$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: LYETSXqTLThmKeboHeztlX+t+aubkSSjpGd5I1i4CHI= Subject key identifier: 88:91:63:D9:08:69:99:43:32:97:F1:55:D5:72:E3:3D:EE:7E:C3:FB Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34F2 Signing time: Sat 18 Oct 2025 14:28:43 +0000 Manifest this update: Sat 18 Oct 2025 14:28:42 +0000 Manifest next update: Sat 25 Oct 2025 14:28:42 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 67DgcX+YGMIflxsic0fForDNpE5gMmie4KKccQvdhF8=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13639 (0x3547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Oct 18 14:28:42 2025 GMT Not After : Oct 25 14:28:42 2025 GMT Subject: CN=68f3a41a-b8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:d8:5a:fb:22:fd:c7:a3:fb:51:95:3e:f2: 83:8b:42:f9:1b:cc:4f:10:cf:d3:22:7c:02:9e:6d: fc:da:c2:c1:09:5d:1a:df:d2:8f:63:5c:eb:7b:4c: b6:5f:8f:74:60:81:23:d9:f3:4c:3d:5c:b4:df:87: 16:ec:df:19:27:3c:8c:cb:c8:0b:74:d2:69:5c:cb: 59:27:94:a2:c5:ed:e2:1e:4c:3a:7b:4e:bf:0e:2e: f1:1f:8d:88:4b:d1:63:63:d6:f0:20:07:3e:0c:04: 64:41:f2:92:05:9c:c3:22:6f:25:a7:f2:94:e8:01: f9:a8:08:1b:62:8c:58:5c:fe:fb:8d:d6:23:6e:46: d5:e4:e9:69:30:d1:54:8b:a6:29:5c:e0:1a:4c:d8: f2:5e:4f:54:df:31:7c:0f:45:4a:d0:91:6d:6f:ef: fd:bf:6a:0a:c7:22:af:be:c0:dd:73:ea:2b:61:3a: 76:2c:a8:33:2e:21:97:6d:06:a6:99:b7:56:05:8f: 46:9e:6d:3c:c8:6a:d2:d5:fe:12:4e:2c:93:0f:31: e7:76:9b:bc:e7:b2:bc:8d:7b:bf:db:36:e9:19:50: 4f:ab:35:ca:ab:44:8c:84:d7:88:4a:6a:d3:87:4e: da:9d:0f:f6:cb:bf:95:00:51:9b:83:3d:70:2e:2e: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:91:63:D9:08:69:99:43:32:97:F1:55:D5:72:E3:3D:EE:7E:C3:FB X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e7:22:b1:4b:f6:8c:89:c4:36:e8:7a:da:2f:fb:79:37:c1: 07:6c:37:ff:3a:83:d4:74:4b:eb:cc:85:4a:40:2d:2d:52:94: 7d:be:6e:66:d6:74:52:c5:d4:1a:29:12:d6:32:e9:43:bf:bc: 7e:1c:f1:26:e9:a6:1a:1a:65:78:78:e6:10:7a:64:5c:8c:23: c7:a9:5d:04:0d:d0:57:91:33:db:ce:92:50:13:50:3f:f5:79: 55:05:5e:1f:3e:df:32:12:50:93:fb:5b:e0:1d:8d:72:a3:88: 1c:81:13:f8:99:fa:47:df:63:5e:74:c9:e7:29:9a:b7:5b:cb: 0b:92:7b:46:c6:bd:16:8a:d7:f2:58:fa:61:58:b2:e4:02:0a: 9c:7c:59:f5:9c:f8:f6:af:4e:87:68:ab:02:27:9c:50:85:c6: 28:08:e9:73:63:9d:a6:32:c5:18:92:ea:7f:34:8f:77:d2:d7: 07:4a:98:ae:6b:ef:92:24:f8:5e:2f:96:dc:ef:2c:4e:8e:0a: dc:3b:c9:9b:a6:94:84:3b:32:fd:42:f2:17:c6:16:b1:f0:1d: 9d:e3:e3:ee:19:a9:21:d4:94:20:e1:70:eb:ea:f3:41:c4:4e: f8:b0:c5:2f:ba:31:c9:52:be:43:08:5c:16:9d:36:6c:99:f0: 2d:19:ec:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUxMDE4MTQyODQyWhcNMjUxMDI1MTQyODQyWjAYMRYwFAYD VQQDEw02OGYzYTQxYS1iOGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7R7YWvsi/cej+1GVPvKDi0L5G8xPEM/TInwCnm382sLBCV0a39KPY1zre0y2 X490YIEj2fNMPVy034cW7N8ZJzyMy8gLdNJpXMtZJ5Sixe3iHkw6e06/Di7xH42I S9FjY9bwIAc+DARkQfKSBZzDIm8lp/KU6AH5qAgbYoxYXP77jdYjbkbV5OlpMNFU i6YpXOAaTNjyXk9U3zF8D0VK0JFtb+/9v2oKxyKvvsDdc+orYTp2LKgzLiGXbQam mbdWBY9Gnm08yGrS1f4STiyTDzHndpu857K8jXu/2zbpGVBPqzXKq0SMhNeISmrT h07anQ/2y7+VAFGbgz1wLi6XBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiRY9kI aZlDMpfxVdVy4z3ufsP7MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBt5yKxS/aMicQ26HraL/t5N8EHbDf/OoPUdEvrzIVKQC0tUpR9vm5m 1nRSxdQaKRLWMulDv7x+HPEm6aYaGmV4eOYQemRcjCPHqV0EDdBXkTPbzpJQE1A/ 9XlVBV4fPt8yElCT+1vgHY1yo4gcgRP4mfpH32NedMnnKZq3W8sLkntGxr0Witfy WPphWLLkAgqcfFn1nPj2r06HaKsCJ5xQhcYoCOlzY52mMsUYkup/NI930tcHSpiu a++SJPheL5bc7yxOjgrcO8mbppSEOzL9QvIXxhax8B2d4+PuGakh1JQg4XDr6vNB xE74sMUvujHJUr5DCFwWnTZsmfAtGeyP -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:57 2025 by rpki-client