$ rpki-client -vvf rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft File: WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft (raw, json) Hash identifier: PQOjEAATzot2zEgFCeyDEklwCFLr5PhFSRee84N0Wh8= Subject key identifier: D1:C1:05:6A:E2:21:A8:A4:EC:C9:EC:CD:1F:DC:0E:8E:40:C6:5F:4F Authority key identifier: 59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 Certificate issuer: /CN=A914781A/serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Certificate serial: 1378 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft Manifest number: 134E Signing time: Mon 02 Jun 2025 14:59:12 +0000 Manifest this update: Mon 02 Jun 2025 14:59:11 +0000 Manifest next update: Mon 09 Jun 2025 14:59:11 +0000 Files and hashes: 1: WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl (hash: RhTB1KGMCmiAScjn9Lk/xggjUNLzrWr4EEnUQO0Tqfw=) 2: 0D4D857E3B9211F0857DC432C4F9AE02.roa (hash: 0YA+4PX9JYpc8QBE3JHr5LKBbRzHe9X88/5AFsZZNig=) 3: 069626A6ABC211EA9C9FC06EC4F9AE02.roa (hash: Ia9odNobe+dWh3uoJd1dENgZhirY+vgmKhJvqKgJrVw=) 4: E1982A2EAD7511EA94C97127C4F9AE02.roa (hash: QcX+JJfibmJ10vB/1qukQZesFZiH8h11fVVY2pTUDR4=) 5: 994F0A88D86B11E9B8BFCE0AC4F9AE02.roa (hash: tdnI+KOdNhmgHG0EaIdZJbs7v8BfbY1qAdFe/ckIHKI=) 6: 005D2F8E56B611EAA08F9B82C4F9AE02.roa (hash: 660m80xTZki8ylh8j+pM5SznA/z6+3ERhy9Sd6ExGUY=) 7: E53A0A54450911EBBA450A64C4F9AE02.roa (hash: feexJekN/NDSkCAQIeZYtbVsbTI/ysDPGekXjAR1sEc=) 8: 46CE46B416BF11EBB31D5A6AC4F9AE02.roa (hash: iD2PRHlOwSrAIealn0fu1cXe6nvlmtIZjMf00fYOaTs=) 9: 5BE6FE3ED7A311EF9D214C13C4F9AE02.roa (hash: wgWYzuty+GM3VsiaayvTIFlkcVAcGiHHxoMLNBjrqzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4984 (0x1378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914781A, serialNumber=59314703092845FCBD0BFBAEEF87D83FC66ED1D7 Validity Not Before: Jun 2 14:59:11 2025 GMT Not After : Jun 9 14:59:11 2025 GMT Subject: CN=683dbc40-078e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:96:29:53:63:1f:b4:da:9c:a3:74:f9:6b:e8: 85:b6:81:2c:0f:ce:af:35:e6:2b:09:8c:f1:79:4f: 45:44:25:08:bf:c4:04:15:98:00:5e:d7:33:c3:31: dd:77:3e:65:67:6d:3a:ea:5a:a6:6e:b1:20:bf:19: c0:85:bf:be:78:0a:5a:6f:93:a9:5b:7b:49:e0:24: 4b:f6:1d:7e:ec:d7:4f:08:37:01:31:a7:aa:a0:aa: 90:1b:e9:14:80:56:62:2a:8a:cf:c0:54:07:c0:a3: cc:68:5e:46:ba:4e:ec:d9:f2:2e:9a:02:38:38:e9: 19:f1:97:cc:59:03:90:83:36:95:64:a8:d5:57:96: dd:05:96:33:48:c4:35:b8:ab:5b:04:2f:8e:5c:e5: 43:4c:c1:e2:6d:8b:cc:f2:60:56:ea:80:77:80:ab: 20:64:0a:1a:fa:91:36:09:86:94:84:38:9f:14:e8: b7:fa:05:00:55:30:fc:59:80:1a:09:42:27:37:b4: 8b:04:ad:7a:f9:6e:df:24:65:32:dd:c6:92:a1:88: 3e:2d:6d:56:5d:9a:c1:0d:06:a1:6e:46:7f:c6:f1: 1e:ca:7b:84:6c:d7:41:cf:ad:30:aa:84:31:42:e3: 8e:9f:90:d5:eb:f5:3e:82:e9:db:5d:2a:1a:14:eb: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C1:05:6A:E2:21:A8:A4:EC:C9:EC:CD:1F:DC:0E:8E:40:C6:5F:4F