$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: 9obwBVWW0yNZ9YKAr6SXNxfMz01K5AMyP4MMAypNbB8= Subject key identifier: 48:37:A1:AF:49:DC:01:FC:2D:60:E2:EA:DC:3B:5A:91:BF:4A:85:5D Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 049C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 0498 Signing time: Mon 21 Jul 2025 00:11:47 +0000 Manifest this update: Mon 21 Jul 2025 00:11:47 +0000 Manifest next update: Mon 28 Jul 2025 00:11:47 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: fIOWLY+bFt8KJFiXoWyN/+j5epTyZT2y5RXMPC3IsY0=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1180 (0x49c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Jul 21 00:11:47 2025 GMT Not After : Jul 28 00:11:47 2025 GMT Subject: CN=687d85c3-b4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1c:70:3e:4e:e0:03:d9:df:f3:c0:ac:41:7d: ea:3f:e2:2b:25:c7:00:94:7c:b5:64:d8:04:94:47: cc:b2:ce:6e:78:46:cf:4d:b0:94:f9:81:c6:79:0a: 1b:23:ce:45:11:fd:e6:b9:bf:85:68:b2:f1:c5:51: 1b:b0:d5:c1:90:c6:03:e9:47:62:ad:1e:c4:9c:51: 43:ec:52:0b:68:c7:ef:55:db:45:9f:a4:86:3f:f9: 5a:73:6b:98:89:37:9a:56:6f:51:44:10:c1:fa:26: 7b:df:cb:6c:d3:0b:ef:3e:7a:cc:22:7b:8c:c7:b8: 48:58:9f:6b:19:83:70:6f:9c:84:59:de:a5:b8:9d: 79:55:c1:b0:32:2a:66:3b:04:51:e8:f6:58:4b:7f: 7a:6a:f4:5a:0e:44:f9:26:64:1e:8d:89:e3:55:5d: aa:a6:93:3d:d0:47:cd:24:dd:88:00:f4:a0:c2:75: 9e:eb:65:ef:41:7a:24:12:f8:72:10:0c:ab:58:e6: f9:1c:fd:19:20:24:98:0b:f7:a8:9c:8d:56:73:88: 0f:b3:37:a2:ac:a6:fb:39:f9:e8:6b:30:2d:2b:b6: 9e:69:0a:00:6e:5c:1e:61:01:d5:82:96:0c:5e:d2: eb:8e:48:f5:0b:ff:90:40:3f:05:a3:4c:96:c7:bb: 88:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:A1:AF:49:DC:01:FC:2D:60:E2:EA:DC:3B:5A:91:BF:4A:85:5D X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:7b:76:58:04:5b:9a:55:74:03:3d:67:9b:b9:34:4f:7b:6c: 46:a5:0c:45:9d:c2:74:c3:25:8b:b9:9c:51:51:7b:e1:0a:aa: c5:30:b2:d2:63:dd:76:cc:49:bb:09:bf:33:5f:5a:2a:05:0a: 1d:1b:84:8d:22:a1:e8:14:4b:34:2f:9a:58:6f:ee:59:01:f1: 41:57:b9:00:15:1e:e4:6d:28:6c:f2:e6:61:e7:f6:4c:e1:59: 73:21:dc:14:38:b0:91:bb:42:c4:4a:bd:24:5a:be:61:c5:e9: ac:97:e0:d6:55:34:43:a0:85:c7:bb:09:4d:76:1c:81:49:18: 1e:d9:f8:d8:3c:e2:46:e1:b8:2b:5c:58:b1:01:8f:45:34:cd: 02:a8:bf:78:cd:5e:3d:f9:ef:1c:03:00:9f:ad:a7:39:f8:8a: ac:b9:c5:2f:f1:39:8d:57:d7:d9:5d:5d:5a:30:70:d4:13:af: c4:3b:e3:df:d5:4e:f9:92:80:30:2f:f2:fa:a8:70:61:fb:78: 13:4b:4b:25:0c:df:b7:37:a3:51:85:24:e5:12:61:55:1f:8c: a6:79:3a:d7:49:c9:12:4f:64:c2:85:96:c9:35:1f:75:4e:eb: d9:8d:3f:a4:19:99:21:b1:85:b7:58:9e:f0:fc:94:4a:09:9c: 81:2a:ef:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUwNzIxMDAxMTQ3WhcNMjUwNzI4MDAxMTQ3WjAYMRYwFAYD VQQDEw02ODdkODVjMy1iNGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhxwPk7gA9nf88CsQX3qP+IrJccAlHy1ZNgElEfMss5ueEbPTbCU+YHGeQob I85FEf3mub+FaLLxxVEbsNXBkMYD6UdirR7EnFFD7FILaMfvVdtFn6SGP/lac2uY iTeaVm9RRBDB+iZ738ts0wvvPnrMInuMx7hIWJ9rGYNwb5yEWd6luJ15VcGwMipm OwRR6PZYS396avRaDkT5JmQejYnjVV2qppM90EfNJN2IAPSgwnWe62XvQXokEvhy EAyrWOb5HP0ZICSYC/eonI1Wc4gPszeirKb7OfnoazAtK7aeaQoAblweYQHVgpYM XtLrjkj1C/+QQD8Fo0yWx7uI6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEg3oa9J 3AH8LWDi6tw7WpG/SoVdMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGe3ZYBFuaVXQDPWebuTRPe2xGpQxFncJ0wyWLuZxRUXvhCqrFMLLS Y912zEm7Cb8zX1oqBQodG4SNIqHoFEs0L5pYb+5ZAfFBV7kAFR7kbShs8uZh5/ZM 4VlzIdwUOLCRu0LESr0kWr5hxemsl+DWVTRDoIXHuwlNdhyBSRge2fjYPOJG4bgr XFixAY9FNM0CqL94zV49+e8cAwCfrac5+IqsucUv8TmNV9fZXV1aMHDUE6/EO+Pf 1U75koAwL/L6qHBh+3gTS0slDN+3N6NRhSTlEmFVH4ymeTrXSckST2TChZbJNR91 TuvZjT+kGZkhsYW3WJ7w/JRKCZyBKu9K -----END CERTIFICATE-----Generated at Mon Jul 21 23:50:50 2025 by rpki-client