$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: +whH4Eb5BoTQP3H0FnjzQukZGFo7zPG3NsMTlWohp7k= Subject key identifier: A8:85:75:76:14:EE:C0:C2:C3:28:01:17:A3:56:B6:FD:0B:97:A3:0C Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 352A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34D5 Signing time: Fri 22 Aug 2025 14:26:45 +0000 Manifest this update: Fri 22 Aug 2025 14:26:44 +0000 Manifest next update: Fri 29 Aug 2025 14:26:44 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: uI1SoHOYsNsb3XEM0cKun1k8aio4WxtPi4jjE6TN+50=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Aug 22 14:26:44 2025 GMT Not After : Aug 29 14:26:44 2025 GMT Subject: CN=68a87e24-98a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:54:2e:f9:04:0e:fd:6b:bd:ee:74:e0:6d:dc: 2f:36:f6:4a:6b:11:82:c2:07:6a:3f:d6:0e:be:17: 4c:c4:35:03:f5:74:cf:f2:32:2d:5b:9d:45:cf:ac: 79:06:8b:f6:7f:c7:99:14:ad:3d:95:6e:09:9e:fe: c8:84:bf:c6:b1:02:02:26:fa:c4:8e:12:12:0c:c7: 48:3e:94:e1:24:f7:79:93:16:7d:09:50:05:7c:ea: ee:45:4e:6a:42:69:55:02:a8:08:12:f8:0e:c5:ed: a2:30:66:f3:bd:49:9c:36:89:ed:aa:3e:bf:f5:c6: e3:c4:15:0d:b0:78:60:a7:47:2a:14:4f:9a:d5:d0: bf:0a:fc:a2:f9:97:c6:10:e6:3d:28:24:8b:c8:f3: c0:6d:28:39:c2:fd:ab:12:57:dc:eb:61:ac:53:ad: 9b:ad:1f:22:e9:d7:66:0d:13:cc:8e:88:67:42:5d: a0:fe:37:2c:62:3b:a2:d5:a4:4b:54:e6:1d:30:a5: a0:b9:18:50:26:3c:2b:06:bc:d3:f7:b0:8f:06:be: 09:78:12:8d:a2:40:f1:02:6d:59:83:bc:d3:20:90: eb:7f:e8:75:e9:e7:c6:ec:91:86:56:25:37:99:0e: 5c:6c:b1:17:6c:52:bd:d2:66:a1:65:19:a7:61:7d: c1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:85:75:76:14:EE:C0:C2:C3:28:01:17:A3:56:B6:FD:0B:97:A3:0C X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:49:0e:ba:3a:4d:6c:9a:71:be:af:23:5b:c1:40:92:9a:56: 5c:e8:5a:e4:7f:61:11:7f:80:f8:bc:f2:e1:5d:3c:04:97:ff: 17:8c:f5:13:12:b6:5b:34:f0:b1:87:02:be:e1:ac:9c:d4:b7: 64:64:76:8b:8a:e9:b2:c3:10:54:cd:22:87:0e:88:73:59:4d: 14:f2:a3:e0:80:33:c1:3f:6b:a4:1c:83:5e:fa:5f:ad:5e:0c: a1:2e:a6:41:08:9a:21:76:61:44:6a:e4:98:31:a8:24:93:95: 51:64:39:d1:92:30:2a:72:0b:df:6d:93:ac:22:89:b1:3b:09: 42:5a:65:cf:dd:bb:ee:f5:c0:e8:87:22:0b:c1:70:d4:88:c4: a5:eb:69:f5:03:53:35:2d:01:e4:e0:47:e6:e1:5e:82:44:c8: 1c:da:05:92:bb:10:8e:6a:8a:34:91:65:28:ab:af:7f:56:fc: b5:22:97:10:6a:ac:81:6e:e4:d1:41:53:0e:aa:8b:87:d5:b8: 96:42:89:30:60:c2:1b:02:b9:3c:2c:05:d8:2d:a1:91:b4:d5: f1:a9:5a:e2:4d:67:de:83:49:3b:e1:ce:1f:b9:1f:33:ff:19: c4:6b:11:09:db:37:54:ee:bd:48:36:6c:52:1c:46:6e:18:a4: 13:e5:86:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwODIyMTQyNjQ0WhcNMjUwODI5MTQyNjQ0WjAYMRYwFAYD VQQDEw02OGE4N2UyNC05OGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7FQu+QQO/Wu97nTgbdwvNvZKaxGCwgdqP9YOvhdMxDUD9XTP8jItW51Fz6x5 Bov2f8eZFK09lW4Jnv7IhL/GsQICJvrEjhISDMdIPpThJPd5kxZ9CVAFfOruRU5q QmlVAqgIEvgOxe2iMGbzvUmcNontqj6/9cbjxBUNsHhgp0cqFE+a1dC/Cvyi+ZfG EOY9KCSLyPPAbSg5wv2rElfc62GsU62brR8i6ddmDRPMjohnQl2g/jcsYjui1aRL VOYdMKWguRhQJjwrBrzT97CPBr4JeBKNokDxAm1Zg7zTIJDrf+h16efG7JGGViU3 mQ5cbLEXbFK90mahZRmnYX3BuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKiFdXYU 7sDCwygBF6NWtv0Ll6MMMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBSQ66Ok1smnG+ryNbwUCSmlZc6Frkf2ERf4D4vPLhXTwEl/8XjPUT ErZbNPCxhwK+4ayc1LdkZHaLiumywxBUzSKHDohzWU0U8qPggDPBP2ukHINe+l+t XgyhLqZBCJohdmFEauSYMagkk5VRZDnRkjAqcgvfbZOsIomxOwlCWmXP3bvu9cDo hyILwXDUiMSl62n1A1M1LQHk4Efm4V6CRMgc2gWSuxCOaoo0kWUoq69/Vvy1IpcQ aqyBbuTRQVMOqouH1biWQokwYMIbArk8LAXYLaGRtNXxqVriTWfeg0k74c4fuR8z /xnEaxEJ2zdU7r1INmxSHEZuGKQT5Ya8 -----END CERTIFICATE-----Generated at Sat Aug 23 21:31:03 2025 by rpki-client