$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft File: WAVTuIPew92yT2iObC0b-pPCY6o.mft (raw, json) Hash identifier: DjwDDHzpDSkpMVr6LW9cTrVQDn+2/z7Ea92uXCWupGw= Subject key identifier: 0E:DE:DA:EC:6A:A9:4C:78:02:66:52:C7:A8:08:E9:18:EF:75:21:C0 Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft Manifest number: 0B68 Signing time: Fri 24 Oct 2025 19:53:49 +0000 Manifest this update: Fri 24 Oct 2025 19:53:48 +0000 Manifest next update: Fri 31 Oct 2025 19:53:48 +0000 Files and hashes: 1: WAVTuIPew92yT2iObC0b-pPCY6o.crl (hash: ckkBnJdaS7Y6o8uPXuk+aoe3sJK7lKO0vw2iyZQvBR4=) 2: 91C771A2D02111EA843F372FC4F9AE02.roa (hash: 2WI4sxtYmY5FbIMN92teU/BhJO18tsufNaqCJaxaAYc=) 3: 04231ECC326F11F0B0723439C4F9AE02.roa (hash: wpvZSX4Ai883Xdr1hC5KTmB0OUTHuAgLOOQUpAhUGNw=) 4: 64B67878AE7711EA98E12731C4F9AE02.roa (hash: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8=) 5: A6E747F89A3A11ECB43ED422C4F9AE02.roa (hash: 59n+gu+EUda4F6OyRblddZCM/Oz6PZd0iuMKXNtGtAQ=) 6: FAA6AEE45F6C11EE8C65650FC4F9AE02.roa (hash: bv9UqKRpe2dK9awx88ukTzuBQtbCq2A6so4i83ApdUU=) 7: CA9C62B6011911F0A7636250C4F9AE02.roa (hash: 7ysdJMJMSfwY+oJifcqCNWD3yAzN5pEUaePQMVaSij8=) 8: 89E1ED764CC111EE87453D77C4F9AE02.roa (hash: lGL0VdzbPRk7U+2MSj/Z4BFvq55DtucvPe+Abmi+lZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Oct 24 19:53:48 2025 GMT Not After : Oct 31 19:53:48 2025 GMT Subject: CN=68fbd94c-61cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:a4:02:ac:ce:1b:0d:16:bd:68:cd:ad:1a: d5:f7:2e:e7:0b:08:4a:e8:f3:69:12:0a:54:b4:59: 31:b6:cf:6f:60:cf:d8:46:92:58:27:4a:89:1f:2e: a2:63:59:98:a7:d7:a8:e3:eb:ec:ab:ea:85:54:0f: 20:ca:e8:1e:cf:92:2b:40:84:ea:3b:86:f7:87:4c: 3b:d3:df:5a:bb:36:1a:af:05:00:5a:4d:cd:bc:55: 44:a7:79:69:5a:0f:ed:57:d0:43:30:1f:f6:40:89: 6c:65:70:8e:80:03:c4:3b:a5:dd:25:d0:44:2f:d2: 22:92:bb:04:54:24:a6:2a:4d:8e:8b:ce:04:e9:6c: 35:fe:42:ee:49:3f:d6:97:3f:87:a7:8a:bb:2d:1a: 0b:8f:f1:48:e5:94:99:b2:90:ba:25:cc:ca:5e:09: 8c:f4:f3:9e:cf:d0:4c:da:e1:36:cf:29:5a:81:c8: 72:52:fc:4a:65:10:9e:17:f8:b4:b3:b2:07:6b:58: 13:77:d0:b0:71:75:bf:e1:52:a1:b5:6b:bf:cb:2e: be:c3:00:52:16:1a:52:62:29:30:47:08:72:08:4b: e6:2a:06:ee:28:a7:6b:c9:51:b6:51:bc:c5:3d:c1: 