$ rpki-client -vvf rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft File: WM2A__9oRR1A_ALHDduR-tjsMT0.mft (raw, json) Hash identifier: VKHbHEdEfV9qhEbzooPDfnqX54yUqTIKxWjQU7dMOVg= Subject key identifier: 77:E2:D3:FB:C2:32:B7:F2:1E:A3:EF:C0:AF:A7:20:9E:5F:4F:3E:DA Authority key identifier: 58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D Certificate issuer: /CN=A916D17C/serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft Manifest number: 04D0 Signing time: Tue 04 Nov 2025 23:54:25 +0000 Manifest this update: Tue 04 Nov 2025 23:54:24 +0000 Manifest next update: Tue 11 Nov 2025 23:54:24 +0000 Files and hashes: 1: WM2A__9oRR1A_ALHDduR-tjsMT0.crl (hash: AqiSWFrbOgfdk/oom9XdysM68FnchqTvPu1kb9QElic=) 2: 980C961041CB11EC9262BD80C4F9AE02.roa (hash: flGZY0OZ/isSxgXY6JSmW0PQxMoPLoOfi+JFDAY+z3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D17C, serialNumber=58CD80FFFF68451D40FC02C70DDB91FAD8EC313D Validity Not Before: Nov 4 23:54:24 2025 GMT Not After : Nov 11 23:54:24 2025 GMT Subject: CN=690a9230-7b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:b0:6d:8c:b6:2a:4b:de:29:c1:2d:87:86: aa:00:1e:0e:cd:8b:da:e6:3d:c6:a8:0b:c9:5a:9d: 25:ae:25:f6:92:33:17:0f:c4:f9:72:87:e5:3b:20: 5a:83:0e:50:12:ff:2c:03:04:cf:9d:22:be:29:ea: 15:9b:7e:05:fa:77:ef:91:dd:05:92:d5:5a:11:00: 18:7c:5e:85:94:86:70:d7:fb:61:c3:82:a3:14:d3: 97:ef:29:dd:a7:4c:f7:a9:71:b9:b3:71:48:62:b5: 31:92:ca:b1:fe:52:dd:c2:8f:da:0b:f9:35:75:5c: 0d:9e:d3:48:be:42:c6:cd:a5:94:32:92:35:3c:ff: a5:1f:6b:4b:81:3b:99:53:87:a2:b3:3d:ac:cd:8f: 60:49:74:69:22:54:25:16:26:04:31:d9:4d:74:ae: 06:5f:0a:63:04:22:48:fb:fa:07:1c:19:2d:da:31: 6b:08:99:77:e8:fa:aa:8d:0c:3a:06:04:35:a7:27: 3e:61:86:d9:f6:69:d8:e8:5a:90:a6:11:4f:55:9d: c3:c1:ed:48:68:2a:00:74:8d:dd:da:c2:92:e1:65: a2:0e:3b:92:f9:f7:63:42:21:e3:e7:9f:72:79:89: 8c:20:89:1f:5b:63:06:78:05:9f:51:b7:fe:12:12: a4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E2:D3:FB:C2:32:B7:F2:1E:A3:EF:C0:AF:A7:20:9E:5F:4F:3E:DA X509v3 Authority Key Identifier: keyid:58:CD:80:FF:FF:68:45:1D:40:FC:02:C7:0D:DB:91:FA:D8:EC:31:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WM2A__9oRR1A_ALHDduR-tjsMT0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D17C/1839780841C211EC85F42868C4F9AE02/WM2A__9oRR1A_ALHDduR-tjsMT0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:7f:63:6e:d1:95:07:d8:3e:a4:de:2a:79:54:4f:98:bb:19: 