$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: MxDqwOT+vuQGWo8OkeRvW8rJFUBh5OPZW/0XQ50AeNE= Subject key identifier: AA:6D:E3:1C:2F:55:3F:0E:85:10:B7:A9:14:CA:A0:71:93:BF:4E:77 Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: CA Signing time: Sun 19 Oct 2025 08:52:03 +0000 Manifest this update: Sun 19 Oct 2025 08:52:02 +0000 Manifest next update: Sun 26 Oct 2025 08:52:02 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: xlpTrblDuJo3mNJQSAxENJ5LyCWaDO1ry+m68Mt1d78=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Oct 19 08:52:02 2025 GMT Not After : Oct 26 08:52:02 2025 GMT Subject: CN=68f4a6b2-f3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:9e:40:93:13:b9:4d:b0:d5:0c:e5:0a:b3: 02:7e:8d:85:8c:4b:e0:cb:b6:7e:26:3a:9f:4c:ef: 72:91:bb:83:b0:a7:87:ec:05:68:96:e1:81:e4:e5: 72:07:45:77:29:22:bd:eb:27:9e:1c:ba:33:e8:db: 43:6a:59:26:9b:df:0d:7f:6d:81:f8:16:86:56:d0: 90:cb:ef:bd:bc:90:14:9d:7b:63:e2:4d:d9:05:4c: c6:96:17:a8:91:9e:70:ec:27:5f:00:91:e4:7f:76: 19:8b:c8:ff:33:6e:fe:e8:92:fc:e4:13:8e:27:57: 95:3f:33:9f:3c:15:f4:9a:61:30:80:de:22:0a:08: b3:50:6c:3d:9c:98:68:73:d0:89:18:fe:f2:66:57: dd:f5:8e:71:21:f3:ca:d1:ff:02:3e:e7:ad:a4:c8: 73:5f:a1:49:bf:ef:2c:43:17:73:ff:9f:04:23:8e: 53:73:e7:42:4c:45:04:9d:63:17:6d:d4:cf:c6:ae: 7d:a4:60:83:70:05:fd:0b:dd:d2:bc:62:00:77:5d: 73:09:f8:43:dd:38:b6:59:9e:1b:c3:a5:e5:e3:e6: f4:7d:ec:8a:d2:db:a9:9b:e5:66:e5:e1:d1:ee:fe: 7c:9d:6b:69:13:20:54:a1:b8:92:f2:da:c6:43:d6: 29:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6D:E3:1C:2F:55:3F:0E:85:10:B7:A9:14:CA:A0:71:93:BF:4E:77 X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ff:c3:22:a0:5c:fe:01:d7:89:f1:ab:9a:85:1f:bf:94:38: c3:a3:49:3d:03:22:d4:c7:d2:56:07:5a:ad:c4:2a:a9:eb:01: ae:bf:74:8b:53:45:91:15:df:76:36:9f:3e:50:2e:98:06:a4: 80:06:8b:9b:4e:2e:63:a3:bc:0f:20:a3:cc:38:09:89:f1:4c: 58:32:ab:65:99:22:9d:be:2c:91:36:23:e1:df:6f:c3:3c:28: 82:fe:76:84:f1:8c:d7:69:db:cc:bf:00:08:4b:f6:56:0d:5f: fe:1a:34:42:23:aa:87:4b:fe:45:e5:fc:08:8d:93:8e:0f:4f: a0:2e:3d:a5:a9:45:16:86:a9:0c:c5:3d:85:fa:bb:37:f7:89: 74:93:b5:27:e4:c0:3c:24:a2:8c:d0:47:cd:72:ce:09:47:31: a4:2d:01:d2:8b:92:b9:dd:b3:a5:14:2c:ba:a5:df:7d:63:7c: 99:91:54:6c:14:18:d4:b4:f9:8c:47:a4:e0:14:41:a1:37:53: 4c:a6:c7:1c:6d:9f:71:64:27:74:76:d8:cb:d5:ad:d5:c8:4b: 24:ef:75:f0:32:56:5a:ac:bd:4e:8d:b1:c5:7c:91:e0:a7:35: 8c:e7:f8:f4:6c:ea:ff:6e:27:ae:70:59:75:dd:cc:c7:c4:c6: 47:3a:b8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUxMDE5MDg1MjAyWhcNMjUxMDI2MDg1MjAyWjAYMRYwFAYD VQQDEw02OGY0YTZiMi1mM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiaeQJMTuU2w1QzlCrMCfo2FjEvgy7Z+JjqfTO9ykbuDsKeH7AVoluGB5OVy B0V3KSK96yeeHLoz6NtDalkmm98Nf22B+BaGVtCQy++9vJAUnXtj4k3ZBUzGlheo kZ5w7CdfAJHkf3YZi8j/M27+6JL85BOOJ1eVPzOfPBX0mmEwgN4iCgizUGw9nJho c9CJGP7yZlfd9Y5xIfPK0f8CPuetpMhzX6FJv+8sQxdz/58EI45Tc+dCTEUEnWMX bdTPxq59pGCDcAX9C93SvGIAd11zCfhD3Ti2WZ4bw6Xl4+b0feyK0tupm+Vm5eHR 7v58nWtpEyBUobiS8trGQ9YpGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpt4xwv VT8OhRC3qRTKoHGTv053MB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn/8MioFz+AdeJ8auahR+/lDjDo0k9AyLUx9JWB1qtxCqp6wGuv3SL U0WRFd92Np8+UC6YBqSABoubTi5jo7wPIKPMOAmJ8UxYMqtlmSKdviyRNiPh32/D PCiC/naE8YzXadvMvwAIS/ZWDV/+GjRCI6qHS/5F5fwIjZOOD0+gLj2lqUUWhqkM xT2F+rs394l0k7Un5MA8JKKM0EfNcs4JRzGkLQHSi5K53bOlFCy6pd99Y3yZkVRs FBjUtPmMR6TgFEGhN1NMpsccbZ9xZCd0dtjL1a3VyEsk73XwMlZarL1OjbHFfJHg pzWM5/j0bOr/bieucFl13czHxMZHOrjT -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:00 2025 by rpki-client