$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft File: WAFITP9u_F0ACyYp-RFr4jXErDY.mft (raw, json) Hash identifier: +GdK7ANUEzI1qb3DGMmNo3VbbHsAiFx6Ro/u3lhM6NA= Subject key identifier: 38:1E:39:AA:31:63:1A:67:41:36:E1:C6:15:1F:17:F5:E7:9D:9D:4E Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 Certificate issuer: /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft Manifest number: 98 Signing time: Sat 31 May 2025 05:57:57 +0000 Manifest this update: Sat 31 May 2025 05:57:56 +0000 Manifest next update: Sat 07 Jun 2025 05:57:56 +0000 Files and hashes: 1: WAFITP9u_F0ACyYp-RFr4jXErDY.crl (hash: 6AWOrbLVR3d6mk4nNbgms9Z7vl04a7AeiQAcCh6tUNM=) 2: 569067B25D5B11EF9EA49613C4F9AE02.roa (hash: Eb5PgB8qCSXbKshJheWAx+0IvpK6iLnUnQ56W+fCnec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36 Validity Not Before: May 31 05:57:56 2025 GMT Not After : Jun 7 05:57:56 2025 GMT Subject: CN=683a9a64-4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:6f:67:25:5d:61:64:f9:fc:39:2c:df:07: 14:f4:60:d3:8a:bc:bc:e8:9b:1f:c7:7f:49:62:86: 85:7f:39:cf:91:ac:81:02:65:fd:bd:10:57:d9:50: 1e:1b:16:d9:94:3c:f2:bf:ac:32:25:f2:98:93:81: 98:a9:ea:f4:3c:98:62:b1:70:0a:14:b9:ed:c9:33: 13:d5:59:f2:ef:25:96:11:d7:76:00:cb:e4:58:82: d7:a6:ed:3f:e5:cb:4d:fe:57:e4:98:57:4e:53:e6: f7:a9:ac:73:cc:54:9a:70:44:1d:8e:d1:ca:56:6f: 28:24:96:93:94:2c:02:d7:aa:3f:1c:b2:07:cb:cf: 34:96:1f:09:f6:0b:38:7c:b8:03:c9:c6:4f:f1:1f: 63:57:02:0e:bd:1e:cd:58:80:1f:ef:dc:a2:a1:69: 8d:a3:c0:f5:81:a4:a3:3d:89:d5:e3:78:be:43:b0: 4f:e5:7f:2c:fb:de:67:ef:55:65:96:34:b2:5a:05: 2b:58:b4:44:37:29:f0:14:89:60:d6:9e:28:91:9a: 5b:69:eb:04:29:62:eb:73:5a:bd:37:f3:0f:18:9d: bd:c9:8e:9b:71:52:39:41:16:10:19:6c:3b:58:30: d2:74:f9:f4:2d:fa:86:79:16:40:e6:10:7b:67:cf: eb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:1E:39:AA:31:63:1A:67:41:36:E1:C6:15:1F:17:F5:E7:9D:9D:4E X509v3 Authority Key Identifier: keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:c1:49:8a:76:90:30:4e:17:f4:89:9d:6e:99:33:c1:60:96: d5:f4:79:08:67:47:68:c0:68:4e:07:59:ee:8c:99:b7:72:45: 79:f3:b4:18:66:78:2d:7a:88:4a:96:66:80:fd:10:58:12:d0: b8:72:3c:61:5f:1e:4a:f0:4d:a1:52:b8:37:56:42:e4:d5:ac: 23:ba:e4:f7:1a:b9:c2:f7:c3:6b:a5:43:22:dd:f1:b6:71:3a: 27:50:85:83:0f:d2:c0:75:76:b4:40:50:2b:91:b8:04:62:22: 5f:1e:1c:ae:55:06:7e:e2:0d:d2:2c:ee:27:7f:04:0b:e4:ba: 89:4c:52:f9:1d:54:ec:ae:59:d5:5c:38:af:4b:29:e5:3e:6c: db:c4:f7:10:ff:a5:0f:9b:5f:85:85:61:5d:0e:87:b5:8e:8e: 0c:6a:d4:1d:94:0e:50:af:3a:e1:d2:88:fd:08:a4:d6:42:e9: 1c:d2:fa:fa:8c:2b:07:88:1e:6a:0d:bf:39:ff:8b:78:f6:59: 89:84:f4:27:c7:ba:4e:fc:f9:51:46:ae:81:70:65:77:e2:5e: 3d:f6:35:fb:bd:36:ba:7d:64:90:11:00:bc:c9:16:c5:46:08: 20:ef:52:68:8b:75:5b:05:42:a3:a1:ff:d8:be:45:77:a1:d6: a1:08:f2:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1MzExMTAvBgNVBAUTKDU4MDE0ODRDRkY2RUZDNUQwMDBCMjYyOUY5MTE2QkUy MzVDNEFDMzYwHhcNMjUwNTMxMDU1NzU2WhcNMjUwNjA3MDU1NzU2WjAYMRYwFAYD VQQDEw02ODNhOWE2NC00YjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsINvZyVdYWT5/Dks3wcU9GDTiry86Jsfx39JYoaFfznPkayBAmX9vRBX2VAe GxbZlDzyv6wyJfKYk4GYqer0PJhisXAKFLntyTMT1Vny7yWWEdd2AMvkWILXpu0/ 5ctN/lfkmFdOU+b3qaxzzFSacEQdjtHKVm8oJJaTlCwC16o/HLIHy880lh8J9gs4 fLgDycZP8R9jVwIOvR7NWIAf79yioWmNo8D1gaSjPYnV43i+Q7BP5X8s+95n71Vl ljSyWgUrWLRENynwFIlg1p4okZpbaesEKWLrc1q9N/MPGJ29yY6bcVI5QRYQGWw7 WDDSdPn0LfqGeRZA5hB7Z8/rUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgeOaox YxpnQTbhxhUfF/XnnZ1OMB8GA1UdIwQYMBaAFFgBSEz/bvxdAAsmKfkRa+I1xKw2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzUzMS8wQjBEMEY2NjVE NUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9GMEFDeVlwLVJGcjRqWEVy RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBRklUUDl1X0YwQUN5WXAtUkZyNGpYRXJEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzUzMS8wQjBEMEY2NjVENUIxMUVGQTRGMzJCMTNDNEY5QUUwMi9XQUZJVFA5dV9G MEFDeVlwLVJGcjRqWEVyRFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWwUmKdpAwThf0iZ1umTPBYJbV9HkIZ0dowGhOB1nujJm3ckV587QY ZngteohKlmaA/RBYEtC4cjxhXx5K8E2hUrg3VkLk1awjuuT3GrnC98NrpUMi3fG2 cTonUIWDD9LAdXa0QFArkbgEYiJfHhyuVQZ+4g3SLO4nfwQL5LqJTFL5HVTsrlnV XDivSynlPmzbxPcQ/6UPm1+FhWFdDoe1jo4MatQdlA5Qrzrh0oj9CKTWQukc0vr6 jCsHiB5qDb85/4t49lmJhPQnx7pO/PlRRq6BcGV34l499jX7vTa6fWSQEQC8yRbF Rggg71Joi3VbBUKjof/YvkV3odahCPKz -----END CERTIFICATE-----Generated at Sat May 31 15:49:59 2025 by rpki-client