$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: cu54WZL9zlICVRsbuKvtF3rpUo/in2CAKxKr9QHuHbg= Subject key identifier: 1A:FC:F1:F0:63:33:3C:3E:12:28:DE:0A:B0:A2:CC:A8:1F:1A:30:9E Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 9B Signing time: Sat 19 Jul 2025 06:33:31 +0000 Manifest this update: Sat 19 Jul 2025 06:33:30 +0000 Manifest next update: Sat 26 Jul 2025 06:33:30 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: Ph8uVhZcCZ6Wal25q2eMqfz9vg8aSp45fL4ZH31lbKs=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:33:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Jul 19 06:33:30 2025 GMT Not After : Jul 26 06:33:30 2025 GMT Subject: CN=687b3c3a-c8ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:70:d7:8d:2e:53:1e:27:44:dd:ae:f4:1d: bd:6d:8f:44:f1:8b:d6:80:94:46:4a:40:c1:88:91: 20:59:62:ad:a3:4d:b6:6e:f1:9e:d6:b1:09:04:de: 4b:08:e9:4f:70:03:31:02:eb:ef:0d:32:b5:b2:3e: 12:cc:ce:f1:d2:74:fc:6a:cf:1f:56:1c:2c:83:2d: 3d:e6:91:d2:6e:c6:8f:00:27:2e:3a:ba:75:ba:a5: 81:18:c4:31:98:0a:6d:84:c4:e2:f5:81:2a:d6:9f: 21:34:02:2b:e3:82:4a:d2:94:1c:b6:5f:8b:49:7b: f3:87:6f:88:a8:a4:ff:55:3b:1e:5e:be:c9:09:8a: 53:2d:bd:e0:11:a8:26:5a:d5:7a:75:3b:0b:0b:6e: 5a:0c:b7:00:e3:44:05:45:92:11:3a:d6:ce:6b:17: ef:b8:0a:9b:f8:7a:55:0a:c6:02:84:52:bc:d0:12: 03:32:42:89:ca:52:f5:9e:69:38:b6:de:2c:e7:5f: a2:85:ca:d4:ce:67:41:81:74:69:a7:17:a8:d0:3b: dc:b3:81:bd:0b:14:30:22:8a:0c:9c:e8:ab:25:f7: cd:eb:2d:0a:84:3d:d2:79:a2:68:0c:17:d4:c0:08: 83:4e:ad:97:e5:65:22:c9:97:4c:3c:4a:ed:f4:11: 64:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FC:F1:F0:63:33:3C:3E:12:28:DE:0A:B0:A2:CC:A8:1F:1A:30:9E X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:ec:72:90:af:0f:57:70:2b:a9:c7:4f:08:14:c5:66:de:39: 00:53:d3:66:eb:f3:4c:28:41:9c:49:2f:67:32:80:38:92:ca: 1e:ca:8e:ec:cf:a0:f8:0b:41:fa:76:dc:e0:95:32:47:3c:68: 6f:d9:69:87:9b:da:78:b1:9a:36:89:13:93:3c:80:1b:51:a0: bf:b2:34:9e:01:cc:b6:fa:ea:23:c7:e4:20:71:0d:34:f0:f5: 8f:37:dc:6c:df:b1:2f:d3:f8:c3:e4:15:7f:50:7d:96:69:e7: c4:6e:01:d5:57:98:3b:7d:2b:e1:62:46:c4:77:62:e0:13:04: a9:67:20:df:84:67:12:91:6c:1c:9d:57:07:db:ca:7d:95:e3: 18:6b:c5:f9:76:58:4d:fe:1f:2c:8c:3c:04:ad:ba:7a:fc:89: 66:3d:c0:36:f9:3a:b8:82:45:f5:b4:f3:18:4b:9f:a4:60:23: 84:06:a8:c2:b5:e5:92:b3:04:15:b6:96:03:be:57:19:54:09: 31:64:13:2c:c5:37:3c:20:e9:1c:c2:04:57:75:7d:a5:9e:3e: 6d:e3:a6:59:e4:98:2b:1b:5b:ba:cb:b5:fb:a2:58:b1:19:cb: e9:9d:95:a6:9a:b2:b4:2d:1f:8d:d5:4f:c6:4c:00:2a:e0:a7: a1:04:1e:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwNzE5MDYzMzMwWhcNMjUwNzI2MDYzMzMwWjAYMRYwFAYD VQQDEw02ODdiM2MzYS1jOGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumxw140uUx4nRN2u9B29bY9E8YvWgJRGSkDBiJEgWWKto022bvGe1rEJBN5L COlPcAMxAuvvDTK1sj4SzM7x0nT8as8fVhwsgy095pHSbsaPACcuOrp1uqWBGMQx mApthMTi9YEq1p8hNAIr44JK0pQctl+LSXvzh2+IqKT/VTseXr7JCYpTLb3gEagm WtV6dTsLC25aDLcA40QFRZIROtbOaxfvuAqb+HpVCsYChFK80BIDMkKJylL1nmk4 tt4s51+ihcrUzmdBgXRppxeo0Dvcs4G9CxQwIooMnOirJffN6y0KhD3SeaJoDBfU wAiDTq2X5WUiyZdMPErt9BFkiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBr88fBj Mzw+EijeCrCizKgfGjCeMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDS7HKQrw9XcCupx08IFMVm3jkAU9Nm6/NMKEGcSS9nMoA4ksoeyo7s z6D4C0H6dtzglTJHPGhv2WmHm9p4sZo2iROTPIAbUaC/sjSeAcy2+uojx+QgcQ00 8PWPN9xs37Ev0/jD5BV/UH2WaefEbgHVV5g7fSvhYkbEd2LgEwSpZyDfhGcSkWwc nVcH28p9leMYa8X5dlhN/h8sjDwErbp6/IlmPcA2+Tq4gkX1tPMYS5+kYCOEBqjC teWSswQVtpYDvlcZVAkxZBMsxTc8IOkcwgRXdX2lnj5t46ZZ5JgrG1u6y7X7olix GcvpnZWmmrK0LR+N1U/GTAAq4KehBB4y -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:49 2025 by rpki-client