36:8a:1e:20:5c:6a:c7:01:9c:18:cb:33:28:9d:01: 7f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:DA:EC:6A:A9:4C:78:02:66:52:C7:A8:08:E9:18:EF:75:21:C0 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:80:dd:d2:03:4c:ec:3d:8d:02:04:2e:14:06:d9:2f:80:b0: d0:8a:2f:df:91:25:eb:f2:8f:99:66:1c:67:09:f3:8e:05:d2: af:0d:3f:1a:b9:5c:6f:19:c0:7e:07:88:06:75:73:fe:80:8e: c2:a0:3c:db:4d:81:38:46:75:ca:85:3b:e2:bf:e3:ee:5d:21: 16:81:91:ce:03:f4:0c:84:81:7f:84:b9:72:ee:cb:14:a7:e1: 80:5d:bf:b2:99:bf:59:07:9e:b8:9a:3f:e4:4f:8c:53:89:ad: 9c:c5:9c:35:df:1b:18:67:4f:ad:a0:68:9a:0f:8b:b4:5b:3e: 5f:ea:d1:d6:1a:16:b6:57:f8:f6:b5:df:d2:b2:ca:a0:c9:98: cc:ff:f1:3e:de:63:13:48:1c:b0:59:27:eb:70:dc:de:83:1b: e2:1f:2a:4d:83:b6:77:a2:a1:cd:9d:20:87:dc:98:e3:5a:a2: c0:36:c8:d0:93:f8:cb:e0:83:43:54:3e:bf:e9:06:4a:b5:ec: 0b:a2:ac:a7:01:2e:7f:83:96:b2:83:51:7a:f9:42:e1:c5:d7: b8:9d:46:6a:0a:76:d4:28:02:75:ce:cc:b3:da:76:bc:f2:ad: 86:c3:69:2c:12:ab:05:23:59:5e:01:d7:92:70:5f:36:94:76: 97:85:bf:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUxMDI0MTk1MzQ4WhcNMjUxMDMxMTk1MzQ4WjAYMRYwFAYD VQQDEw02OGZiZDk0Yy02MWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspOkAqzOGw0WvWjNrRrV9y7nCwhK6PNpEgpUtFkxts9vYM/YRpJYJ0qJHy6i Y1mYp9eo4+vsq+qFVA8gyugez5IrQITqO4b3h0w7099auzYarwUAWk3NvFVEp3lp Wg/tV9BDMB/2QIlsZXCOgAPEO6XdJdBEL9IikrsEVCSmKk2Oi84E6Ww1/kLuST/W lz+Hp4q7LRoLj/FI5ZSZspC6JczKXgmM9POez9BM2uE2zylagchyUvxKZRCeF/i0 s7IHa1gTd9CwcXW/4VKhtWu/yy6+wwBSFhpSYikwRwhyCEvmKgbuKKdryVG2UbzF PcE2ih4gXGrHAZwYyzMonQF/4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7e2uxq qUx4AmZSx6gI6RjvdSHAMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9BMzc0QTFCNjQ2NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5 MnlUMmlPYkMwYi1wUENZNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlgN3SA0zsPY0CBC4UBtkvgLDQii/fkSXr8o+ZZhxnCfOOBdKvDT8a uVxvGcB+B4gGdXP+gI7CoDzbTYE4RnXKhTviv+PuXSEWgZHOA/QMhIF/hLly7ssU p+GAXb+ymb9ZB564mj/kT4xTia2cxZw13xsYZ0+toGiaD4u0Wz5f6tHWGha2V/j2 td/SssqgyZjM//E+3mMTSBywWSfrcNzegxviHypNg7Z3oqHNnSCH3JjjWqLANsjQ k/jL4INDVD6/6QZKtewLoqynAS5/g5ayg1F6+ULhxde4nUZqCnbUKAJ1zsyz2na8 8q2Gw2ksEqsFI1leAdeScF82lHaXhb8q -----END CERTIFICATE-----Generated at Sat Oct 25 08:53:30 2025 by rpki-client