$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: qZiUW6Mm3v4BdOjaJxzKlTCs+DZYfqZ5HW7WbjXVJw4= Subject key identifier: A4:06:42:0D:AA:F9:1C:8F:4D:51:4D:EC:DD:92:4A:19:C0:2E:BF:64 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: D2 Signing time: Wed 05 Nov 2025 05:50:41 +0000 Manifest this update: Wed 05 Nov 2025 05:50:41 +0000 Manifest next update: Wed 12 Nov 2025 05:50:41 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: smYXVrQewDC4msywrodPWege8xnCKj8mLx6HgIp1Pis=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Nov 5 05:50:41 2025 GMT Not After : Nov 12 05:50:41 2025 GMT Subject: CN=690ae5b1-662b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:3b:a9:ff:0e:c9:55:6b:1f:13:7e:e9:0d: 75:56:dc:70:6e:de:38:ee:fc:5a:c5:c1:9e:6f:e0: 7b:ef:67:ad:a0:97:55:e9:b3:dd:18:bc:98:1a:6e: 9a:a6:21:7c:91:19:9a:fe:d7:32:d0:10:b1:61:fb: 43:8e:4b:f5:82:f5:61:08:28:8c:0e:8b:e9:8f:8c: 19:3c:a0:f6:c1:ee:45:08:68:00:ab:62:80:8e:ad: 22:25:18:a5:57:47:2d:12:bc:1a:af:9b:a4:42:bc: 0f:7a:28:55:fd:f4:d1:b0:bf:c4:e0:1f:2a:20:7a: bc:5f:45:03:86:ef:d4:b9:a8:66:47:58:d7:fd:bb: 2c:9d:82:80:fe:1f:e8:e2:a2:b7:fd:2d:75:b7:31: cc:84:e9:b7:08:7f:6e:ce:4d:b3:03:22:57:73:42: a2:d8:f4:fd:bf:32:bd:57:4a:4c:8e:db:72:fc:f2: 08:f6:a0:b6:04:ca:a4:d9:86:44:e8:8c:61:34:ec: c2:a6:eb:97:9a:0c:aa:86:a7:b7:6f:8b:04:85:a2: 7d:50:4d:4a:3b:ff:47:30:10:03:38:6e:0d:50:27: b8:7f:c3:49:2c:d8:f2:06:d9:b0:3a:09:85:a4:24: 08:46:b2:c4:7a:d8:80:ac:01:8e:b7:d9:fb:11:67: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:06:42:0D:AA:F9:1C:8F:4D:51:4D:EC:DD:92:4A:19:C0:2E:BF:64 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:af:89:ee:23:35:38:62:b5:69:ee:ea:bd:3e:08:e5:1b:51: a2:09:20:1a:0c:af:75:0a:e2:a3:fb:22:72:a2:0f:17:0a:c2: e6:57:40:69:d3:72:01:cc:65:43:12:b4:fb:08:43:07:75:b8: e8:bf:8b:94:b0:dd:f1:92:f2:e5:ff:9b:31:57:74:5a:12:15: 89:2b:6c:0f:9f:08:b0:6e:f3:75:ef:26:3f:bc:a5:60:cb:de: 9e:0f:93:46:91:02:6e:ef:d8:c1:af:75:1f:60:9e:6f:4d:ce: f3:39:76:ba:fb:be:c5:f6:9f:63:47:1a:6b:69:6f:58:58:b0: 81:59:d4:34:8f:d4:77:4c:ab:bf:3e:0c:21:b1:79:a2:96:be: 21:5d:ca:5d:3c:7c:20:da:7d:c9:02:da:25:d5:ec:58:b1:66: 43:e3:c3:3e:50:5c:93:71:d4:0b:89:79:31:3c:f0:97:a1:fa: 83:1c:51:9c:d0:5f:b0:34:39:9a:f7:75:4a:08:da:17:fc:2b: 9e:ad:5b:80:73:01:9f:64:17:6d:61:8d:a0:66:72:9c:3b:9a: 73:37:fe:25:a6:b9:6c:b3:ed:00:da:ec:62:aa:f4:ff:eb:c6: a0:bc:41:9e:d0:ad:96:58:c9:65:36:10:cb:dc:25:0a:a6:fa: 35:cd:4c:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUxMTA1MDU1MDQxWhcNMjUxMTEyMDU1MDQxWjAYMRYwFAYD VQQDEw02OTBhZTViMS02NjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoY7qf8OyVVrHxN+6Q11Vtxwbt447vxaxcGeb+B772etoJdV6bPdGLyYGm6a piF8kRma/tcy0BCxYftDjkv1gvVhCCiMDovpj4wZPKD2we5FCGgAq2KAjq0iJRil V0ctErwar5ukQrwPeihV/fTRsL/E4B8qIHq8X0UDhu/UuahmR1jX/bssnYKA/h/o 4qK3/S11tzHMhOm3CH9uzk2zAyJXc0Ki2PT9vzK9V0pMjtty/PII9qC2BMqk2YZE 6IxhNOzCpuuXmgyqhqe3b4sEhaJ9UE1KO/9HMBADOG4NUCe4f8NJLNjyBtmwOgmF pCQIRrLEetiArAGOt9n7EWePfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQGQg2q +RyPTVFN7N2SShnALr9kMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYr4nuIzU4YrVp7uq9PgjlG1GiCSAaDK91CuKj+yJyog8XCsLmV0Bp 03IBzGVDErT7CEMHdbjov4uUsN3xkvLl/5sxV3RaEhWJK2wPnwiwbvN17yY/vKVg y96eD5NGkQJu79jBr3UfYJ5vTc7zOXa6+77F9p9jRxpraW9YWLCBWdQ0j9R3TKu/ PgwhsXmilr4hXcpdPHwg2n3JAtol1exYsWZD48M+UFyTcdQLiXkxPPCXofqDHFGc 0F+wNDma93VKCNoX/CuerVuAcwGfZBdtYY2gZnKcO5pzN/4lprlss+0A2uxiqvT/ 68agvEGe0K2WWMllNhDL3CUKpvo1zUya -----END CERTIFICATE-----Generated at Wed Nov 5 13:05:47 2025 by rpki-client