$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: e2OvHHjFmpPh1csBjzR93qZLTOyZrkxDGO7n+NY/ui4= Subject key identifier: BE:06:88:BD:85:56:E2:81:B8:FD:35:1D:97:38:3B:31:F3:96:EC:AB Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: E9 Signing time: Sun 19 Oct 2025 08:33:26 +0000 Manifest this update: Sun 19 Oct 2025 08:33:26 +0000 Manifest next update: Sun 26 Oct 2025 08:33:26 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: Z9gCv1Ik4n9htX3OhlX8nE84peA78a10YUuoWIWuot8=) 2: 5DC91E6E6E4611F09D8F426CC4F9AE02.roa (hash: y8hgCCBPI84qrp5W1tiqF8+NbZgro3HnrgturfTW64A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Oct 19 08:33:26 2025 GMT Not After : Oct 26 08:33:26 2025 GMT Subject: CN=68f4a256-8d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:b9:83:d3:4a:9e:ec:32:0b:86:fb:09:81: 11:67:82:51:67:79:22:c0:1e:ff:5d:d3:e7:4e:8b: 79:b1:b3:91:85:41:23:43:9e:e9:28:bf:fd:54:46: 88:09:50:69:e1:d8:41:b3:5c:a1:f5:f6:0a:68:8f: 23:63:89:d4:a6:87:87:df:79:dd:3f:5a:4a:35:e9: 4d:95:e0:69:02:35:fc:9b:2e:d2:ae:08:21:a4:a1: 94:fc:8d:c8:f3:11:a8:a4:68:5e:5b:91:ad:5c:09: 66:65:fe:3e:a4:85:ef:9b:ef:49:94:59:0c:77:a4: 84:0a:96:1d:a4:fa:a1:81:03:85:30:f4:63:e2:1a: 20:e6:82:6d:08:38:1a:24:2d:73:6b:94:a1:68:ea: 76:a8:29:a3:16:73:88:7b:b1:e2:38:90:1a:fd:f1: 79:22:21:1e:f0:b7:fc:9e:69:62:24:db:a7:8d:42: 76:86:56:19:45:83:d6:f4:84:ee:b9:ee:e1:a9:b6: fc:de:59:fc:b6:db:45:cc:e3:71:ec:4f:b3:20:53: ac:e2:af:91:87:50:d8:8f:4b:18:a9:f5:41:dd:a1: fd:26:19:fa:72:cd:02:df:ad:4b:aa:2d:df:11:4e: a0:1d:26:a8:3b:7b:f4:4f:3e:ad:d8:02:de:3f:37: b1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:06:88:BD:85:56:E2:81:B8:FD:35:1D:97:38:3B:31:F3:96:EC:AB X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4d:91:cc:f7:f6:d3:e1:b2:d7:e4:52:a4:27:73:39:bf:b5: d4:e5:18:c2:50:82:00:c9:72:bf:87:88:18:39:f3:31:7f:01: f1:9e:f1:38:ea:e7:7f:56:5e:f1:1e:60:82:43:e8:44:cd:75: 3c:e8:41:3e:68:bd:69:66:a3:17:75:67:e7:30:bd:3e:6d:e7: bc:a9:3f:3a:70:44:64:f2:95:37:32:bc:de:4f:27:2b:fd:52: f1:f8:49:67:6f:2b:3c:19:1d:df:5d:06:4d:b0:62:52:52:39: e8:37:e1:8b:23:92:23:0b:11:31:b4:fc:6e:a5:ce:c7:29:0b: 6e:98:ba:6b:69:07:52:a9:2a:22:15:09:24:ba:44:05:75:30: de:0a:84:c4:f0:d0:a3:25:ed:03:38:35:2e:ed:70:8d:1f:03: 95:55:aa:30:a4:0d:0e:62:f5:4c:04:c6:5c:58:86:15:32:65: 19:15:e9:07:da:13:f8:04:0a:8a:f7:1d:b0:78:d5:2b:72:5e: 7c:a6:2c:58:57:aa:fb:91:d5:23:0b:7c:d2:d0:e6:d4:cf:4b: a0:3f:8e:58:1b:ac:7c:7b:1e:60:fd:8e:f8:bb:c6:1d:ad:05: 11:53:9f:1d:21:2a:22:07:3e:a2:86:d3:88:fb:d8:6b:0d:17: b1:51:05:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUxMDE5MDgzMzI2WhcNMjUxMDI2MDgzMzI2WjAYMRYwFAYD VQQDEw02OGY0YTI1Ni04ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtry5g9NKnuwyC4b7CYERZ4JRZ3kiwB7/XdPnTot5sbORhUEjQ57pKL/9VEaI CVBp4dhBs1yh9fYKaI8jY4nUpoeH33ndP1pKNelNleBpAjX8my7SrgghpKGU/I3I 8xGopGheW5GtXAlmZf4+pIXvm+9JlFkMd6SECpYdpPqhgQOFMPRj4hog5oJtCDga JC1za5ShaOp2qCmjFnOIe7HiOJAa/fF5IiEe8Lf8nmliJNunjUJ2hlYZRYPW9ITu ue7hqbb83ln8tttFzONx7E+zIFOs4q+Rh1DYj0sYqfVB3aH9Jhn6cs0C361Lqi3f EU6gHSaoO3v0Tz6t2ALePzexJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4GiL2F VuKBuP01HZc4OzHzluyrMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHTZHM9/bT4bLX5FKkJ3M5v7XU5RjCUIIAyXK/h4gYOfMxfwHxnvE4 6ud/Vl7xHmCCQ+hEzXU86EE+aL1pZqMXdWfnML0+bee8qT86cERk8pU3MrzeTycr /VLx+Elnbys8GR3fXQZNsGJSUjnoN+GLI5IjCxExtPxupc7HKQtumLpraQdSqSoi FQkkukQFdTDeCoTE8NCjJe0DODUu7XCNHwOVVaowpA0OYvVMBMZcWIYVMmUZFekH 2hP4BAqK9x2weNUrcl58pixYV6r7kdUjC3zS0ObUz0ugP45YG6x8ex5g/Y74u8Yd rQURU58dISoiBz6ihtOI+9hrDRexUQWd -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:51 2025 by rpki-client