$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: 3w+Y7mIuiIOztj7yY8EbkTJRsBBWOontfh9PARaySks= Subject key identifier: 7B:D9:D3:78:45:F1:61:9D:7B:01:99:1E:1A:47:E7:AF:D2:C6:B1:DE Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 04CF Signing time: Sun 02 Nov 2025 23:47:01 +0000 Manifest this update: Sun 02 Nov 2025 23:47:00 +0000 Manifest next update: Sun 09 Nov 2025 23:47:00 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: R504lH1ivoSzkzBW3U9KqwgaDIb6vmTD5pSX9J+nSVY=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:46:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Nov 2 23:47:00 2025 GMT Not After : Nov 9 23:47:00 2025 GMT Subject: CN=6907ed74-2999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:04:03:0c:04:24:f8:c6:88:89:de:a0:ad:ed: 5d:47:87:85:fe:30:ad:40:2c:eb:fd:77:ec:73:18: ac:71:15:ae:5f:e3:61:fc:fd:83:c6:8f:6b:a7:ed: 16:2f:53:54:df:67:34:0f:9b:23:8c:fa:f9:70:64: b2:a5:77:bf:c1:93:09:0c:54:38:fb:ea:7f:18:cf: 21:cd:a2:21:27:61:0a:94:78:5b:43:08:d8:ff:78: a2:07:56:38:44:68:b9:c7:7c:f9:6f:8a:aa:ed:bb: 84:89:a4:95:5c:86:11:a6:d3:a5:d3:e9:d4:10:32: 96:02:4f:0c:0a:70:92:99:22:47:7a:03:45:0b:f7: 58:e7:ca:73:dd:a4:57:f1:f3:01:50:52:a1:cc:29: 73:b8:74:82:03:5c:47:3b:0d:ea:cc:d9:aa:49:26: 67:0d:08:b3:c4:2d:ad:93:f0:6c:be:cf:dc:1b:d6: a9:2b:a2:3e:8b:9a:55:f5:91:98:a0:ba:7c:c2:4f: f5:25:af:29:27:99:a2:f4:7d:fa:a6:1d:c7:76:79: 70:5c:94:95:ff:3e:d7:19:df:1c:d7:f1:0d:d7:0d: ae:87:75:ac:b2:ab:dd:30:13:c0:ae:38:a6:aa:20: 9a:66:e2:95:85:6b:f0:b8:72:d9:9f:7d:36:9a:72: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:D3:78:45:F1:61:9D:7B:01:99:1E:1A:47:E7:AF:D2:C6:B1:DE X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8e:fe:d2:62:6f:d8:3f:ac:6c:23:d7:43:34:eb:6a:d9:31: e2:06:70:02:78:7d:7a:d1:7c:a6:d7:da:0f:74:c1:6b:b4:d5: 9c:c6:c6:13:da:2b:5f:ca:81:1a:37:93:29:1a:b1:b0:ef:cc: b8:89:60:9c:fa:1c:2c:e2:e2:44:9c:4a:ed:b1:4c:11:8d:6b: 14:2b:c7:33:f5:7c:66:06:99:6b:d0:15:66:a3:cd:4f:c1:db: 16:23:a4:c4:34:36:53:cb:dc:9c:74:68:27:db:b1:56:e0:4e: 06:2a:fb:f9:1c:3f:cf:81:20:6e:c9:52:2f:2c:96:7e:04:ec: 80:d9:18:32:37:00:d0:f6:fb:cb:c4:78:5a:21:87:49:06:a1: 04:35:a7:f5:85:8f:00:c4:a1:0b:09:d4:b9:06:3b:6a:60:ac: 54:17:82:d6:7b:c0:14:d5:55:2a:aa:c8:9d:7e:90:fd:2c:6d: f1:8c:9d:b6:43:41:61:9c:44:fe:60:a8:62:7c:ea:ff:cc:d1: 5e:49:42:a9:ab:43:b1:7d:70:b1:42:ab:d8:ba:2f:b0:c2:78: 9b:2a:58:12:18:4a:7f:3f:ce:26:cc:56:f8:c1:91:bc:e5:e9: 9d:02:3e:22:ab:17:80:6a:4c:67:1e:31:67:4b:29:1d:b2:6c: 89:ee:76:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUxMTAyMjM0NzAwWhcNMjUxMTA5MjM0NzAwWjAYMRYwFAYD VQQDEw02OTA3ZWQ3NC0yOTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwQDDAQk+MaIid6gre1dR4eF/jCtQCzr/XfscxiscRWuX+Nh/P2Dxo9rp+0W L1NU32c0D5sjjPr5cGSypXe/wZMJDFQ4++p/GM8hzaIhJ2EKlHhbQwjY/3iiB1Y4 RGi5x3z5b4qq7buEiaSVXIYRptOl0+nUEDKWAk8MCnCSmSJHegNFC/dY58pz3aRX 8fMBUFKhzClzuHSCA1xHOw3qzNmqSSZnDQizxC2tk/Bsvs/cG9apK6I+i5pV9ZGY oLp8wk/1Ja8pJ5mi9H36ph3HdnlwXJSV/z7XGd8c1/EN1w2uh3WssqvdMBPArjim qiCaZuKVhWvwuHLZn302mnIShwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvZ03hF 8WGdewGZHhpH56/SxrHeMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjjv7SYm/YP6xsI9dDNOtq2THiBnACeH160Xym19oPdMFrtNWcxsYT 2itfyoEaN5MpGrGw78y4iWCc+hws4uJEnErtsUwRjWsUK8cz9XxmBplr0BVmo81P wdsWI6TENDZTy9ycdGgn27FW4E4GKvv5HD/PgSBuyVIvLJZ+BOyA2RgyNwDQ9vvL xHhaIYdJBqEENaf1hY8AxKELCdS5BjtqYKxUF4LWe8AU1VUqqsidfpD9LG3xjJ22 Q0FhnET+YKhifOr/zNFeSUKpq0OxfXCxQqvYui+wwnibKlgSGEp/P84mzFb4wZG8 5emdAj4iqxeAakxnHjFnSykdsmyJ7nbX -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:37 2025 by rpki-client