$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: bSKTIdPZcUaUj/XLgrc7lOBO4Oj87mj4JpuUxEeBVrk= Subject key identifier: 76:3B:51:99:F0:BF:3C:FB:4A:02:57:24:F5:75:FF:84:9A:D0:A4:38 Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 04A2 Signing time: Sat 09 Aug 2025 00:26:14 +0000 Manifest this update: Sat 09 Aug 2025 00:26:14 +0000 Manifest next update: Sat 16 Aug 2025 00:26:14 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: BUsreUlI5J0j9p6a2jbs3OYyIkz+TS9ck2MGYjyy1+A=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: mCBDfdCzdMmF0ELlLpacrmjz5gyRnSErCyAUmqRTucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Aug 9 00:26:14 2025 GMT Not After : Aug 16 00:26:14 2025 GMT Subject: CN=689695a6-1669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:74:a1:5b:af:ac:27:7e:41:16:56:ba:56:fa: 3e:84:35:83:02:df:9b:61:8d:58:41:19:4a:c5:32: 41:0e:41:be:61:c6:42:d6:3b:a2:f6:09:71:00:80: f9:73:3f:ed:d7:9d:93:1a:6a:e4:e5:a0:59:5f:3b: cd:db:f8:55:82:8c:41:1b:2d:65:e0:bb:9b:23:b6: a8:ac:e5:00:7f:ed:33:7e:a9:6f:5b:9d:e5:b9:c1: 69:27:6d:bd:0d:4b:59:a3:c2:aa:60:ea:67:9a:65: 95:62:c0:2b:1c:16:8e:a9:a7:77:03:b8:3c:a6:7f: 5b:23:5d:df:26:01:1f:6f:cf:9b:16:fd:11:e5:f6: 50:46:f1:da:14:ea:08:78:76:2c:29:e0:8f:ec:77: ef:4c:f7:2d:0f:b2:03:5c:e4:15:50:a5:03:e4:4e: e3:fa:ae:ff:4f:6a:57:6c:4c:9d:43:75:e6:1f:fb: 5f:6e:75:82:91:54:63:8a:48:b6:07:31:b6:35:4f: 06:0e:00:6d:9f:c7:d9:22:79:c0:59:b5:c6:d8:08: 00:7b:bc:89:0d:82:85:9f:b3:c5:1d:52:a3:36:61: f1:ec:13:42:c3:04:e9:0b:da:9e:f0:80:77:f8:8b: 04:c4:aa:b4:00:f0:1f:46:89:ef:ac:48:10:56:fa: d4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3B:51:99:F0:BF:3C:FB:4A:02:57:24:F5:75:FF:84:9A:D0:A4:38 X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:b4:64:49:c3:2d:f4:9d:da:05:54:68:ec:6f:01:5f:f5:a5: d7:79:2a:8c:a7:88:b2:e4:f7:5c:ca:7c:40:12:b2:0a:b8:69: 96:0d:49:c3:8d:c4:cf:a3:cd:a1:70:49:09:55:ed:ee:3b:8c: c4:36:2c:cc:dc:b7:f4:8e:ee:8a:db:98:cd:f0:86:0c:08:79: 49:b0:cc:11:3a:6b:1f:e4:32:73:3a:7f:a6:44:c8:8f:97:c4: 98:61:96:7b:6e:4c:18:34:ef:f7:7f:1f:03:0c:fd:0d:a8:d2: 13:b0:e5:75:75:26:e8:e9:44:a3:ce:3f:d4:9d:e0:e8:ed:b5: e1:0b:d7:a0:9d:60:a6:15:38:c6:16:9a:72:1e:78:f5:66:3a: 47:8d:9c:63:19:d7:92:2a:30:23:be:c6:ae:57:9d:0a:20:82: 34:4c:3a:58:25:ea:3f:da:65:bb:6b:00:d8:ca:1b:ac:ca:24: 34:bb:8c:98:57:31:44:08:e3:61:22:cd:16:19:cd:9a:73:11: 21:95:bd:2f:12:f2:ee:27:7d:09:f2:8d:c3:19:d1:c1:38:90: 34:e6:1a:20:f8:40:a5:12:a0:12:37:19:c9:3f:05:65:8f:ff: 1b:5d:72:51:1e:52:41:63:99:7d:0a:ac:f1:87:56:a9:bb:2e: 91:1b:e0:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUwODA5MDAyNjE0WhcNMjUwODE2MDAyNjE0WjAYMRYwFAYD VQQDEw02ODk2OTVhNi0xNjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonShW6+sJ35BFla6Vvo+hDWDAt+bYY1YQRlKxTJBDkG+YcZC1jui9glxAID5 cz/t152TGmrk5aBZXzvN2/hVgoxBGy1l4LubI7aorOUAf+0zfqlvW53lucFpJ229 DUtZo8KqYOpnmmWVYsArHBaOqad3A7g8pn9bI13fJgEfb8+bFv0R5fZQRvHaFOoI eHYsKeCP7HfvTPctD7IDXOQVUKUD5E7j+q7/T2pXbEydQ3XmH/tfbnWCkVRjiki2 BzG2NU8GDgBtn8fZInnAWbXG2AgAe7yJDYKFn7PFHVKjNmHx7BNCwwTpC9qe8IB3 +IsExKq0APAfRonvrEgQVvrU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHY7UZnw vzz7SgJXJPV1/4Sa0KQ4MB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCytGRJwy30ndoFVGjsbwFf9aXXeSqMp4iy5PdcynxAErIKuGmWDUnD jcTPo82hcEkJVe3uO4zENizM3Lf0ju6K25jN8IYMCHlJsMwROmsf5DJzOn+mRMiP l8SYYZZ7bkwYNO/3fx8DDP0NqNITsOV1dSbo6USjzj/UneDo7bXhC9egnWCmFTjG FppyHnj1ZjpHjZxjGdeSKjAjvsauV50KIII0TDpYJeo/2mW7awDYyhusyiQ0u4yY VzFECONhIs0WGc2acxEhlb0vEvLuJ30J8o3DGdHBOJA05hog+EClEqASNxnJPwVl j/8bXXJRHlJBY5l9Cqzxh1apuy6RG+BM -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:26 2025 by rpki-client