75:51:bf:56:5e:28:6c:81:5f:bd:ba:79:08:e7:87:57:dd:e8: e7:9c:bd:1c:e6:6a:b0:32:a2:33:60:94:10:37:96:9b:a6:bc: 1c:7b:24:62:db:de:42:4d:5c:27:ec:44:58:87:99:08:8d:41: 9c:04:f3:6d:ed:d7:49:96:4c:b0:5e:4d:6a:6e:f7:30:b4:3e: a8:f6:42:8e:1c:57:3d:aa:09:57:90:1d:87:42:94:e0:57:75: e4:d2:fd:67:16:97:67:ff:a8:7c:c1:8a:f6:a6:ab:92:cc:7a: e8:2f:12:ef:43:a4:72:d2:ed:43:eb:fe:cb:cb:e7:bf:a4:e1: 3f:4b:f0:d6:d4:c3:80:09:f0:2c:a0:76:70:83:6c:01:e5:4c: 7f:a7:e1:be:8d:d6:0e:b4:5f:22:b2:75:52:2b:54:b6:d0:0f: a0:53:f7:41:42:0b:67:02:18:ce:2e:2a:78:99:d2:ab:98:12: d5:44:97:8e:e1:bc:04:fc:e9:e9:aa:c8:4a:19:bc:c6:c5:b6: a9:46:ec:a4:53:af:a9:30:0e:8a:38:f4:31:25:17:3c:c3:50: e2:ba:f1:37:c6:d1:36:56:b5:ad:2e:b6:b6:73:dc:37:e8:26: 01:5d:3b:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQxN0MxMTAvBgNVBAUTKDU4Q0Q4MEZGRkY2ODQ1MUQ0MEZDMDJDNzBEREI5MUZB RDhFQzMxM0QwHhcNMjUxMTA0MjM1NDI0WhcNMjUxMTExMjM1NDI0WjAYMRYwFAYD VQQDEw02OTBhOTIzMC03YjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFWwbYy2KkveKcEth4aqAB4OzYva5j3GqAvJWp0lriX2kjMXD8T5coflOyBa gw5QEv8sAwTPnSK+KeoVm34F+nfvkd0FktVaEQAYfF6FlIZw1/thw4KjFNOX7ynd p0z3qXG5s3FIYrUxksqx/lLdwo/aC/k1dVwNntNIvkLGzaWUMpI1PP+lH2tLgTuZ U4eisz2szY9gSXRpIlQlFiYEMdlNdK4GXwpjBCJI+/oHHBkt2jFrCJl36PqqjQw6 BgQ1pyc+YYbZ9mnY6FqQphFPVZ3Dwe1IaCoAdI3d2sKS4WWiDjuS+fdjQiHj559y eYmMIIkfW2MGeAWfUbf+EhKk7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfi0/vC MrfyHqPvwK+nIJ5fTz7aMB8GA1UdIwQYMBaAFFjNgP//aEUdQPwCxw3bkfrY7DE9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDE3Qy8xODM5NzgwODQx QzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JSMUFfQUxIRGR1Ui10anNN VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dNMkFfXzlvUlIxQV9BTEhEZHVSLXRqc01UMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDE3Qy8xODM5NzgwODQxQzIxMUVDODVGNDI4NjhDNEY5QUUwMi9XTTJBX185b1JS MUFfQUxIRGR1Ui10anNNVDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzf2Nu0ZUH2D6k3ip5VE+Yuxl1Ub9WXihsgV+9unkI54dX3ejnnL0c 5mqwMqIzYJQQN5abprwceyRi295CTVwn7ERYh5kIjUGcBPNt7ddJlkywXk1qbvcw tD6o9kKOHFc9qglXkB2HQpTgV3Xk0v1nFpdn/6h8wYr2pquSzHroLxLvQ6Ry0u1D 6/7Ly+e/pOE/S/DW1MOACfAsoHZwg2wB5Ux/p+G+jdYOtF8isnVSK1S20A+gU/dB QgtnAhjOLip4mdKrmBLVRJeO4bwE/OnpqshKGbzGxbapRuykU6+pMA6KOPQxJRc8 w1DiuvE3xtE2VrWtLra2c9w36CYBXTtV -----END CERTIFICATE-----Generated at Wed Nov 5 20:58:21 2025 by rpki-client