$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: istD/yLdR5aGl1W1Jv9uBjHDMjzAv37rKSQw/rR2EaM= Subject key identifier: A5:4E:F6:05:87:3E:FA:6B:18:3E:F3:00:2B:86:06:F7:61:A5:86:ED Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: AD Signing time: Sat 23 Aug 2025 06:20:47 +0000 Manifest this update: Sat 23 Aug 2025 06:20:46 +0000 Manifest next update: Sat 30 Aug 2025 06:20:46 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: 4ZoBoIo0Ci7kUKyrvabT15QNzZzl5K5C0T9WMi8dDwk=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: iP5vBpep621bA7XFAwnUEXsQLF6f2HgJTc6XMRta7XQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Aug 23 06:20:46 2025 GMT Not After : Aug 30 06:20:46 2025 GMT Subject: CN=68a95dbf-2ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cf:fd:4c:b2:e0:6f:40:a3:57:7b:9e:ff:96: 35:61:35:0e:e2:8d:f5:3b:ed:e1:d9:15:a2:63:d7: 7b:2b:65:b6:2f:59:22:0d:4d:09:42:1f:4a:4c:d9: fd:6b:4b:23:72:ff:11:0d:8a:54:53:55:04:5a:b5: c7:86:6b:d0:06:26:e8:e8:1e:0e:0d:34:ac:e5:92: 48:63:2a:df:55:41:d5:04:51:24:36:15:d7:0a:c0: e2:89:01:09:6f:8f:e0:60:bf:1d:c0:d3:8c:d1:bb: 82:6e:08:84:6a:c9:81:80:cb:c6:b1:86:6a:10:a5: a8:77:1e:00:eb:78:65:96:14:37:0d:09:cb:03:8a: 24:5b:9a:db:d6:4c:04:89:f5:0f:4b:d5:1b:11:6f: ff:d9:f3:69:2a:f2:72:85:bc:0f:36:f7:4c:df:78: 25:aa:3f:94:6a:3f:ef:ec:8f:4c:dc:ba:7d:15:00: da:1c:c4:86:14:b7:21:9a:e9:15:d2:8e:c0:3e:6d: 1b:4f:31:7d:77:59:fa:8b:d7:ad:3f:14:52:a9:d7: f4:48:f4:3f:be:a8:27:ae:60:08:82:fe:48:78:95: 8b:f8:8d:57:ff:d9:59:93:3a:d4:4c:77:67:91:68: ea:f1:47:18:21:01:7a:77:75:8f:6a:2d:1c:fb:01: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4E:F6:05:87:3E:FA:6B:18:3E:F3:00:2B:86:06:F7:61:A5:86:ED X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:af:fc:18:37:49:cc:08:60:3c:9a:3a:60:1f:1e:48:9e:30: d0:b4:67:c2:98:3b:18:12:3d:d8:f5:7f:d8:b1:ac:77:df:2c: ff:5e:2c:6d:0d:55:b0:7f:59:08:14:9c:a1:03:40:38:02:e7: 47:d7:b3:dd:1b:30:15:e9:ab:f5:1b:f2:58:76:25:bc:2b:54: c9:eb:47:0c:60:49:fb:2f:65:49:e3:bb:12:6b:32:d4:79:ea: b5:67:13:89:ab:f6:06:15:77:63:65:ce:2a:1c:29:72:bc:32: 66:83:86:60:f7:02:25:51:4f:93:bf:3d:3a:44:d5:96:72:78: 1d:82:ba:3d:95:e6:a5:58:be:62:e1:4e:3b:d9:fa:53:34:e5: c0:7f:5f:ea:b6:25:f8:20:4c:40:e8:83:c0:96:03:ea:b4:f7: b4:b3:f6:10:df:e3:4b:19:5c:8c:d2:23:1a:b2:a4:45:f4:f6: b4:d6:2a:5a:d4:0b:c9:37:76:a8:2e:3c:b6:13:a9:f8:5d:cd: 37:df:93:00:45:f7:1e:5d:f3:90:a5:16:33:ee:4b:f8:b9:c5: dd:7f:ce:93:7a:e3:e9:8a:bc:ea:d6:4d:61:d9:d1:a0:b3:92: 77:85:65:65:b4:da:41:aa:5e:86:2b:65:69:25:ee:e6:14:83: 6d:83:d3:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwODIzMDYyMDQ2WhcNMjUwODMwMDYyMDQ2WjAYMRYwFAYD VQQDEw02OGE5NWRiZi0yYWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc/9TLLgb0CjV3ue/5Y1YTUO4o31O+3h2RWiY9d7K2W2L1kiDU0JQh9KTNn9 a0sjcv8RDYpUU1UEWrXHhmvQBibo6B4ODTSs5ZJIYyrfVUHVBFEkNhXXCsDiiQEJ b4/gYL8dwNOM0buCbgiEasmBgMvGsYZqEKWodx4A63hllhQ3DQnLA4okW5rb1kwE ifUPS9UbEW//2fNpKvJyhbwPNvdM33glqj+Uaj/v7I9M3Lp9FQDaHMSGFLchmukV 0o7APm0bTzF9d1n6i9etPxRSqdf0SPQ/vqgnrmAIgv5IeJWL+I1X/9lZkzrUTHdn kWjq8UcYIQF6d3WPai0c+wHTGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVO9gWH PvprGD7zACuGBvdhpYbtMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABr/wYN0nMCGA8mjpgHx5InjDQtGfCmDsYEj3Y9X/Ysax33yz/Xixt DVWwf1kIFJyhA0A4AudH17PdGzAV6av1G/JYdiW8K1TJ60cMYEn7L2VJ47sSazLU eeq1ZxOJq/YGFXdjZc4qHClyvDJmg4Zg9wIlUU+Tvz06RNWWcngdgro9lealWL5i 4U472fpTNOXAf1/qtiX4IExA6IPAlgPqtPe0s/YQ3+NLGVyM0iMasqRF9Pa01ipa 1AvJN3aoLjy2E6n4Xc0335MARfceXfOQpRYz7kv4ucXdf86TeuPpirzq1k1h2dGg s5J3hWVltNpBql6GK2VpJe7mFINtg9P0 -----END CERTIFICATE-----Generated at Sun Aug 24 00:06:22 2025 by rpki-client