$ rpki-client -vvf rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft File: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft (raw, json) Hash identifier: Hwh6w7CNdwHNVne8VvTYNkoOrVH7AOo9UrQZdnX64sg= Subject key identifier: 2E:33:CF:C8:02:01:D8:97:A9:0D:62:81:98:9C:ED:B3:21:1A:89:1A Authority key identifier: 58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B Certificate issuer: /CN=A915B50D/serialNumber=586F933176F6545435BB0697FE5F982A2093941B Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft Manifest number: 8A Signing time: Thu 19 Jun 2025 05:51:55 +0000 Manifest this update: Thu 19 Jun 2025 05:51:55 +0000 Manifest next update: Thu 26 Jun 2025 05:51:55 +0000 Files and hashes: 1: WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl (hash: c28591plMmVI8SzUYfb/atKTyVmoNedZkcle053+6jA=) 2: EABF54FA7BC111EFA1A45E4BC4F9AE02.roa (hash: fkSkf/lrYAP+GPqi/wzsXVOHAz3euOzdB17q/HqvVko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B50D, serialNumber=586F933176F6545435BB0697FE5F982A2093941B Validity Not Before: Jun 19 05:51:55 2025 GMT Not After : Jun 26 05:51:55 2025 GMT Subject: CN=6853a57b-be05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:56:11:b0:a0:f0:d2:dc:fd:a3:63:85:23: 8e:34:9e:dc:31:da:03:44:c3:02:6a:fc:4f:6d:57: c6:cc:dd:83:a7:21:dc:c2:10:55:6a:d3:fb:b0:1b: 0f:1a:7f:d8:f5:60:82:5a:fc:5a:8a:3a:eb:7c:0a: 3c:d6:1d:f0:17:56:b2:89:a9:54:41:c9:32:4b:c8: 39:78:08:3c:d3:56:ad:d7:d3:b1:63:8a:0b:de:0a: 8e:74:52:2d:77:ac:77:a2:51:1c:91:61:25:15:b0: 54:4e:6b:41:f0:d9:2c:8b:d9:17:60:1c:26:b5:c3: 51:6f:39:48:f0:03:88:38:fd:21:86:37:b7:9d:58: 93:cf:4d:d0:84:42:8b:f1:94:91:bb:2b:37:9b:f5: ff:1a:ee:67:a1:63:0e:c2:18:b1:86:ae:18:99:94: 8f:c3:ee:bc:e0:99:dc:01:13:0c:6e:65:8a:dc:b6: de:d9:71:60:06:ca:43:de:fc:fd:80:a7:c7:b6:23: 58:21:67:ac:02:71:63:2d:5a:b0:dc:fa:01:b4:88: ef:46:ab:71:62:69:65:bb:10:ea:a6:ae:30:e6:50: 5e:93:d0:35:1a:9f:67:44:16:a3:d2:45:3c:d2:96: 7f:7c:78:68:dd:89:fc:24:a9:c4:c5:05:ca:1b:9d: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:CF:C8:02:01:D8:97:A9:0D:62:81:98:9C:ED:B3:21:1A:89:1A X509v3 Authority Key Identifier: keyid:58:6F:93:31:76:F6:54:54:35:BB:06:97:FE:5F:98:2A:20:93:94:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B50D/EF8E3DAC7BBC11EF92EE1A66C4F9AE02/WG-TMXb2VFQ1uwaX_l-YKiCTlBs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:9b:40:b0:e8:d9:40:62:68:c4:a1:42:cd:02:f5:63:d3:87: 