$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: OxdNge5Bxkx4hP51rDWOauAIXT7hwGHD6vDtqkMuywc= Subject key identifier: 3B:FF:1F:0C:56:C2:0F:2D:E8:82:BC:AF:04:9A:66:73:5B:7D:0E:84 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B33 Signing time: Sun 20 Jul 2025 19:25:09 +0000 Manifest this update: Sun 20 Jul 2025 19:25:08 +0000 Manifest next update: Sun 27 Jul 2025 19:25:08 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: EvVkC+60IH6ckLn5WOW5FUNBcjtoiQOF4NVPlAu4EtI=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: thphz9NCmSOYT7NGHErxiiKjTWp6caTDH+8orak5Xqc=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: iquZHjCE4/Qw/4vvKK8+uSPsTNr1m+HxauH9ZmtALJ4=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: dyBuRF0L4k6t4ChH+kLE8IpmRvwCrRtPJ3LxkBtN1Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Jul 20 19:25:08 2025 GMT Not After : Jul 27 19:25:08 2025 GMT Subject: CN=687d4294-25f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:33:be:46:60:84:10:1a:87:6b:52:3e:47: df:67:7f:6f:15:13:fe:a5:03:97:ff:c9:c1:11:b4: 34:06:85:ca:7f:4b:a8:d8:46:dd:a6:94:53:a4:19: ba:e3:23:5b:10:5b:6b:cf:49:e2:2d:a1:81:8e:39: e3:a8:96:de:db:d6:cb:91:6b:0b:9d:0d:29:18:c3: b8:e7:fe:59:78:8e:0a:df:79:db:13:f1:8d:e0:af: b0:6a:14:bc:67:3b:0a:74:db:1a:82:3f:8e:4f:66: 79:1c:f1:6e:23:7a:54:45:69:9a:49:57:66:52:8b: 33:db:59:96:55:32:83:65:bc:c2:c0:ce:4e:33:f2: e4:8c:d6:42:11:8d:26:35:25:74:e2:97:77:16:cc: 2e:91:eb:21:4c:01:70:7e:86:84:89:75:bd:0d:94: 76:ba:c1:a9:67:9c:1e:27:a9:85:2f:89:75:52:88: f2:37:be:20:3c:4c:20:7e:19:37:d1:65:3d:29:e4: 3c:4b:a7:5b:b6:48:52:e4:ab:3b:6d:de:0f:02:5d: b8:a5:30:98:57:19:1d:7e:20:89:29:9c:36:aa:2f: 61:a4:3e:3f:07:b2:04:df:78:ea:a4:fe:01:e0:f4: 1c:0c:40:3b:41:9d:42:3c:db:40:31:c5:c8:39:5b: f4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FF:1F:0C:56:C2:0F:2D:E8:82:BC:AF:04:9A:66:73:5B:7D:0E:84 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:7c:47:6f:6d:1a:d3:4b:c4:83:e6:03:f3:e0:5b:63:7a:2d: a3:c7:b3:a3:1f:2c:82:f0:87:03:02:3c:7d:17:7c:8f:68:15: ff:95:78:1b:5c:d4:b6:8b:38:3d:ad:71:ce:76:9f:90:95:e4: 3b:9d:ec:75:06:85:2f:40:21:d9:a6:4c:09:9c:92:3b:66:1c: d0:71:ee:81:24:4e:22:a1:97:da:31:94:77:28:ba:16:05:d9: ce:e3:7f:1c:78:f3:bd:41:0f:69:96:38:56:c3:47:00:10:aa: fb:ef:81:f2:4c:a7:40:9b:40:d9:3a:f1:5f:e9:b3:56:26:54: da:8c:12:8a:f2:a3:fd:14:da:4d:91:08:ec:59:ee:09:45:10: a7:9f:9e:be:73:43:f0:a8:59:a6:e8:d9:fd:1a:a5:65:88:32: 3a:68:de:1b:be:4e:7a:23:f4:ba:d6:06:69:78:94:38:9f:8f: da:51:5e:d2:8c:bd:45:38:0b:2a:69:f0:ef:9f:f2:36:ce:ac: 8d:36:22:36:3c:18:0a:24:32:76:15:c4:40:ca:1d:32:0d:55: 4b:76:38:12:41:97:21:f8:c4:6b:2d:fb:46:12:3b:8d:d9:7c: c3:71:01:e7:70:00:d7:7a:d9:8b:51:f1:43:97:8a:61:bc:47: 8b:45:12:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNzIwMTkyNTA4WhcNMjUwNzI3MTkyNTA4WjAYMRYwFAYD VQQDEw02ODdkNDI5NC0yNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX0zvkZghBAah2tSPkffZ39vFRP+pQOX/8nBEbQ0BoXKf0uo2EbdppRTpBm6 4yNbEFtrz0niLaGBjjnjqJbe29bLkWsLnQ0pGMO45/5ZeI4K33nbE/GN4K+wahS8 ZzsKdNsagj+OT2Z5HPFuI3pURWmaSVdmUosz21mWVTKDZbzCwM5OM/LkjNZCEY0m NSV04pd3FswukeshTAFwfoaEiXW9DZR2usGpZ5weJ6mFL4l1UojyN74gPEwgfhk3 0WU9KeQ8S6dbtkhS5Ks7bd4PAl24pTCYVxkdfiCJKZw2qi9hpD4/B7IE33jqpP4B 4PQcDEA7QZ1CPNtAMcXIOVv0FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDv/HwxW wg8t6IK8rwSaZnNbfQ6EMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWfEdvbRrTS8SD5gPz4Ftjei2jx7OjHyyC8IcDAjx9F3yPaBX/lXgb XNS2izg9rXHOdp+QleQ7nex1BoUvQCHZpkwJnJI7ZhzQce6BJE4ioZfaMZR3KLoW BdnO438cePO9QQ9pljhWw0cAEKr774HyTKdAm0DZOvFf6bNWJlTajBKK8qP9FNpN kQjsWe4JRRCnn56+c0PwqFmm6Nn9GqVliDI6aN4bvk56I/S61gZpeJQ4n4/aUV7S jL1FOAsqafDvn/I2zqyNNiI2PBgKJDJ2FcRAyh0yDVVLdjgSQZch+MRrLftGEjuN 2XzDcQHncADXetmLUfFDl4phvEeLRRII -----END CERTIFICATE-----Generated at Tue Jul 22 05:50:22 2025 by rpki-client