$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: WcxnZbntdMN3F/HkqzLtYNfLp7ZeG5i3V5xYjgASDC8= Subject key identifier: FC:90:2D:7F:D6:AC:7D:64:E6:FC:71:32:5D:87:3C:B5:FB:0B:0F:56 Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 135A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 1331 Signing time: Tue 08 Apr 2025 14:59:12 +0000 Manifest this update: Tue 08 Apr 2025 14:59:12 +0000 Manifest next update: Tue 15 Apr 2025 14:59:12 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: LUtajZBZKFRMgWgziwowAXpYUj8pSg8f/zn9LIVq5G4=) 2: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 3: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 4: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 5: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 6: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 7: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 14:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4954 (0x135a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A Validity Not Before: Apr 8 14:59:12 2025 GMT Not After : Apr 15 14:59:12 2025 GMT Subject: CN=67f539c0-1b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:b7:fa:a3:35:79:8f:62:84:78:7b:0f:37: 6c:e4:3d:f3:f6:29:de:7a:42:6d:01:7d:75:f9:2a: 80:c8:9e:34:8d:52:79:e9:fa:49:c0:e4:6e:5a:4c: 9f:ca:a3:db:1a:15:98:08:93:ba:e5:96:6a:01:e6: 58:07:60:f4:50:7a:33:85:46:a0:12:7b:1f:ed:56: 71:01:04:59:d7:fe:dc:3d:72:29:80:11:4e:a0:a3: 5e:2b:cc:53:91:45:d0:e0:01:1e:54:ab:e7:2f:99: 00:79:af:ed:e0:18:1a:c9:05:cd:7e:ed:52:a9:c4: da:bf:84:3a:b1:b1:05:6a:13:45:2b:4c:01:c7:89: 38:da:c8:05:bc:28:cd:a4:82:e3:27:01:bd:3e:b8: 8c:1d:ca:81:32:98:de:97:cb:0d:6b:92:cd:3b:32: f0:28:7b:68:29:de:8e:48:d9:4b:9c:0b:82:ad:17: fc:9c:8c:01:88:a6:99:30:9c:76:46:c0:78:17:87: 8b:13:5f:84:f1:f2:f4:e7:19:86:3e:46:48:ff:a7: f1:39:7b:26:7a:de:2d:7d:8c:6a:fb:3c:b5:fd:f0: c4:32:91:8b:f2:ca:49:d2:e3:96:0a:ea:7d:57:51: 31:84:7f:50:2f:7b:d7:cb:11:a0:59:ce:f3:91:d4: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:2D:7F:D6:AC:7D:64:E6:FC:71:32:5D:87:3C:B5:FB:0B:0F:56 X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:9a:a8:04:a9:74:c2:bc:5f:3d:23:63:fb:96:3b:9f:41:a9: 31:0d:72:5f:78:9d:b0:3c:e9:68:b9:96:a8:10:31:4a:95:78: 5c:f0:02:69:9a:e3:1e:70:1c:aa:a2:af:88:6f:6c:15:25:60: d4:c4:ca:33:d3:f1:40:bc:ee:9b:f9:92:c2:1a:6f:9f:e4:4c: 4c:83:6d:15:67:0c:81:37:61:62:5b:b7:82:e7:d6:47:56:bf: f9:08:0b:7d:5a:62:d7:5a:f4:22:e1:41:60:08:36:0f:db:88: 65:20:e6:0f:41:3e:1a:be:a3:ce:06:3d:c9:dc:0a:7c:8a:df: c6:4f:17:64:a7:92:c1:ac:98:36:c8:a1:b1:54:24:e0:91:3f: 47:02:74:eb:96:57:a9:dd:02:b8:9e:5c:60:e9:5d:18:12:2d: 81:36:43:9d:71:40:6e:c4:5c:36:aa:32:a5:9a:dc:95:b8:13: cf:2c:19:19:fe:ce:6b:3d:ff:44:5c:27:69:7f:67:3f:db:09: 25:36:af:11:de:96:7c:f1:f2:7f:c5:40:06:02:86:4b:c8:56: bb:65:1b:27:ed:ea:60:e5:f9:1f:a4:79:ef:b0:f1:60:63:03: dc:fa:08:d2:22:a0:05:46:20:9a:be:4b:80:07:ec:9a:f0:27: 1d:5c:20:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNDA4MTQ1OTEyWhcNMjUwNDE1MTQ1OTEyWjAYMRYwFAYD VQQDEw02N2Y1MzljMC0xYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGy3+qM1eY9ihHh7Dzds5D3z9ineekJtAX11+SqAyJ40jVJ56fpJwORuWkyf yqPbGhWYCJO65ZZqAeZYB2D0UHozhUagEnsf7VZxAQRZ1/7cPXIpgBFOoKNeK8xT kUXQ4AEeVKvnL5kAea/t4BgayQXNfu1SqcTav4Q6sbEFahNFK0wBx4k42sgFvCjN pILjJwG9PriMHcqBMpjel8sNa5LNOzLwKHtoKd6OSNlLnAuCrRf8nIwBiKaZMJx2 RsB4F4eLE1+E8fL05xmGPkZI/6fxOXsmet4tfYxq+zy1/fDEMpGL8spJ0uOWCup9 V1ExhH9QL3vXyxGgWc7zkdTsVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyQLX/W rH1k5vxxMl2HPLX7Cw9WMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmmqgEqXTCvF89I2P7ljufQakxDXJfeJ2wPOlouZaoEDFKlXhc8AJp muMecByqoq+Ib2wVJWDUxMoz0/FAvO6b+ZLCGm+f5ExMg20VZwyBN2FiW7eC59ZH Vr/5CAt9WmLXWvQi4UFgCDYP24hlIOYPQT4avqPOBj3J3Ap8it/GTxdkp5LBrJg2 yKGxVCTgkT9HAnTrllep3QK4nlxg6V0YEi2BNkOdcUBuxFw2qjKlmtyVuBPPLBkZ /s5rPf9EXCdpf2c/2wklNq8R3pZ88fJ/xUAGAoZLyFa7ZRsn7epg5fkfpHnvsPFg YwPc+gjSIqAFRiCavkuAB+ya8CcdXCCC -----END CERTIFICATE-----Generated at Fri Apr 11 15:28:14 2025 by rpki-client