$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: uKHglVoCGacj3/caorKa8v97jF/QKLV2DDWZ+APoW2M= Subject key identifier: C2:2A:A6:F0:0D:3B:1D:3A:60:6A:17:40:23:D5:BB:6E:CA:4C:B1:C4 Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 0489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 0485 Signing time: Thu 12 Jun 2025 23:37:15 +0000 Manifest this update: Thu 12 Jun 2025 23:37:14 +0000 Manifest next update: Thu 19 Jun 2025 23:37:14 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: t2x4oi5Yu7xGLIy+ZIezA6Ygrvhtf+vMfmH8llMReas=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1161 (0x489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Jun 12 23:37:14 2025 GMT Not After : Jun 19 23:37:14 2025 GMT Subject: CN=684b64aa-54a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:81:3b:b8:e0:cd:ad:70:56:00:e0:56:4f: 58:63:d2:51:07:6e:31:40:f8:03:83:60:4a:4d:35: 0d:75:93:a5:e6:ee:7f:11:44:8b:80:ee:9f:af:4f: a6:d7:6f:8c:bc:33:b5:58:dd:53:a6:ca:cb:84:d4: 83:92:e3:92:de:6e:55:62:14:30:47:e9:6c:01:c9: ee:83:47:ba:5a:74:7e:10:8c:82:b9:a6:55:3c:a5: d2:57:8c:7c:04:81:d9:49:0c:bb:76:0b:19:18:82: 09:31:61:20:c6:b0:28:af:3d:ce:8e:aa:c2:2c:e8: 89:3a:1f:7d:27:d2:1b:a0:51:a6:b3:2e:e5:3d:49: 75:81:00:73:48:e9:40:75:bb:9c:fb:44:11:0e:f8: b1:5a:42:39:6c:fe:38:db:9a:d7:53:72:1a:f1:6b: 5e:c5:e1:3e:1e:e6:1c:b6:f8:2e:49:83:88:49:17: 79:63:bc:02:b2:3a:26:9f:93:eb:39:06:db:39:cb: 2d:d8:34:98:a2:fe:ac:e3:74:69:4e:a4:08:80:b4: 91:19:85:ce:1f:2e:96:43:47:e9:81:64:d8:59:96: 25:e1:67:1f:12:79:9a:6d:1a:a2:de:37:57:c9:3e: a6:e0:e4:a5:90:65:fa:80:17:9d:48:09:a3:c5:f9: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:A6:F0:0D:3B:1D:3A:60:6A:17:40:23:D5:BB:6E:CA:4C:B1:C4 X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:37:cd:15:65:ba:f6:6c:f3:80:c5:24:46:76:61:a0:0f:87: e0:78:5b:28:a4:be:d4:4e:59:ac:e2:77:58:e9:a0:15:2d:c5: d2:d8:f5:6e:9d:b6:4c:d1:59:13:66:c9:c0:b9:e4:0b:19:2d: 9d:42:73:0e:dd:d0:40:a6:32:81:24:b3:b6:24:36:bd:01:14: 74:ec:ea:2a:62:7b:72:b5:90:75:f8:99:ac:b8:02:f7:bd:d1: 44:30:9e:08:b0:72:8f:df:5d:8b:73:ad:6b:d5:fe:a3:7a:7b: 05:2b:74:07:63:82:2e:90:e1:c1:2c:95:1e:40:b5:b7:2c:b1: d1:4e:a5:0a:69:49:72:e7:7b:f5:f0:18:a3:ba:04:56:c6:a9: 1d:5c:c2:dd:d9:c2:8f:03:b7:66:c9:b2:2a:e2:09:0c:0e:d4: 33:cb:03:8a:a7:68:2b:46:bc:24:3b:df:9d:0b:88:7d:22:ec: a2:3a:b0:b9:91:ab:3e:54:fb:ca:94:f6:ab:2a:05:08:b8:e1: 69:d6:47:02:57:a9:d9:79:cf:b5:a2:0d:c2:80:12:42:98:fe: c8:93:23:44:3e:41:5c:67:d3:a3:77:b8:9a:da:d2:2b:a1:5b: be:20:23:e1:44:88:e5:9b:a6:6e:35:0f:ac:86:1d:24:ca:08: 8a:a9:5a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUwNjEyMjMzNzE0WhcNMjUwNjE5MjMzNzE0WjAYMRYwFAYD VQQDEw02ODRiNjRhYS01NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1+BO7jgza1wVgDgVk9YY9JRB24xQPgDg2BKTTUNdZOl5u5/EUSLgO6fr0+m 12+MvDO1WN1TpsrLhNSDkuOS3m5VYhQwR+lsAcnug0e6WnR+EIyCuaZVPKXSV4x8 BIHZSQy7dgsZGIIJMWEgxrAorz3OjqrCLOiJOh99J9IboFGmsy7lPUl1gQBzSOlA dbuc+0QRDvixWkI5bP4425rXU3Ia8WtexeE+HuYctvguSYOISRd5Y7wCsjomn5Pr OQbbOcst2DSYov6s43RpTqQIgLSRGYXOHy6WQ0fpgWTYWZYl4WcfEnmabRqi3jdX yT6m4OSlkGX6gBedSAmjxfn/rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIqpvAN Ox06YGoXQCPVu27KTLHEMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALN80VZbr2bPOAxSRGdmGgD4fgeFsopL7UTlms4ndY6aAVLcXS2PVu nbZM0VkTZsnAueQLGS2dQnMO3dBApjKBJLO2JDa9ARR07OoqYntytZB1+JmsuAL3 vdFEMJ4IsHKP312Lc61r1f6jensFK3QHY4IukOHBLJUeQLW3LLHRTqUKaUly53v1 8BijugRWxqkdXMLd2cKPA7dmybIq4gkMDtQzywOKp2grRrwkO9+dC4h9IuyiOrC5 kas+VPvKlParKgUIuOFp1kcCV6nZec+1og3CgBJCmP7IkyNEPkFcZ9Ojd7ia2tIr oVu+ICPhRIjlm6ZuNQ+shh0kygiKqVo8 -----END CERTIFICATE-----Generated at Sat Jun 14 19:24:24 2025 by rpki-client