33:47 +0000 Manifest next update: Wed 09 Jul 2025 19:33:47 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: rDh+q2u9K7Daq96UbAJbCWZGbkAOPimRXk8RrGBieyY=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: thphz9NCmSOYT7NGHErxiiKjTWp6caTDH+8orak5Xqc=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: iquZHjCE4/Qw/4vvKK8+uSPsTNr1m+HxauH9ZmtALJ4=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: dyBuRF0L4k6t4ChH+kLE8IpmRvwCrRtPJ3LxkBtN1Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jul 2 19:33:47 2025 GMT Not After : Jul 9 19:33:47 2025 GMT Subject: CN=6865899b-a72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:63:a2:06:fb:ff:42:f8:96:e0:57:41:a4: c5:86:72:0b:87:59:60:f7:c3:41:13:27:81:4a:d2: 2a:f7:b0:f3:f4:f6:66:03:82:3a:29:70:5d:20:56: b4:08:d4:42:90:5f:de:19:08:17:3c:33:b5:f2:76: fc:f9:0f:c2:99:51:4b:01:6e:79:cc:55:24:f9:e4: a3:01:5b:b4:81:4c:3a:2e:19:f3:ff:39:e0:0d:4f: 26:8b:70:3f:92:98:65:b6:3f:36:d7:6c:b6:4b:68: 5a:86:28:84:17:bd:52:00:bc:04:58:0c:b9:c1:f2: 4f:19:f5:26:9d:d4:cb:9e:e8:92:0c:ce:e1:ea:d1: f4:ed:bc:82:d0:c7:96:e9:31:8a:5f:0e:27:1e:b0: a8:45:71:27:83:58:0d:2f:91:b1:63:2d:10:2e:6e: 04:51:9b:30:1c:db:45:90:72:fa:64:65:6f:4c:05: 5b:72:eb:72:f3:eb:47:55:67:c2:df:39:06:5e:b2: 71:85:19:da:5a:3c:94:1a:0c:f2:1e:65:9a:b4:ee: 3e:eb:21:c2:6a:b1:5f:0d:08:ab:35:b6:4c:3b:90: 80:50:95:dc:c6:d1:aa:cb:84:fd:3d:1a:d4:31:9a: ef:2d:ca:e4:c1:95:b9:83:04:b4:a5:60:e0:e4:f2: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3D:97:9E:04:B8:F4:15:6F:A0:B9:66:6D:7B:43:26:05:DF:F5:12 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:97:17:b4:ad:8d:32:59:1a:61:23:b0:22:cd:1a:5a:42:2d: 04:a7:f0:30:3b:39:8d:ec:32:8d:2c:81:09:3b:2c:64:23:03: e4:4a:d7:3e:64:41:db:ec:e3:b3:6a:8c:d2:56:8e:af:8d:a8: 4e:71:7c:4e:34:bd:5e:53:b1:27:88:80:28:2c:c1:0e:e0:e8: d6:73:87:45:16:9c:3d:e9:d1:f8:79:af:37:7d:2a:2f:ba:e4: f8:4b:05:51:49:fa:db:78:8b:9b:97:8b:a3:f6:da:40:fc:23: 91:35:9b:87:cf:f5:4f:82:fe:09:ac:dd:48:ad:39:1b:68:b8: 5f:32:d3:55:81:ba:df:2a:e2:5b:96:53:8d:fb:e4:a0:31:8e: ea:61:a2:11:47:a9:18:78:e0:c0:7b:ab:99:67:0d:90:db:1a: 50:86:0c:0d:e3:79:bd:18:95:14:f4:da:3c:37:54:63:96:cb: dc:1f:fa:c6:f3:7d:4c:b9:2b:48:c2:e7:6a:17:71:54:be:e6: 90:4e:2c:7d:cf:68:7c:70:39:13:39:ba:55:0f:4c:41:3d:c2: 55:66:89:c0:8c:da:0e:55:e1:3f:36:21:08:42:89:4a:83:d9: d5:92:dd:37:0d:a5:dc:7d:9f:9e:a8:2a:d7:c0:fc:0b:24:a8: 94:5f:26:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNzAyMTkzMzQ3WhcNMjUwNzA5MTkzMzQ3WjAYMRYwFAYD VQQDEw02ODY1ODk5Yi1hNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm5jogb7/0L4luBXQaTFhnILh1lg98NBEyeBStIq97Dz9PZmA4I6KXBdIFa0 CNRCkF/eGQgXPDO18nb8+Q/CmVFLAW55zFUk+eSjAVu0gUw6Lhnz/zngDU8mi3A/ kphltj8212y2S2hahiiEF71SALwEWAy5wfJPGfUmndTLnuiSDM7h6tH07byC0MeW 6TGKXw4nHrCoRXEng1gNL5GxYy0QLm4EUZswHNtFkHL6ZGVvTAVbcuty8+tHVWfC 3zkGXrJxhRnaWjyUGgzyHmWatO4+6yHCarFfDQirNbZMO5CAUJXcxtGqy4T9PRrU MZrvLcrkwZW5gwS0pWDg5PINYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNk9l54E uPQVb6C5Zm17QyYF3/USMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnlxe0rY0yWRphI7AizRpaQi0Ep/AwOzmN7DKNLIEJOyxkIwPkStc+ ZEHb7OOzaozSVo6vjahOcXxONL1eU7EniIAoLMEO4OjWc4dFFpw96dH4ea83fSov uuT4SwVRSfrbeIubl4uj9tpA/CORNZuHz/VPgv4JrN1IrTkbaLhfMtNVgbrfKuJb llON++SgMY7qYaIRR6kYeODAe6uZZw2Q2xpQhgwN43m9GJUU9No8N1RjlsvcH/rG 831MuStIwudqF3FUvuaQTix9z2h8cDkTObpVD0xBPcJVZonAjNoOVeE/NiEIQolK g9nVkt03DaXcfZ+eqCrXwPwLJKiUXyaF -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:06 2025 by rpki-client