$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: yjibEgKFGot7nKJ3kcCGAjkv0Bmi/eQkhRL5Futrjk0= Subject key identifier: 5A:AF:42:EA:58:D2:E8:8B:0C:5E:09:E9:CB:C0:C7:55:E8:72:AD:DB Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 048F Signing time: Thu 03 Jul 2025 00:20:36 +0000 Manifest this update: Thu 03 Jul 2025 00:20:36 +0000 Manifest next update: Thu 10 Jul 2025 00:20:36 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: /Jky8s9t+OU8XCjaGqPJ75TK3v/0GMC40x2JlT07DrY=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Jul 3 00:20:36 2025 GMT Not After : Jul 10 00:20:36 2025 GMT Subject: CN=6865ccd4-7250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:48:23:da:f4:ee:fb:7b:46:f6:a5:75:91:86: 26:4b:e9:1c:64:e4:fe:09:e0:c1:59:6f:a6:4d:50: be:3d:13:15:02:ad:af:20:71:8c:66:30:d5:9c:1d: 21:02:76:5b:d9:59:48:4e:44:84:d3:27:b3:3d:e0: 96:97:89:63:cc:8a:32:a4:57:8d:91:11:1e:9d:4f: 50:de:d9:43:5c:69:90:c9:e8:4c:38:b6:44:16:4b: de:fc:58:12:cc:62:d7:8f:3e:0d:5e:ed:5d:82:ab: 02:29:88:44:00:79:66:ce:e7:c5:cf:8d:26:46:7d: 7f:0d:07:41:d3:fa:6c:c8:b5:d6:86:38:6a:9a:d2: bd:a9:75:db:8e:51:d1:10:06:12:bc:87:65:14:a0: e0:8e:86:c6:50:be:dd:1c:00:f9:79:93:e6:20:cb: a0:1d:6f:e5:e7:dd:d6:c4:45:15:76:f7:cc:bf:e1: 4b:2e:03:b3:69:c7:97:74:83:f0:e1:22:6f:83:d3: 43:f8:74:30:81:4e:2f:80:3a:3a:7f:a8:e1:de:19: 0d:b7:56:ee:f8:d9:e6:d9:dd:76:57:45:15:1d:3d: ea:8c:fd:16:2f:9a:68:a8:e3:50:18:c9:eb:99:b8: 61:8e:4b:1a:9b:84:fb:65:78:e0:24:99:e7:c2:ac: 61:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AF:42:EA:58:D2:E8:8B:0C:5E:09:E9:CB:C0:C7:55:E8:72:AD:DB X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e3:5f:82:61:ea:73:b2:3e:60:0d:b6:42:46:11:a6:5a:ab: 90:5f:c1:b7:c2:81:d3:b8:57:83:5a:67:42:98:59:92:b2:ed: 77:dc:f8:35:83:99:9f:41:b3:59:51:3a:24:76:6f:55:7a:1f: 1b:de:33:c3:25:79:2b:38:04:08:77:6b:6d:34:eb:a5:37:a5: 30:59:3d:1f:99:40:24:77:13:24:26:e0:9c:fc:2b:d8:dd:b6: 82:a3:d8:ae:da:88:b4:c7:81:06:60:8e:31:91:de:1e:0d:10: a1:b2:bc:ab:69:5b:b2:e5:6f:59:9d:90:bb:46:f5:7a:ae:a5: b8:f8:f6:d3:2b:df:16:ca:22:3d:9f:b9:ab:e3:af:73:be:6e: 58:0f:36:04:e6:b0:33:56:5f:f7:89:7d:32:eb:8b:c7:c6:1f: 92:44:e9:2e:fd:a3:0b:6e:6a:a8:1a:1f:e6:e8:14:c9:ec:90: 6c:99:c0:33:87:2f:73:df:0f:29:1a:eb:38:3b:c9:1e:c0:1b: 2c:bf:ac:ac:cc:df:4e:f1:ba:6c:60:4e:3d:36:a8:b7:4d:e6: 64:39:b2:1a:c9:d8:19:37:f8:98:6a:de:2e:c1:0f:ca:84:4f: 63:85:4d:8e:e8:f0:10:c7:bf:eb:46:d0:2e:2d:50:b7:ff:db: d8:50:9d:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUwNzAzMDAyMDM2WhcNMjUwNzEwMDAyMDM2WjAYMRYwFAYD VQQDEw02ODY1Y2NkNC03MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEgj2vTu+3tG9qV1kYYmS+kcZOT+CeDBWW+mTVC+PRMVAq2vIHGMZjDVnB0h AnZb2VlITkSE0yezPeCWl4ljzIoypFeNkREenU9Q3tlDXGmQyehMOLZEFkve/FgS zGLXjz4NXu1dgqsCKYhEAHlmzufFz40mRn1/DQdB0/psyLXWhjhqmtK9qXXbjlHR EAYSvIdlFKDgjobGUL7dHAD5eZPmIMugHW/l593WxEUVdvfMv+FLLgOzaceXdIPw 4SJvg9ND+HQwgU4vgDo6f6jh3hkNt1bu+Nnm2d12V0UVHT3qjP0WL5poqONQGMnr mbhhjksam4T7ZXjgJJnnwqxhFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqvQupY 0uiLDF4J6cvAx1Xocq3bMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd41+CYepzsj5gDbZCRhGmWquQX8G3woHTuFeDWmdCmFmSsu133Pg1 g5mfQbNZUTokdm9Veh8b3jPDJXkrOAQId2ttNOulN6UwWT0fmUAkdxMkJuCc/CvY 3baCo9iu2oi0x4EGYI4xkd4eDRChsryraVuy5W9ZnZC7RvV6rqW4+PbTK98WyiI9 n7mr469zvm5YDzYE5rAzVl/3iX0y64vHxh+SROku/aMLbmqoGh/m6BTJ7JBsmcAz hy9z3w8pGus4O8kewBssv6yszN9O8bpsYE49Nqi3TeZkObIaydgZN/iYat4uwQ/K hE9jhU2O6PAQx7/rRtAuLVC3/9vYUJ1z -----END CERTIFICATE-----Generated at Thu Jul 3 02:05:17 2025 by rpki-client