$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: k8uolCu0g5rmlUQVOyiejOhCTn3wQjiKaah4ZvXOrDI= Subject key identifier: 5D:35:9F:FD:33:8C:90:45:B9:CC:73:05:EB:07:84:5B:49:CE:81:0F Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 92 Signing time: Sat 05 Jul 2025 06:42:52 +0000 Manifest this update: Sat 05 Jul 2025 06:42:52 +0000 Manifest next update: Sat 12 Jul 2025 06:42:52 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: BOeUEwCoSBBaTEpKPKqCiQpDwo8KpYSM7HuvtbhsMUU=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Jul 5 06:42:52 2025 GMT Not After : Jul 12 06:42:52 2025 GMT Subject: CN=6868c96c-87e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:85:c4:3b:57:2c:77:0c:bc:db:c3:04:de: dc:ec:70:43:1c:f6:cd:c4:6a:a7:c6:05:8e:2e:3d: 2f:ed:65:fc:0f:04:8a:a8:03:ea:ca:f6:aa:7b:29: b8:0a:a9:9a:ac:26:84:da:82:21:db:cb:a2:e8:53: 4a:79:f5:69:da:55:8d:26:68:eb:99:3c:3b:bd:ed: a6:18:dd:68:03:cb:32:9e:7e:89:49:b5:d0:5e:4b: 3e:3c:a4:d9:b2:ea:fb:1e:d6:ce:bf:47:d3:43:18: 1b:7d:ad:c0:67:28:f8:dd:7e:46:29:95:41:32:19: 7e:c0:21:71:7f:c5:54:c7:dc:ca:da:34:42:d7:43: 4b:79:3a:3b:1e:d7:a8:aa:68:17:7f:a7:ac:5c:e3: 45:fd:53:f0:df:54:2d:4a:95:a5:8c:72:1e:b2:c0: 94:fc:52:bd:61:39:50:43:aa:56:23:3d:5c:eb:1a: 92:42:61:82:1b:d9:69:5d:30:db:ff:dc:85:af:06: 8c:ee:9d:d2:86:16:26:02:16:7f:24:2b:86:9e:0e: 0f:79:27:1a:50:77:f6:8c:a7:ed:2b:52:c9:28:09: f3:55:f8:60:d8:7d:db:a4:dc:73:fc:7a:1b:f3:fc: 44:22:23:48:c4:ca:a4:e5:87:a5:23:1a:37:81:d3: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:35:9F:FD:33:8C:90:45:B9:CC:73:05:EB:07:84:5B:49:CE:81:0F X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:c6:90:e5:65:fa:2a:e5:61:55:a9:b4:6d:54:12:0f:34:12: ef:0d:66:53:d5:67:64:94:51:b3:9b:29:85:e1:f2:8f:a9:d6: e1:2f:4e:0f:b8:c4:ed:09:82:87:9d:cd:9a:34:82:aa:35:91: 94:d0:d9:5d:7f:2c:b6:24:0e:69:9d:23:52:32:7c:d7:19:44: 01:be:18:20:87:98:10:48:ac:13:5e:26:b0:e7:db:ce:df:f1: 86:02:0e:37:fe:a2:5f:8a:eb:c8:f3:4f:70:56:53:49:ce:ff: c0:65:61:81:e2:0c:8a:85:cd:44:c2:ee:2e:64:c9:d7:48:16: 37:d0:c5:a2:31:f4:d1:22:2b:47:0a:a6:c7:51:84:35:8f:ad: 05:f6:0f:fb:63:b7:2c:af:2a:d0:df:29:5f:e9:e6:8c:42:a3: bc:e8:dd:52:b3:89:c2:68:e3:a7:77:9a:56:e7:8d:d0:6c:eb: 84:3f:33:37:59:66:f1:93:cb:81:e0:7a:c6:24:d1:30:3a:26: be:a0:ac:d7:97:b9:fd:ee:c0:c1:1a:d4:ef:26:cf:14:76:5f: 2b:c4:7c:d4:ca:d1:53:29:6d:e0:64:88:e9:f9:41:8c:0f:df: 95:e7:83:d9:00:c5:3b:54:fb:bc:61:af:5d:d8:76:60:5b:1c: 52:a1:92:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwNzA1MDY0MjUyWhcNMjUwNzEyMDY0MjUyWjAYMRYwFAYD VQQDEw02ODY4Yzk2Yy04N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbiFxDtXLHcMvNvDBN7c7HBDHPbNxGqnxgWOLj0v7WX8DwSKqAPqyvaqeym4 CqmarCaE2oIh28ui6FNKefVp2lWNJmjrmTw7ve2mGN1oA8synn6JSbXQXks+PKTZ sur7HtbOv0fTQxgbfa3AZyj43X5GKZVBMhl+wCFxf8VUx9zK2jRC10NLeTo7Hteo qmgXf6esXONF/VPw31QtSpWljHIessCU/FK9YTlQQ6pWIz1c6xqSQmGCG9lpXTDb /9yFrwaM7p3ShhYmAhZ/JCuGng4PeScaUHf2jKftK1LJKAnzVfhg2H3bpNxz/Hob 8/xEIiNIxMqk5YelIxo3gdNlXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF01n/0z jJBFucxzBesHhFtJzoEPMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXxpDlZfoq5WFVqbRtVBIPNBLvDWZT1WdklFGzmymF4fKPqdbhL04P uMTtCYKHnc2aNIKqNZGU0Nldfyy2JA5pnSNSMnzXGUQBvhggh5gQSKwTXiaw59vO 3/GGAg43/qJfiuvI809wVlNJzv/AZWGB4gyKhc1Ewu4uZMnXSBY30MWiMfTRIitH CqbHUYQ1j60F9g/7Y7csryrQ3ylf6eaMQqO86N1Ss4nCaOOnd5pW543QbOuEPzM3 WWbxk8uB4HrGJNEwOia+oKzXl7n97sDBGtTvJs8Udl8rxHzUytFTKW3gZIjp+UGM D9+V54PZAMU7VPu8Ya9d2HZgWxxSoZLj -----END CERTIFICATE-----Generated at Sat Jul 5 18:35:52 2025 by rpki-client