$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: f+lD9sK/dd83p+K/dB1J2eu8FwZC2k4iYaQTypaNrYw= Subject key identifier: 03:86:40:49:21:50:6F:C7:63:4C:1F:B9:E3:19:64:1B:14:3A:62:4F Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 34F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34A1 Signing time: Mon 12 May 2025 14:26:07 +0000 Manifest this update: Mon 12 May 2025 14:26:06 +0000 Manifest next update: Mon 19 May 2025 14:26:06 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 7PSh4MEzxFRR9mZatpfdPpsvCz64MH8wWUnHse45PTE=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13558 (0x34f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: May 12 14:26:06 2025 GMT Not After : May 19 14:26:06 2025 GMT Subject: CN=682204ff-15cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:4b:71:87:04:3f:0c:5d:c4:9a:cc:ed:3d: f6:a5:66:e4:cb:51:dd:0c:37:d4:97:a0:8e:fa:46: 30:af:f5:6e:84:eb:49:24:1d:dc:e4:9f:a5:46:3a: 71:c3:3c:28:00:05:d8:1a:a7:df:73:76:96:14:01: 83:fa:b2:00:7e:d5:d7:f5:6b:f0:ed:8d:62:a2:72: 9e:9d:1b:f1:8c:1b:db:ef:e6:f5:38:25:1a:d3:e1: a2:b8:d2:47:10:dd:d8:ee:60:83:06:75:42:df:18: 08:d9:ae:ae:6e:31:fb:b7:dd:12:bf:1f:32:45:31: 8b:c5:b7:f3:df:27:a7:be:0d:e7:a9:bd:b9:1a:ab: 1f:fe:84:b2:b2:ed:f0:cf:72:0a:8c:20:53:13:3c: eb:a7:2c:17:28:86:3f:d0:d6:ed:2d:cf:b9:0f:c2: b0:0b:cd:f3:8d:58:59:77:b5:be:16:60:ed:71:c3: bd:dd:65:7d:4d:4b:13:ea:e5:1b:bd:12:8b:c6:c2: 53:e2:6d:f5:c5:14:8e:c5:3c:b1:58:a5:9c:83:c8: 90:bc:b9:c2:cd:95:41:d9:f0:15:50:f0:46:64:90: 0c:46:ed:99:8f:49:e5:8e:a2:73:70:0e:a5:49:e9: d3:f6:fd:29:2c:06:8a:e8:38:e7:d7:2c:8d:6d:d8: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:40:49:21:50:6F:C7:63:4C:1F:B9:E3:19:64:1B:14:3A:62:4F X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8d:e5:44:a2:79:5b:c9:82:2d:33:0b:f0:52:cb:a3:cc:45: 24:4d:1d:1b:ac:40:0a:e3:69:2d:ff:90:7d:89:24:bc:b5:64: e2:c9:83:17:85:0b:20:e0:30:f6:cf:2b:04:3b:59:05:57:50: 79:e7:c8:3f:95:2c:0f:a4:54:54:2c:fb:2c:c3:7a:0d:35:96: 38:60:3e:9f:43:bc:57:58:77:eb:f1:94:f1:b3:c9:fc:f3:db: 88:9a:fd:91:ea:20:dd:48:3f:4a:7c:59:ea:4a:a9:9d:cf:ae: 74:03:e1:be:1e:82:68:94:e4:71:3b:80:7b:86:fa:d4:dd:51: 89:78:cc:d8:6e:b9:ac:de:fd:65:c2:ff:ac:ff:ce:d9:36:30: 98:c4:99:66:7f:cf:6a:18:c9:b4:4b:fa:e6:73:3c:7e:e7:f3: dd:6a:25:95:da:0f:8f:07:cc:b4:e7:49:1e:c5:b5:01:b9:a5: d2:59:1e:23:61:ed:30:8c:56:11:44:cb:b7:f6:aa:61:4a:19: 04:53:4e:01:5f:8f:aa:38:07:bb:cc:46:95:28:1f:51:37:14: 01:74:e1:23:c9:72:39:f4:81:05:61:b3:11:95:4d:a2:15:27: 2d:a6:99:03:1b:77:02:af:2a:c7:54:72:b6:86:9f:11:ba:0c: 22:a9:19:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNTEyMTQyNjA2WhcNMjUwNTE5MTQyNjA2WjAYMRYwFAYD VQQDEw02ODIyMDRmZi0xNWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8YJLcYcEPwxdxJrM7T32pWbky1HdDDfUl6CO+kYwr/VuhOtJJB3c5J+lRjpx wzwoAAXYGqffc3aWFAGD+rIAftXX9Wvw7Y1ionKenRvxjBvb7+b1OCUa0+GiuNJH EN3Y7mCDBnVC3xgI2a6ubjH7t90Svx8yRTGLxbfz3yenvg3nqb25Gqsf/oSysu3w z3IKjCBTEzzrpywXKIY/0NbtLc+5D8KwC83zjVhZd7W+FmDtccO93WV9TUsT6uUb vRKLxsJT4m31xRSOxTyxWKWcg8iQvLnCzZVB2fAVUPBGZJAMRu2Zj0nljqJzcA6l SenT9v0pLAaK6Djn1yyNbdjJZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAOGQEkh UG/HY0wfueMZZBsUOmJPMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkjeVEonlbyYItMwvwUsujzEUkTR0brEAK42kt/5B9iSS8tWTiyYMX hQsg4DD2zysEO1kFV1B558g/lSwPpFRULPssw3oNNZY4YD6fQ7xXWHfr8ZTxs8n8 89uImv2R6iDdSD9KfFnqSqmdz650A+G+HoJolORxO4B7hvrU3VGJeMzYbrms3v1l wv+s/87ZNjCYxJlmf89qGMm0S/rmczx+5/PdaiWV2g+PB8y050kexbUBuaXSWR4j Ye0wjFYRRMu39qphShkEU04BX4+qOAe7zEaVKB9RNxQBdOEjyXI59IEFYbMRlU2i FSctppkDG3cCryrHVHK2hp8RugwiqRmN -----END CERTIFICATE-----Generated at Tue May 13 23:12:22 2025 by rpki-client