$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: 5LIchX3htWnzUhd1AC8sTqFUwJq+COEQXZdFr/TfVBE= Subject key identifier: 9B:11:2F:2D:8B:23:45:1A:45:DA:BC:F7:52:F6:50:E3:EA:53:F9:10 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 136C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 1343 Signing time: Wed 14 May 2025 14:58:36 +0000 Manifest this update: Wed 14 May 2025 14:58:35 +0000 Manifest next update: Wed 21 May 2025 14:58:35 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: kOCfdeQEUgHG9+d3uuBbAAcm81uqk8qU7U0aRoIrXTA=) 2: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 3: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 4: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 5: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 6: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 7: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 14:58:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4972 (0x136c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: May 14 14:58:35 2025 GMT Not After : May 21 14:58:35 2025 GMT Subject: CN=6824af9b-9db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:ec:9b:c9:45:c5:f9:f3:67:1a:a6:e3:9f: a5:2f:ad:2c:21:46:76:43:48:35:8b:ae:29:b3:81: f4:a9:fd:1d:70:c3:05:00:57:b9:6f:93:88:9f:3e: 7e:2c:12:f5:fe:fd:d7:91:39:1a:0f:53:62:d9:0b: 53:12:d3:01:62:d0:05:27:75:42:8a:79:dc:a5:19: 08:f2:e6:94:70:87:d5:df:0a:be:dc:4d:7c:15:23: 95:02:75:06:8a:5e:30:2b:77:f6:21:99:4a:f7:af: 5e:d9:c6:cb:bc:76:c7:1a:13:59:5a:a3:e8:69:1f: 0a:6d:6c:04:65:ad:68:26:b0:85:14:93:bb:0e:3e: 6c:53:60:93:4b:ef:cd:bf:d7:90:f4:af:c2:b4:e2: 32:ac:44:b3:90:09:56:7b:c8:8e:bd:75:19:dc:d4: 7b:f2:61:2d:5c:64:e3:40:0e:d4:14:1f:d4:14:73: 83:96:ce:19:62:a2:57:e5:01:b7:0e:28:9f:34:a4: e9:31:34:06:ef:95:51:9c:d2:92:5e:9f:a1:71:60: 6d:21:53:86:f9:8b:56:f8:bc:e3:20:31:4e:50:bc: 98:27:ac:6f:1d:11:70:77:c1:e3:a6:3c:9d:40:e8: 71:98:27:76:39:f0:ac:62:d6:1e:63:b1:28:76:9a: 48:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:11:2F:2D:8B:23:45:1A:45:DA:BC:F7:52:F6:50:E3:EA:53:F9:10 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ac:48:2d:07:76:0b:43:dd:78:aa:c7:ae:61:30:9e:f9:29: 46:3f:1e:33:9c:db:fa:c7:7f:36:58:e2:bc:ab:c3:53:f2:df: 9b:2d:fa:f6:28:cf:1a:de:df:3f:c8:78:77:94:e6:78:8a:9e: 83:c2:e5:b7:58:a8:61:dc:c8:f3:fa:59:f1:ab:73:4b:9d:ce: 45:b3:c2:f1:56:c2:6c:68:f2:d4:71:42:28:12:39:b2:89:b0: 18:d4:17:e1:b6:2e:e8:6d:01:36:c3:ba:c0:46:cc:3b:78:ae: c6:82:e1:20:6f:db:d2:3e:5b:a8:ab:31:b6:59:60:12:10:fc: 3e:89:18:94:83:5b:04:17:66:ef:78:97:2d:ed:18:6d:cb:22: 3a:64:d2:5a:b1:d9:b7:a9:a1:ad:56:f5:5f:d2:98:59:65:b3: 9c:5b:f1:7b:69:ea:d7:81:d1:7f:e8:d4:34:34:f3:54:d3:f4: 42:f6:c1:85:e2:61:f4:d3:43:34:63:44:b7:3c:ec:c8:56:3c: 20:4e:99:72:0e:69:0c:52:ba:54:25:00:2c:e0:2a:1e:94:59: 42:b7:e4:3e:f9:8c:e3:ad:e6:c4:59:50:49:5e:9c:38:5d:3b: 80:2f:98:9a:6d:42:9d:49:6f:c0:c4:c1:ed:05:8c:ed:ce:a5: 69:7b:9b:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNTE0MTQ1ODM1WhcNMjUwNTIxMTQ1ODM1WjAYMRYwFAYD VQQDEw02ODI0YWY5Yi05ZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA48rsm8lFxfnzZxqm45+lL60sIUZ2Q0g1i64ps4H0qf0dcMMFAFe5b5OInz5+ LBL1/v3XkTkaD1Ni2QtTEtMBYtAFJ3VCinncpRkI8uaUcIfV3wq+3E18FSOVAnUG il4wK3f2IZlK969e2cbLvHbHGhNZWqPoaR8KbWwEZa1oJrCFFJO7Dj5sU2CTS+/N v9eQ9K/CtOIyrESzkAlWe8iOvXUZ3NR78mEtXGTjQA7UFB/UFHODls4ZYqJX5QG3 DiifNKTpMTQG75VRnNKSXp+hcWBtIVOG+YtW+LzjIDFOULyYJ6xvHRFwd8Hjpjyd QOhxmCd2OfCsYtYeY7EodppIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsRLy2L I0UaRdq891L2UOPqU/kQMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVrEgtB3YLQ914qseuYTCe+SlGPx4znNv6x382WOK8q8NT8t+bLfr2 KM8a3t8/yHh3lOZ4ip6DwuW3WKhh3Mjz+lnxq3NLnc5Fs8LxVsJsaPLUcUIoEjmy ibAY1Bfhti7obQE2w7rARsw7eK7GguEgb9vSPluoqzG2WWASEPw+iRiUg1sEF2bv eJct7RhtyyI6ZNJasdm3qaGtVvVf0phZZbOcW/F7aerXgdF/6NQ0NPNU0/RC9sGF 4mH000M0Y0S3POzIVjwgTplyDmkMUrpUJQAs4CoelFlCt+Q++YzjrebEWVBJXpw4 XTuAL5iabUKdSW/AxMHtBYztzqVpe5sU -----END CERTIFICATE-----Generated at Wed May 14 22:58:19 2025 by rpki-client