$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: ehLFepJ/77RjLY/KBJcloV9XBGUlP4evxxowcsh3BYg= Subject key identifier: 72:45:F2:EB:F7:EF:30:E5:CE:B4:08:0B:8F:07:FB:C3:53:CB:E1:5B Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 1391 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 1367 Signing time: Tue 22 Jul 2025 14:58:40 +0000 Manifest this update: Tue 22 Jul 2025 14:58:39 +0000 Manifest next update: Tue 29 Jul 2025 14:58:39 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: CZhi9RBAlf8HrEFwSP4Aglr7E5kZv0QPiQjTJ/7gLYs=) 2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=) 3: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 7: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) 9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 14:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5009 (0x1391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Jul 22 14:58:39 2025 GMT Not After : Jul 29 14:58:39 2025 GMT Subject: CN=687fa71f-bf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:58:5f:0a:14:d0:58:78:90:4f:66:84:a6: c9:13:6d:af:b5:7b:71:f2:7f:b7:1c:ea:c5:9c:f4: 58:5d:ba:4c:73:91:1d:4c:5a:7d:a2:96:2b:5b:1f: 52:ac:d0:6b:4b:2b:b5:ea:9c:26:a4:30:a9:bd:96: ad:28:73:2f:55:51:cc:0d:a9:19:b9:69:83:d1:93: 0a:47:d4:16:79:d4:21:5a:9d:38:80:2a:7a:39:f7: ef:98:be:ee:ed:da:74:a5:0d:8a:52:2c:55:cf:c6: e5:46:c3:c8:09:3f:32:d2:37:7b:4a:aa:8d:92:13: ba:13:5c:ce:ae:51:9b:95:62:fe:c5:45:03:97:66: fe:f3:05:ce:a1:d9:02:1d:b6:3e:9f:e7:dc:1e:21: 70:cc:b4:d6:db:9d:0f:68:b9:53:94:a3:64:1a:98: fe:07:e1:9c:25:eb:0a:e3:fb:c6:4a:5f:ff:ba:7a: 6a:78:32:11:3d:be:fb:88:c5:cd:82:6c:26:1d:e8: 42:89:23:02:9b:be:06:23:a2:dd:08:cd:db:9f:e0: 0c:81:f5:5e:d1:56:5d:39:f2:34:ea:ad:45:82:8b: b4:8b:cd:40:ae:72:e9:a8:4d:91:7b:31:01:54:88: e3:5d:25:06:28:c8:77:41:78:f3:10:55:f8:30:e0: da:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:45:F2:EB:F7:EF:30:E5:CE:B4:08:0B:8F:07:FB:C3:53:CB:E1:5B X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:9d:f9:44:b2:91:f0:e4:b8:00:86:60:84:ef:23:41:10:bd: 76:bb:1e:c3:dc:88:40:43:9c:d3:9f:c0:cc:80:36:4c:c2:b2: 70:9c:25:45:e4:5c:b1:1d:14:8b:11:f2:a5:39:8b:c4:93:ce: 67:16:dc:99:4a:99:5a:66:b8:78:3e:cf:ee:20:97:13:dd:e3: d1:e6:09:84:a7:d4:0b:18:2d:7c:74:c1:34:bb:fa:a7:b2:dd: 5f:28:d0:f8:c2:ec:72:e7:85:21:1d:f6:81:17:0d:be:33:94: 5d:73:10:be:2a:fd:19:df:df:6c:ec:e4:94:1a:52:38:8a:69: 22:7d:ea:ca:e5:58:c3:2a:6a:14:ae:9d:d9:70:a5:6f:9c:9a: 12:cd:ef:6d:e5:c0:96:7a:70:c1:f8:98:63:87:3c:72:7a:2b: 1c:fb:2c:03:c9:24:02:9c:43:ea:86:64:49:77:08:e3:2a:f4: 21:ad:3d:ac:2d:6b:41:95:6f:58:2b:16:5e:38:07:9a:cd:6c: f2:0f:e5:80:dd:60:70:06:6f:2c:c5:8c:8a:87:a6:4d:a5:e4: 8f:5b:5c:6b:23:54:71:65:19:e9:45:8f:d9:44:2b:7c:af:85: 8e:19:e7:85:f2:48:db:6c:f4:bc:8e:9c:d6:78:f8:dc:30:e2: d0:d8:88:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNzIyMTQ1ODM5WhcNMjUwNzI5MTQ1ODM5WjAYMRYwFAYD VQQDEw02ODdmYTcxZi1iZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztxYXwoU0Fh4kE9mhKbJE22vtXtx8n+3HOrFnPRYXbpMc5EdTFp9opYrWx9S rNBrSyu16pwmpDCpvZatKHMvVVHMDakZuWmD0ZMKR9QWedQhWp04gCp6OffvmL7u 7dp0pQ2KUixVz8blRsPICT8y0jd7SqqNkhO6E1zOrlGblWL+xUUDl2b+8wXOodkC HbY+n+fcHiFwzLTW250PaLlTlKNkGpj+B+GcJesK4/vGSl//unpqeDIRPb77iMXN gmwmHehCiSMCm74GI6LdCM3bn+AMgfVe0VZdOfI06q1Fgou0i81ArnLpqE2RezEB VIjjXSUGKMh3QXjzEFX4MODa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJF8uv3 7zDlzrQIC48H+8NTy+FbMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPnflEspHw5LgAhmCE7yNBEL12ux7D3IhAQ5zTn8DMgDZMwrJwnCVF 5FyxHRSLEfKlOYvEk85nFtyZSplaZrh4Ps/uIJcT3ePR5gmEp9QLGC18dME0u/qn st1fKND4wuxy54UhHfaBFw2+M5RdcxC+Kv0Z399s7OSUGlI4imkiferK5VjDKmoU rp3ZcKVvnJoSze9t5cCWenDB+Jhjhzxyeisc+ywDySQCnEPqhmRJdwjjKvQhrT2s LWtBlW9YKxZeOAeazWzyD+WA3WBwBm8sxYyKh6ZNpeSPW1xrI1RxZRnpRY/ZRCt8 r4WOGeeF8kjbbPS8jpzWePjcMOLQ2IhQ -----END CERTIFICATE-----Generated at Thu Jul 24 12:24:05 2025 by rpki-client