X509v3 Authority Key Identifier: keyid:59:31:47:03:09:28:45:FC:BD:0B:FB:AE:EF:87:D8:3F:C6:6E:D1:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WTFHAwkoRfy9C_uu74fYP8Zu0dc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914781A/4EEC5B7EA6B411E8B43A1467C4F9AE02/WTFHAwkoRfy9C_uu74fYP8Zu0dc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:00:f9:b3:0d:f4:f3:0f:d3:71:cc:8a:19:21:a4:be:cc:a7: 92:37:f0:ec:17:97:9c:2c:04:03:14:69:ee:7a:cc:15:fb:d4: 31:8e:93:46:cc:f1:a0:47:1c:a8:1f:e5:ec:0b:f6:55:ef:af: a2:ac:16:b8:4c:ca:09:7c:2d:65:d3:a7:3c:8b:84:69:5e:00: 8e:bf:6a:70:f9:bd:18:14:b7:8d:a2:1e:ad:0b:dd:ba:a1:10: 52:ba:fe:a4:89:66:f0:51:f4:95:12:49:bd:0e:25:a7:c9:f7: d1:45:f9:89:67:2b:1b:64:a0:d0:6e:26:d5:09:44:39:8f:83: f6:4d:13:93:9a:7d:09:66:8a:df:33:63:42:ff:a5:cd:24:c0: d3:91:bc:a3:22:ff:4b:dd:1a:50:5b:47:ac:91:f4:bb:08:9f: 09:0b:be:cd:29:5c:8b:5a:e1:b7:ba:ea:f4:9b:6a:a5:7b:9d: 5d:00:e2:b9:f9:25:64:1d:24:3f:00:c3:8d:34:8a:f9:d6:4a: 87:50:c3:6d:34:b1:18:21:5a:bc:bf:0d:75:07:50:5d:1d:ad: 6b:32:01:d6:4d:aa:80:d1:1c:b5:6d:58:27:f1:f1:d1:d1:5c: c8:6c:ee:1a:79:92:4b:2f:29:ec:0a:97:bc:52:9f:27:89:ea: 68:12:87:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc4MUExMTAvBgNVBAUTKDU5MzE0NzAzMDkyODQ1RkNCRDBCRkJBRUVGODdEODNG QzY2RUQxRDcwHhcNMjUwNjAyMTQ1OTExWhcNMjUwNjA5MTQ1OTExWjAYMRYwFAYD VQQDEw02ODNkYmM0MC0wNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5YpU2MftNqco3T5a+iFtoEsD86vNeYrCYzxeU9FRCUIv8QEFZgAXtczwzHd dz5lZ2066lqmbrEgvxnAhb++eApab5OpW3tJ4CRL9h1+7NdPCDcBMaeqoKqQG+kU gFZiKorPwFQHwKPMaF5Guk7s2fIumgI4OOkZ8ZfMWQOQgzaVZKjVV5bdBZYzSMQ1 uKtbBC+OXOVDTMHibYvM8mBW6oB3gKsgZAoa+pE2CYaUhDifFOi3+gUAVTD8WYAa CUInN7SLBK16+W7fJGUy3caSoYg+LW1WXZrBDQahbkZ/xvEeynuEbNdBz60wqoQx QuOOn5DV6/U+gunbXSoaFOs28QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHBBWri Iaik7MnszR/cDo5Axl9PMB8GA1UdIwQYMBaAFFkxRwMJKEX8vQv7ru+H2D/GbtHX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzgxQS80RUVDNUI3RUE2 QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1JmeTlDX3V1NzRmWVA4WnUw ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dURkhBd2tvUmZ5OUNfdXU3NGZZUDhadTBkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzgxQS80RUVDNUI3RUE2QjQxMUU4QjQzQTE0NjdDNEY5QUUwMi9XVEZIQXdrb1Jm eTlDX3V1NzRmWVA4WnUwZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALAPmzDfTzD9NxzIoZIaS+zKeSN/DsF5ecLAQDFGnueswV+9QxjpNG zPGgRxyoH+XsC/ZV76+irBa4TMoJfC1l06c8i4RpXgCOv2pw+b0YFLeNoh6tC926 oRBSuv6kiWbwUfSVEkm9DiWnyffRRfmJZysbZKDQbibVCUQ5j4P2TROTmn0JZorf M2NC/6XNJMDTkbyjIv9L3RpQW0eskfS7CJ8JC77NKVyLWuG3uur0m2qle51dAOK5 +SVkHSQ/AMONNIr51kqHUMNtNLEYIVq8vw11B1BdHa1rMgHWTaqA0Ry1bVgn8fHR 0VzIbO4aeZJLLynsCpe8Up8niepoEodW -----END CERTIFICATE-----Generated at Wed Jun 4 00:08:32 2025 by rpki-client