$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: kOoQcXEyrkaXnIMzhwn38XXUy1Cv1URFCTBWCr+BAuo= Subject key identifier: 65:9E:9C:EA:F7:2C:D9:26:72:D6:12:E1:D2:26:5B:E3:04:05:FD:D5 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 13A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 1377 Signing time: Fri 22 Aug 2025 14:59:21 +0000 Manifest this update: Fri 22 Aug 2025 14:59:21 +0000 Manifest next update: Fri 29 Aug 2025 14:59:21 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: QJDXeQYyc5gRg24yx33mE5wxqJw/XnfaRtSYg0c3tFk=) 2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=) 3: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 7: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) 9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5025 (0x13a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Aug 22 14:59:21 2025 GMT Not After : Aug 29 14:59:21 2025 GMT Subject: CN=68a885c9-57c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:86:f3:6f:0b:27:63:73:72:7d:c7:6c:57: 92:dd:cd:84:d4:f7:d3:46:a8:bd:e2:46:91:c1:63: 8e:82:f1:1e:b5:ee:28:ce:a2:d2:85:1d:83:82:bf: 07:31:3c:27:a8:34:73:06:7e:7c:51:50:c3:25:c3: 37:2c:44:ba:ce:19:03:12:5e:74:8d:62:9e:39:9b: 60:97:ff:95:65:46:78:37:c9:6a:74:06:b4:49:cb: 20:1d:79:e3:e9:ad:8b:e1:b0:19:e1:c9:0d:16:bb: 54:f1:ca:3c:e3:b2:23:03:e1:8c:12:04:b0:6d:47: ae:9b:6d:df:be:76:5f:be:d7:cf:27:6a:d2:de:9a: 74:a0:14:9c:8e:e5:9a:0d:94:e8:f7:5e:28:d0:45: da:71:a0:a3:59:e9:2d:6b:38:95:a9:45:d8:19:9e: 22:a9:b4:88:d0:36:1a:62:fd:3f:93:84:28:9b:de: 7a:b1:25:d4:fd:45:e7:ce:b8:ce:7a:8d:1c:01:52: 83:34:0b:db:01:af:fd:52:17:b6:47:5c:f3:91:dd: ba:71:b8:5f:6b:c2:8c:87:de:7d:d5:5d:22:69:25: c7:81:0a:b2:77:bb:83:7d:87:e8:94:bb:f8:df:45: db:09:61:2a:eb:2e:bf:f0:64:60:03:a5:6c:aa:e4: 59:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9E:9C:EA:F7:2C:D9:26:72:D6:12:E1:D2:26:5B:E3:04:05:FD:D5 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:6b:c2:30:50:7a:06:70:b0:7a:ec:36:34:e8:7b:3c:90:22: ef:42:b7:f2:0a:00:d1:73:77:e0:4e:6c:df:72:19:6e:a9:b0: 16:b1:26:1d:c7:b6:42:18:10:f3:7c:21:63:2c:f6:23:60:f7: 5a:41:16:45:dd:e8:5b:28:5c:66:13:25:f9:c2:74:a6:15:30: 75:d6:83:ee:ed:10:da:db:fa:00:85:2a:fa:16:ea:a2:6f:4e: fe:24:13:4f:e9:b5:72:fa:e8:3a:5f:8a:fd:02:4a:11:65:43: 1b:b0:cc:26:36:7b:86:c1:7b:b5:ff:14:22:a3:21:99:50:7d: 11:a1:76:da:3d:48:67:e4:34:b7:6d:aa:f4:1e:e3:70:f3:0c: c1:87:bc:9f:96:a3:db:ee:7a:6d:ed:e7:cd:bc:bb:85:d2:62: ec:c9:79:3a:d4:ae:58:46:07:3b:e6:d9:f2:ff:b0:26:bb:44: 21:38:a0:8b:e2:6b:29:f2:24:1e:15:30:0e:96:f7:73:20:41: 10:7a:6a:c9:60:c2:c7:b6:6e:5f:22:11:b1:f8:2d:c2:ad:de: a1:37:17:1e:9f:46:fa:3e:96:db:04:72:9b:71:20:fa:2b:35: cb:75:4e:8f:d7:b4:94:03:ca:d1:52:e0:ae:04:b6:1e:4b:da: c9:41:5e:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwODIyMTQ1OTIxWhcNMjUwODI5MTQ1OTIxWjAYMRYwFAYD VQQDEw02OGE4ODVjOS01N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzaG828LJ2Nzcn3HbFeS3c2E1PfTRqi94kaRwWOOgvEete4ozqLShR2Dgr8H MTwnqDRzBn58UVDDJcM3LES6zhkDEl50jWKeOZtgl/+VZUZ4N8lqdAa0ScsgHXnj 6a2L4bAZ4ckNFrtU8co847IjA+GMEgSwbUeum23fvnZfvtfPJ2rS3pp0oBScjuWa DZTo914o0EXacaCjWektaziVqUXYGZ4iqbSI0DYaYv0/k4Qom956sSXU/UXnzrjO eo0cAVKDNAvbAa/9Uhe2R1zzkd26cbhfa8KMh9591V0iaSXHgQqyd7uDfYfolLv4 30XbCWEq6y6/8GRgA6VsquRZdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWenOr3 LNkmctYS4dImW+MEBf3VMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAga8IwUHoGcLB67DY06Hs8kCLvQrfyCgDRc3fgTmzfchluqbAWsSYd x7ZCGBDzfCFjLPYjYPdaQRZF3ehbKFxmEyX5wnSmFTB11oPu7RDa2/oAhSr6Fuqi b07+JBNP6bVy+ug6X4r9AkoRZUMbsMwmNnuGwXu1/xQioyGZUH0RoXbaPUhn5DS3 bar0HuNw8wzBh7yflqPb7npt7efNvLuF0mLsyXk61K5YRgc75tny/7Amu0QhOKCL 4msp8iQeFTAOlvdzIEEQemrJYMLHtm5fIhGx+C3Crd6hNxcen0b6PpbbBHKbcSD6 KzXLdU6P17SUA8rRUuCuBLYeS9rJQV5L -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:10 2025 by rpki-client