$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: KrnI58J14wDUyK3F5tgOH4ZHjtOuS+gw7ClLeecNRH0= Subject key identifier: C3:13:81:77:51:3F:8E:EF:B5:5C:09:45:E1:3B:55:04:C1:B2:59:2B Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34BB Signing time: Wed 02 Jul 2025 14:26:47 +0000 Manifest this update: Wed 02 Jul 2025 14:26:47 +0000 Manifest next update: Wed 09 Jul 2025 14:26:47 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 8B2il9qiXolGVxix0rPurFsT6yLyi3cNmkwfho0D5Jc=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jul 2 14:26:47 2025 GMT Not After : Jul 9 14:26:47 2025 GMT Subject: CN=686541a7-e00b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:b4:7b:9a:a0:38:09:8c:0d:c6:08:3e:2d: 9e:3b:6f:c7:31:00:43:b7:1b:51:31:ce:63:20:d8: f6:63:14:d6:7d:d1:0b:2b:c1:d6:a4:3a:73:13:ee: 88:99:29:f3:60:82:94:b1:3d:5f:3d:6a:54:68:bb: 7c:8b:79:0a:54:24:2a:11:7f:c0:1b:29:db:bf:e3: 33:75:28:c7:1d:80:4b:ad:03:c6:6f:fb:42:93:89: ad:58:62:f7:9c:a0:34:c0:e6:a1:74:9c:8d:85:4d: 7f:85:4b:e7:e6:2a:e9:89:74:6c:b2:52:04:51:ac: f4:b7:32:5b:59:83:94:a3:a3:74:23:e8:84:30:55: 24:d9:4a:bc:31:a0:61:50:cc:3c:90:ab:48:90:2c: 5b:00:9e:1f:0c:31:21:f7:e5:49:f3:5b:ff:b5:06: 79:a3:ba:99:80:3b:52:f4:86:0d:6e:a2:72:87:c9: a4:a6:b3:05:8a:4a:4d:0c:5f:93:f5:ad:ac:ba:4b: 94:0a:2b:60:3f:4f:1e:08:3a:87:51:94:72:6c:94: b4:99:f3:c6:24:59:b5:67:e8:be:4a:80:b6:51:d5: 8a:e3:be:4e:60:38:c1:0b:e6:8b:15:12:36:de:e8: de:37:69:62:7e:75:56:60:80:05:14:bd:83:01:de: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:13:81:77:51:3F:8E:EF:B5:5C:09:45:E1:3B:55:04:C1:B2:59:2B X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fd:1b:11:c5:43:6b:d3:e5:c1:16:22:f4:d9:b6:85:06:66: a4:0e:0c:2e:32:04:87:5d:81:0f:31:c1:da:1f:06:10:93:58: 3b:a9:a4:44:4f:aa:aa:8b:45:ef:c3:47:c8:35:8a:fc:55:5c: 70:74:8e:3b:dc:1c:9e:00:d5:40:51:5e:41:f0:cc:c1:5d:f3: 67:3c:7e:f9:77:97:2b:e1:ac:2a:d3:e9:bb:47:ef:d8:d0:bd: 8f:eb:c5:58:02:4a:e9:27:51:a8:13:f0:f5:12:8e:11:6c:d9: 86:3a:52:ec:3a:b6:25:41:48:95:29:c3:ae:ad:80:ad:ea:12: 3d:73:b9:47:2e:57:d7:ca:49:49:30:2c:8f:68:b5:99:4c:01: 68:24:3d:6f:42:43:8d:f5:ad:39:e4:84:4b:25:6f:fe:76:d5: 9c:64:04:ef:99:53:1e:9f:b0:3b:21:43:ea:ed:ca:32:88:6c: 8f:ae:c0:14:e5:e6:56:f5:0a:2f:6b:ef:7e:32:53:19:85:f9: 9c:e0:9a:7e:f1:20:64:ca:31:d6:48:0f:73:a3:e7:2a:79:3e: a4:9b:1b:f8:c1:d8:1a:cf:d8:9f:65:d9:5b:60:62:e2:6d:a2: 91:4b:08:46:b7:60:3e:6f:ba:4c:ce:d1:d0:83:45:d6:86:05: 77:52:71:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNzAyMTQyNjQ3WhcNMjUwNzA5MTQyNjQ3WjAYMRYwFAYD VQQDEw02ODY1NDFhNy1lMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqby0e5qgOAmMDcYIPi2eO2/HMQBDtxtRMc5jINj2YxTWfdELK8HWpDpzE+6I mSnzYIKUsT1fPWpUaLt8i3kKVCQqEX/AGynbv+MzdSjHHYBLrQPGb/tCk4mtWGL3 nKA0wOahdJyNhU1/hUvn5irpiXRsslIEUaz0tzJbWYOUo6N0I+iEMFUk2Uq8MaBh UMw8kKtIkCxbAJ4fDDEh9+VJ81v/tQZ5o7qZgDtS9IYNbqJyh8mkprMFikpNDF+T 9a2sukuUCitgP08eCDqHUZRybJS0mfPGJFm1Z+i+SoC2UdWK475OYDjBC+aLFRI2 3ujeN2lifnVWYIAFFL2DAd6fLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMTgXdR P47vtVwJReE7VQTBslkrMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/RsRxUNr0+XBFiL02baFBmakDgwuMgSHXYEPMcHaHwYQk1g7qaRE T6qqi0Xvw0fINYr8VVxwdI473ByeANVAUV5B8MzBXfNnPH75d5cr4awq0+m7R+/Y 0L2P68VYAkrpJ1GoE/D1Eo4RbNmGOlLsOrYlQUiVKcOurYCt6hI9c7lHLlfXyklJ MCyPaLWZTAFoJD1vQkON9a055IRLJW/+dtWcZATvmVMen7A7IUPq7coyiGyPrsAU 5eZW9Qova+9+MlMZhfmc4Jp+8SBkyjHWSA9zo+cqeT6kmxv4wdgaz9ifZdlbYGLi baKRSwhGt2A+b7pMztHQg0XWhgV3UnEg -----END CERTIFICATE-----Generated at Thu Jul 3 05:12:03 2025 by rpki-client