$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: 4yQD717L+oiEtg/jTtCReVXUbFNMBalFimjwYnAubuE= Subject key identifier: A5:04:17:49:18:49:B4:6D:5E:BB:FB:E3:D8:E0:C1:5A:E3:5C:7E:C1 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B19 Signing time: Fri 30 May 2025 19:33:58 +0000 Manifest this update: Fri 30 May 2025 19:33:57 +0000 Manifest next update: Fri 06 Jun 2025 19:33:57 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: s6M8VU/u+TYIrgZ/T5ikBcO9+nTJLF1frl9dBvlkcsY=) 2: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: thphz9NCmSOYT7NGHErxiiKjTWp6caTDH+8orak5Xqc=) 3: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: aRceLWJKUcKLo5PR7+NR0vevgsQeIIozPpK4yxpso68=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: iquZHjCE4/Qw/4vvKK8+uSPsTNr1m+HxauH9ZmtALJ4=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: widrlSBflwKa5cPhRuUBG9ePUJ0Q7GU99keGJenritI=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: NdPZ57ZKycOHouK01+ZOfbmPKtj5MxKNGMw+rowaWDE=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: TkFlKbRc5DRwjd6c06mswpd/RwtK/5VG1Y75IO7usZE=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: dyBuRF0L4k6t4ChH+kLE8IpmRvwCrRtPJ3LxkBtN1Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2894 (0xb4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: May 30 19:33:57 2025 GMT Not After : Jun 6 19:33:57 2025 GMT Subject: CN=683a0825-e47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:48:d5:d6:85:08:ac:1b:07:64:cf:0e:23:83: 85:21:93:e6:0e:9b:bd:0e:03:44:80:c5:80:47:72: 53:8d:74:e2:e8:ad:d1:00:13:63:4e:f2:a0:79:37: 78:c2:ca:fa:26:6c:1f:f9:f8:fc:aa:af:d6:81:c8: d4:0d:25:03:77:92:84:0d:5c:8b:9b:62:96:e7:b7: 6b:d8:eb:95:32:bd:68:a0:f8:66:74:a4:66:b1:28: ef:00:6a:54:fe:21:54:9f:50:02:62:3f:c7:8c:6d: 95:3d:fe:d0:66:f0:de:8a:0b:c2:6d:34:3d:2f:d1: 9b:61:35:22:8b:47:d2:66:77:8c:da:b8:cd:1a:a4: 58:dc:51:97:4b:16:28:02:3b:30:75:b3:bf:68:8b: 11:89:34:1f:09:93:8a:5b:09:41:a9:a9:81:3a:26: 3e:17:89:cc:ba:5f:fb:2e:a3:2d:3a:7e:72:1b:e3: 1a:f5:f7:9c:97:c3:fc:65:fa:59:78:15:86:df:95: fb:2c:06:cc:b9:1d:9d:ad:b8:52:9c:db:d1:9c:18: b6:0a:a9:0e:b5:3a:7f:3b:a3:de:fe:4a:93:52:06: 2c:bf:e4:cd:95:ef:8a:0b:a0:9e:f0:24:48:43:bd: ae:48:da:43:c4:38:fa:86:40:8a:c2:9b:fa:69:09: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:17:49:18:49:B4:6D:5E:BB:FB:E3:D8:E0:C1:5A:E3:5C:7E:C1 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7e:07:55:b7:e4:19:d1:d6:49:a8:8c:5e:62:1b:2c:b0:81: 62:e7:3d:36:9b:b9:77:41:68:90:76:64:7d:90:39:50:08:d2: 0a:de:08:67:8f:45:5d:46:6b:e2:2a:b0:43:11:48:e3:06:f6: f5:c4:7f:8f:4d:8b:cc:ed:cc:d5:c7:44:9e:96:74:df:53:a1: a4:b9:bb:97:70:1c:f1:76:75:5b:f5:56:b4:c3:c5:36:77:e0: ee:60:96:2f:16:f3:a2:32:59:3f:77:ae:da:0c:9d:00:4e:17: 03:28:d8:1b:17:99:ee:f8:63:88:bb:6d:21:29:46:81:5c:bb: 3b:18:ae:cf:ea:71:75:88:87:6f:b1:27:ff:e5:37:7e:df:00: 4d:6b:1a:85:07:76:2f:53:05:20:4a:b0:61:8e:5e:df:26:56: 2e:93:6c:8d:5c:14:35:3f:3e:e9:80:27:7c:a0:7a:98:f5:6d: 25:a6:f7:5e:b3:c6:0a:f4:40:bd:36:b0:89:d8:a4:be:60:7e: 02:40:ce:1c:ae:fb:01:76:0c:6d:53:42:95:8e:87:b7:9f:4f: 85:16:b0:71:3b:b6:fc:ea:9a:f1:8d:11:0f:29:0f:58:cc:0f: 9d:60:8c:a4:d5:db:be:cc:a8:5e:58:40:4f:c1:db:af:74:1d: e7:af:80:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwNTMwMTkzMzU3WhcNMjUwNjA2MTkzMzU3WjAYMRYwFAYD VQQDEw02ODNhMDgyNS1lNDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEjV1oUIrBsHZM8OI4OFIZPmDpu9DgNEgMWAR3JTjXTi6K3RABNjTvKgeTd4 wsr6Jmwf+fj8qq/WgcjUDSUDd5KEDVyLm2KW57dr2OuVMr1ooPhmdKRmsSjvAGpU /iFUn1ACYj/HjG2VPf7QZvDeigvCbTQ9L9GbYTUii0fSZneM2rjNGqRY3FGXSxYo AjswdbO/aIsRiTQfCZOKWwlBqamBOiY+F4nMul/7LqMtOn5yG+Ma9fecl8P8ZfpZ eBWG35X7LAbMuR2drbhSnNvRnBi2CqkOtTp/O6Pe/kqTUgYsv+TNle+KC6Ce8CRI Q72uSNpDxDj6hkCKwpv6aQnqGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUEF0kY SbRtXrv749jgwVrjXH7BMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcfgdVt+QZ0dZJqIxeYhsssIFi5z02m7l3QWiQdmR9kDlQCNIK3ghn j0VdRmviKrBDEUjjBvb1xH+PTYvM7czVx0SelnTfU6GkubuXcBzxdnVb9Va0w8U2 d+DuYJYvFvOiMlk/d67aDJ0AThcDKNgbF5nu+GOIu20hKUaBXLs7GK7P6nF1iIdv sSf/5Td+3wBNaxqFB3YvUwUgSrBhjl7fJlYuk2yNXBQ1Pz7pgCd8oHqY9W0lpvde s8YK9EC9NrCJ2KS+YH4CQM4crvsBdgxtU0KVjoe3n0+FFrBxO7b86prxjREPKQ9Y zA+dYIyk1du+zKheWEBPwduvdB3nr4BU -----END CERTIFICATE-----Generated at Sat May 31 16:28:38 2025 by rpki-client