$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: 0dyrZqAey/13uqYFfepmJnai6F+JdsqgMla/K4y0U9c= Subject key identifier: B4:AF:7F:B5:F8:AF:E4:22:33:81:43:62:5A:2A:A2:AB:70:34:CA:23 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: B5 Signing time: Sun 07 Sep 2025 06:29:32 +0000 Manifest this update: Sun 07 Sep 2025 06:29:32 +0000 Manifest next update: Sun 14 Sep 2025 06:29:32 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: gywsx/hMchGpB7afryBKxzwoGcfZ9UocWdlzwYy66CA=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Sep 7 06:29:32 2025 GMT Not After : Sep 14 06:29:32 2025 GMT Subject: CN=68bd264c-855e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:78:5a:60:d4:ab:4f:ac:0c:e2:80:77:55:30: 0b:4d:c0:6c:f1:c0:fa:dd:ae:aa:41:d0:31:39:e9: c2:8e:5a:77:8e:d0:f3:75:8c:0e:ea:08:fc:fb:a9: 55:60:ef:3e:b7:09:42:c7:df:94:f1:a1:40:6f:1e: 7c:4a:64:6b:38:a0:fe:e4:ac:4c:16:f5:e4:53:0a: 2f:fb:ae:d6:29:be:d9:2c:12:a7:23:a5:aa:66:4e: fd:cd:84:1a:18:8b:69:10:77:ed:76:60:cd:5b:b0: 85:eb:82:a6:44:6b:ab:28:0c:55:22:60:88:c8:fc: 3d:08:80:7c:24:75:1b:0f:95:c7:a9:eb:a7:f6:8b: f8:49:52:f2:ab:58:33:b0:86:68:f4:05:d9:22:65: 38:23:63:19:2a:09:5f:6b:64:0b:8a:ac:54:af:34: 39:52:2c:72:fc:8b:36:34:83:d0:f2:6c:5e:2a:d5: ba:8f:27:fe:fa:02:70:6f:a5:f6:40:65:ec:e3:9d: 5a:4a:01:b5:7e:2e:6b:0a:01:5a:38:a2:2b:c3:30: 92:46:bd:52:73:37:2c:4e:2a:6a:4a:e8:2f:2b:5f: 69:76:6f:4c:ed:ae:60:23:28:bc:1e:5d:22:44:08: 5a:82:fb:c4:ca:47:52:23:a3:72:e6:ee:3f:03:41: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:7F:B5:F8:AF:E4:22:33:81:43:62:5A:2A:A2:AB:70:34:CA:23 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:39:b2:2c:cc:04:6d:8b:45:8e:c5:b2:b2:8a:5d:1e:ea:96: 19:b3:a1:29:71:5a:3e:24:3a:91:17:d6:68:96:71:d6:52:ff: 93:e8:11:3c:9e:72:48:8f:e0:da:31:b4:1e:63:06:42:9a:9b: e8:3f:1e:b2:e0:1f:d9:bd:9f:66:b0:f8:7c:0f:9a:aa:60:f3: 0f:50:74:20:53:f8:4e:76:56:7e:13:f7:d3:64:f4:ea:cd:8d: f6:53:f9:e3:7d:b6:e2:db:b2:c1:6c:02:ff:fb:bd:02:c1:a5: e5:77:01:2a:41:b7:64:1d:05:9a:20:9c:e2:a5:aa:dc:8e:c9: eb:83:dd:dc:a9:6a:26:f3:58:ba:ed:b8:89:9b:28:e4:c6:67: 54:02:03:a7:47:a0:79:12:78:7a:32:50:cf:64:d2:81:e2:a8: 26:9d:e6:74:a0:01:03:58:04:68:67:1a:88:52:bb:8c:19:63: eb:43:5b:b9:de:72:aa:4a:ee:26:3d:25:c0:42:17:b6:6d:90: 4e:c1:76:ff:61:34:32:42:d4:cf:6d:8e:01:65:f7:94:0b:07: f9:2c:b5:f6:50:c1:84:93:bb:ea:d0:27:8c:e3:e2:2c:d7:cf: ec:03:c8:1e:99:94:0a:08:59:f6:ff:1e:af:3f:34:fc:d8:0b: 61:cf:2f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwOTA3MDYyOTMyWhcNMjUwOTE0MDYyOTMyWjAYMRYwFAYD VQQDEw02OGJkMjY0Yy04NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynhaYNSrT6wM4oB3VTALTcBs8cD63a6qQdAxOenCjlp3jtDzdYwO6gj8+6lV YO8+twlCx9+U8aFAbx58SmRrOKD+5KxMFvXkUwov+67WKb7ZLBKnI6WqZk79zYQa GItpEHftdmDNW7CF64KmRGurKAxVImCIyPw9CIB8JHUbD5XHqeun9ov4SVLyq1gz sIZo9AXZImU4I2MZKglfa2QLiqxUrzQ5Uixy/Is2NIPQ8mxeKtW6jyf++gJwb6X2 QGXs451aSgG1fi5rCgFaOKIrwzCSRr1SczcsTipqSugvK19pdm9M7a5gIyi8Hl0i RAhagvvEykdSI6Ny5u4/A0FClQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSvf7X4 r+QiM4FDYloqoqtwNMojMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClObIszARti0WOxbKyil0e6pYZs6EpcVo+JDqRF9ZolnHWUv+T6BE8 nnJIj+DaMbQeYwZCmpvoPx6y4B/ZvZ9msPh8D5qqYPMPUHQgU/hOdlZ+E/fTZPTq zY32U/njfbbi27LBbAL/+70CwaXldwEqQbdkHQWaIJziparcjsnrg93cqWom81i6 7biJmyjkxmdUAgOnR6B5Enh6MlDPZNKB4qgmneZ0oAEDWARoZxqIUruMGWPrQ1u5 3nKqSu4mPSXAQhe2bZBOwXb/YTQyQtTPbY4BZfeUCwf5LLX2UMGEk7vq0CeM4+Is 18/sA8gemZQKCFn2/x6vPzT82Athzy+b -----END CERTIFICATE-----Generated at Mon Sep 8 18:26:32 2025 by rpki-client