$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: eYBNmOP/OJ5YCMeMZiRcLTOsiwm8utuQNgLKmGCcBqo= Subject key identifier: 3C:47:D3:77:12:DE:82:5E:EE:2B:63:B4:06:A6:5F:66:7B:C5:24:70 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B50 Signing time: Sat 06 Sep 2025 19:27:17 +0000 Manifest this update: Sat 06 Sep 2025 19:27:17 +0000 Manifest next update: Sat 13 Sep 2025 19:27:17 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: cLb+E2pyO/kF9BiCg0iYyspFhKKSRhU8nZ3W23kMdro=) 2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=) 3: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2963 (0xb93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Sep 6 19:27:17 2025 GMT Not After : Sep 13 19:27:17 2025 GMT Subject: CN=68bc8b15-8d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:d8:1a:d2:58:82:bf:88:81:57:2b:9c:29: e1:11:f4:27:ca:f9:bd:ad:70:d3:c7:b7:dd:93:ba: b0:c3:0d:87:5d:58:f7:9a:16:38:78:c7:30:1f:de: c7:6f:18:ab:eb:bc:c3:15:b9:ea:eb:fc:61:48:2b: 5f:73:f4:c6:87:5d:1c:90:46:a7:ce:60:c4:1f:0b: c0:bc:0e:29:b3:bc:73:b2:b0:25:ae:a3:97:02:a7: 75:37:44:e3:49:96:3a:05:c1:2d:59:aa:eb:29:ef: e9:bc:30:a4:8f:67:26:40:50:30:08:43:ea:f1:25: 98:e7:01:4e:df:80:be:c8:29:9a:e4:22:0a:a4:73: 0c:a6:bc:13:91:8a:7b:ca:01:c4:30:68:72:91:76: eb:3f:ae:47:52:52:05:4f:72:77:20:3e:27:b6:e0: ca:d0:34:9e:6b:83:64:2c:eb:01:9c:3e:24:e3:b5: 89:2f:60:02:c1:22:3e:db:c6:24:71:06:ae:e2:7f: 81:a8:19:b1:60:ed:5c:5e:dd:36:b3:35:e6:2c:ac: 3c:5c:42:ed:61:32:32:41:fc:b5:0d:7a:7c:2b:4c: a3:fb:f2:6e:80:9d:da:d8:03:16:06:cc:a6:97:12: b2:a2:c5:66:0b:d9:7e:35:f0:e1:aa:21:c4:2f:8f: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:47:D3:77:12:DE:82:5E:EE:2B:63:B4:06:A6:5F:66:7B:C5:24:70 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a4:0d:0e:ab:da:84:c1:99:6b:02:47:f0:1f:a2:cc:f6:c3: ab:de:03:27:32:f6:bd:12:1b:c3:fa:ba:47:8a:94:e1:fc:5e: 67:8c:5f:31:c8:fa:d3:d0:b3:81:dc:d5:3a:58:5f:f2:5f:17: d0:70:9f:14:6b:8b:32:da:63:5b:55:77:35:9d:99:23:23:55: 5a:72:04:b4:3a:65:bf:2e:71:56:68:08:c7:e9:61:da:76:41: 91:de:93:f9:b8:ba:dc:1c:25:f1:74:a1:66:71:4f:b5:a3:c0: e1:75:59:70:3d:a6:79:17:c4:77:4a:90:c7:74:2c:cf:64:96: 8c:f0:6b:ea:b4:29:66:55:76:dd:29:2a:6f:7a:89:06:cd:5e: 07:a3:1c:ba:99:4d:78:d5:29:1e:04:1c:47:48:2a:1f:0b:b1: c5:26:e7:96:62:1a:e3:8c:7f:68:d4:85:7d:48:24:79:3d:da: 23:8c:5e:e9:b8:27:f2:ad:69:90:32:8b:c2:69:76:50:78:14: fe:09:c9:6a:51:40:ee:6f:1b:d1:9e:56:ac:58:2a:67:63:c7: 3b:de:9a:5d:a6:14:25:8f:0a:29:9f:4a:a3:e9:24:95:6b:c1: b6:d9:d3:e5:65:84:4c:47:ed:0b:ca:bd:1d:83:8f:6f:ea:c0: af:a4:38:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwOTA2MTkyNzE3WhcNMjUwOTEzMTkyNzE3WjAYMRYwFAYD VQQDEw02OGJjOGIxNS04ZDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvszYGtJYgr+IgVcrnCnhEfQnyvm9rXDTx7fdk7qwww2HXVj3mhY4eMcwH97H bxir67zDFbnq6/xhSCtfc/TGh10ckEanzmDEHwvAvA4ps7xzsrAlrqOXAqd1N0Tj SZY6BcEtWarrKe/pvDCkj2cmQFAwCEPq8SWY5wFO34C+yCma5CIKpHMMprwTkYp7 ygHEMGhykXbrP65HUlIFT3J3ID4ntuDK0DSea4NkLOsBnD4k47WJL2ACwSI+28Yk cQau4n+BqBmxYO1cXt02szXmLKw8XELtYTIyQfy1DXp8K0yj+/JugJ3a2AMWBsym lxKyosVmC9l+NfDhqiHEL4++RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxH03cS 3oJe7itjtAamX2Z7xSRwMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZpA0Oq9qEwZlrAkfwH6LM9sOr3gMnMva9EhvD+rpHipTh/F5njF8x yPrT0LOB3NU6WF/yXxfQcJ8Ua4sy2mNbVXc1nZkjI1VacgS0OmW/LnFWaAjH6WHa dkGR3pP5uLrcHCXxdKFmcU+1o8DhdVlwPaZ5F8R3SpDHdCzPZJaM8GvqtClmVXbd KSpveokGzV4Hoxy6mU141SkeBBxHSCofC7HFJueWYhrjjH9o1IV9SCR5PdojjF7p uCfyrWmQMovCaXZQeBT+CclqUUDubxvRnlasWCpnY8c73ppdphQljwopn0qj6SSV a8G22dPlZYRMR+0Lyr0dg49v6sCvpDi1 -----END CERTIFICATE-----Generated at Mon Sep 8 08:44:34 2025 by rpki-client