$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: BI0lWzJt55ZsQo0P2zjDiWR7GIy3V1Uo5gi6m4do6xk= Subject key identifier: 28:AA:86:95:86:C9:10:E7:5A:84:B7:55:D0:B1:EE:DF:B0:2D:A5:4E Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: C7 Signing time: Sat 23 Aug 2025 06:03:41 +0000 Manifest this update: Sat 23 Aug 2025 06:03:40 +0000 Manifest next update: Sat 30 Aug 2025 06:03:40 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: gvUmS7WMoqWAI8jig9uXbofHe59w72fD8uRgiRVKbV0=) 2: 5DC91E6E6E4611F09D8F426CC4F9AE02.roa (hash: 1D0dZRi/iXDfggPU7APVXwcKuNXCnPLBRayeyRLpppE=) 3: 7A355ED26E4611F0B2EA866CC4F9AE02.roa (hash: ckkpvJSvMWdn/s9RDPiA2SPGoeSPZEHgR7vRk5CYG4Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: Aug 23 06:03:40 2025 GMT Not After : Aug 30 06:03:40 2025 GMT Subject: CN=68a959bd-d258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:2f:d9:98:ab:a9:42:24:a5:27:30:c5:8e: 5a:77:9f:5d:15:d5:38:97:f7:77:1e:71:de:d7:2e: ab:a7:d3:a4:bb:93:12:a1:0c:df:df:15:09:cd:54: 81:68:bf:f0:d6:01:b7:95:42:12:9f:8b:a3:cd:aa: ff:6c:37:0f:c4:75:02:6a:39:91:81:9d:26:a1:13: b2:e7:3b:dc:9f:cd:de:69:c2:9d:61:06:d4:a4:8c: 0e:22:16:49:7c:94:02:d6:c8:a3:8e:19:f6:cf:09: aa:31:fe:41:b4:46:7a:63:29:af:de:64:0e:54:0f: 8e:79:7d:4d:d8:d3:d5:da:e2:8a:3b:99:1c:4f:5e: 0f:f0:7d:0c:97:24:fb:34:a4:6e:fe:87:2f:ec:01: 2b:4e:ee:8f:66:e7:6d:7d:96:16:00:0e:c5:0f:a6: d8:22:e2:44:a4:3a:86:f7:75:20:cd:49:9a:fd:e6: b9:fc:a4:f4:53:e3:18:06:c4:a4:6e:90:0b:eb:91: 92:cf:7a:92:c7:1e:69:07:69:09:da:7c:85:db:ad: db:01:0b:70:2e:a6:a6:27:21:85:44:2a:2b:31:37: 74:89:82:5b:13:ed:92:83:bb:37:3a:70:a1:ee:c9: 85:71:76:1d:de:de:98:fd:c6:9d:17:ab:b2:0f:67: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:86:95:86:C9:10:E7:5A:84:B7:55:D0:B1:EE:DF:B0:2D:A5:4E X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:b9:f1:d6:53:f6:f5:27:be:62:9d:e8:a3:94:02:f5:95:d3: e4:ff:fb:2b:97:7f:a8:0d:ad:e3:78:b1:eb:81:f5:0f:30:2a: 9f:cb:98:de:67:45:04:9b:8d:1f:32:2c:fd:86:d2:5b:d8:16: 65:8d:8b:1b:35:c4:c1:06:9f:0b:97:30:a0:89:86:61:7f:4a: 93:a6:3d:bf:14:3c:c9:3b:41:c9:c3:b6:57:0f:46:85:59:37: fb:3b:e5:67:ef:fe:6d:43:af:55:75:a5:82:8b:45:be:4d:a2: 23:4f:ea:26:83:ba:bc:dd:4b:d2:17:64:c4:8e:4d:c9:b5:9e: 63:f4:bc:60:cf:8a:c3:65:8e:63:55:33:5f:d6:e8:4c:fc:c4: d1:0c:c4:b6:a1:fb:a3:47:c2:87:85:36:23:8e:e3:83:36:fc: 07:79:ee:35:d9:60:04:6c:09:fb:f9:f1:e5:85:9a:ef:dd:cc: 7a:df:e0:6e:4b:32:82:55:4b:e8:3a:cc:f2:9a:7f:6e:56:2a: 88:5c:75:d4:60:5d:90:c2:96:17:cb:0c:a5:f0:4f:be:2a:41: 51:d0:c0:0f:a3:ca:97:e2:5d:bb:a9:4f:4d:8c:09:fe:9d:25: 05:c3:73:51:4b:14:17:78:90:07:6f:93:b1:c8:cc:30:fa:26: 12:1e:b9:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUwODIzMDYwMzQwWhcNMjUwODMwMDYwMzQwWjAYMRYwFAYD VQQDEw02OGE5NTliZC1kMjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAwv2ZirqUIkpScwxY5ad59dFdU4l/d3HnHe1y6rp9Oku5MSoQzf3xUJzVSB aL/w1gG3lUISn4ujzar/bDcPxHUCajmRgZ0moROy5zvcn83eacKdYQbUpIwOIhZJ fJQC1sijjhn2zwmqMf5BtEZ6Yymv3mQOVA+OeX1N2NPV2uKKO5kcT14P8H0MlyT7 NKRu/ocv7AErTu6PZudtfZYWAA7FD6bYIuJEpDqG93UgzUma/ea5/KT0U+MYBsSk bpAL65GSz3qSxx5pB2kJ2nyF263bAQtwLqamJyGFRCorMTd0iYJbE+2Sg7s3OnCh 7smFcXYd3t6Y/cadF6uyD2cDJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiqhpWG yRDnWoS3VdCx7t+wLaVOMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgufHWU/b1J75ineijlAL1ldPk//srl3+oDa3jeLHrgfUPMCqfy5je Z0UEm40fMiz9htJb2BZljYsbNcTBBp8LlzCgiYZhf0qTpj2/FDzJO0HJw7ZXD0aF WTf7O+Vn7/5tQ69VdaWCi0W+TaIjT+omg7q83UvSF2TEjk3JtZ5j9Lxgz4rDZY5j VTNf1uhM/MTRDMS2ofujR8KHhTYjjuODNvwHee412WAEbAn7+fHlhZrv3cx63+Bu SzKCVUvoOszymn9uViqIXHXUYF2QwpYXywyl8E++KkFR0MAPo8qX4l27qU9NjAn+ nSUFw3NRSxQXeJAHb5OxyMww+iYSHrkW -----END CERTIFICATE-----Generated at Sun Aug 24 00:13:30 2025 by rpki-client