14:aa:76:d2:18:6c:d8:32:39:44:69:9f:e7:be:1f:4d:25:52: f9:76:ca:7c:41:4d:b3:71:22:c0:ad:ba:0e:ba:a3:d9:ed:02: 35:4f:2a:4e:e9:26:1c:ec:7f:18:4b:e1:ed:a4:80:4d:f9:36: 6b:22:3d:17:fc:43:34:70:cf:1a:2a:c6:a3:b5:dd:8e:b8:4b: ed:a5:7b:ba:39:9b:2a:93:e1:6b:9c:06:61:02:c4:56:4a:1d: dc:78:91:39:b4:51:fb:0c:20:00:66:d4:42:37:3f:45:26:25: 83:ab:3c:86:ae:f3:5a:8e:d2:c6:0e:2f:9a:da:67:96:6c:35: 89:72:49:c1:3e:62:da:82:30:a3:cb:80:a8:a2:78:fb:58:9f: 5a:45:52:0f:9a:33:29:a7:da:ee:72:6f:79:f0:38:c9:ff:ad: c7:7b:0c:33:f0:13:8a:f9:10:91:59:d1:66:57:fc:df:fc:f5: 01:10:66:0f:cc:7f:f5:22:89:a7:5b:b5:24:e6:05:6c:60:da: 28:1c:e0:b1:3f:d3:14:75:15:1c:fe:77:ef:de:21:f3:d6:c4: e0:bc:2a:76:b3:79:54:d3:f7:58:35:87:52:de:fb:77:ec:d4: fa:2e:75:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1MEQxMTAvBgNVBAUTKDU4NkY5MzMxNzZGNjU0NTQzNUJCMDY5N0ZFNUY5ODJB MjA5Mzk0MUIwHhcNMjUwNjE5MDU1MTU1WhcNMjUwNjI2MDU1MTU1WjAYMRYwFAYD VQQDEw02ODUzYTU3Yi1iZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQFWEbCg8NLc/aNjhSOONJ7cMdoDRMMCavxPbVfGzN2DpyHcwhBVatP7sBsP Gn/Y9WCCWvxaijrrfAo81h3wF1ayialUQckyS8g5eAg801at19OxY4oL3gqOdFIt d6x3olEckWElFbBUTmtB8Nksi9kXYBwmtcNRbzlI8AOIOP0hhje3nViTz03QhEKL 8ZSRuys3m/X/Gu5noWMOwhixhq4YmZSPw+684JncARMMbmWK3Lbe2XFgBspD3vz9 gKfHtiNYIWesAnFjLVqw3PoBtIjvRqtxYmlluxDqpq4w5lBek9A1Gp9nRBaj0kU8 0pZ/fHho3Yn8JKnExQXKG51zDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4zz8gC AdiXqQ1igZic7bMhGokaMB8GA1UdIwQYMBaAFFhvkzF29lRUNbsGl/5fmCogk5Qb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUwRC9FRjhFM0RBQzdC QkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZGUTF1d2FYX2wtWUtpQ1Rs QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dHLVRNWGIyVkZRMXV3YVhfbC1ZS2lDVGxCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUwRC9FRjhFM0RBQzdCQkMxMUVGOTJFRTFBNjZDNEY5QUUwMi9XRy1UTVhiMlZG UTF1d2FYX2wtWUtpQ1RsQnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjm0Cw6NlAYmjEoULNAvVj04cUqnbSGGzYMjlEaZ/nvh9NJVL5dsp8 QU2zcSLArboOuqPZ7QI1TypO6SYc7H8YS+HtpIBN+TZrIj0X/EM0cM8aKsajtd2O uEvtpXu6OZsqk+FrnAZhAsRWSh3ceJE5tFH7DCAAZtRCNz9FJiWDqzyGrvNajtLG Di+a2meWbDWJcknBPmLagjCjy4Coonj7WJ9aRVIPmjMpp9rucm958DjJ/63Hewwz 8BOK+RCRWdFmV/zf/PUBEGYPzH/1IomnW7Uk5gVsYNooHOCxP9MUdRUc/nfv3iHz 1sTgvCp2s3lU0/dYNYdS3vt37NT6LnUT -----END CERTIFICATE-----Generated at Thu Jun 19 15:02:16 2025 by rpki-client