$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: Vd9aHP4X96Tve/yUHu2WNQOpseyojBDhlmcIRa7rTow= Subject key identifier: 54:66:4C:52:AE:97:B1:77:35:20:9A:5D:FC:B7:B5:7A:08:E2:BC:C4 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3519 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34C4 Signing time: Sun 20 Jul 2025 14:26:53 +0000 Manifest this update: Sun 20 Jul 2025 14:26:53 +0000 Manifest next update: Sun 27 Jul 2025 14:26:53 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: EruNrPhGKEjxbnUdOAgh14aWqHFU3ic3Umif7vwC0GU=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13593 (0x3519) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jul 20 14:26:53 2025 GMT Not After : Jul 27 14:26:53 2025 GMT Subject: CN=687cfcad-2722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:ec:37:2e:26:a3:3c:e6:65:0d:49:52:20: 53:d0:0f:86:d3:04:90:8f:0e:a5:75:50:0f:7d:98: 37:f0:84:a2:be:ff:86:68:73:e5:49:39:46:6b:2f: 31:35:35:55:58:e4:c9:eb:13:cf:e8:13:ad:25:d8: 40:c6:ff:ae:04:f2:37:91:b0:3b:66:85:72:e0:d3: 0a:e3:bc:de:b0:67:6f:25:a2:79:7f:e7:f4:0c:a1: 83:6e:7b:17:34:e1:ee:8d:95:c2:3d:74:10:c6:43: 71:d9:ac:9c:33:f4:a7:26:af:87:69:5e:0f:25:77: ca:e2:7e:dd:8a:a7:09:ae:bc:d9:f8:7d:64:c5:9f: 7c:bd:b9:48:3c:82:36:88:40:27:01:80:c7:3c:2a: e7:2f:d5:d1:e1:95:a9:91:89:f9:a6:1c:7c:1f:af: fa:52:80:00:ca:1e:23:a0:76:09:84:60:fe:2e:dc: 40:7c:c7:52:15:03:33:0a:4d:c8:51:88:65:69:a8: 2a:32:ff:6e:52:21:84:1c:8b:38:72:6b:ac:81:13: e0:17:cb:23:c0:b6:e8:01:1b:29:b5:3c:00:03:e3: a0:81:17:33:9c:db:f7:2b:ec:6a:ff:0a:7b:29:4d: ef:a7:29:1e:24:33:8c:f8:22:7f:71:ed:5a:df:27: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:66:4C:52:AE:97:B1:77:35:20:9A:5D:FC:B7:B5:7A:08:E2:BC:C4 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a3:7a:b6:1b:a5:e8:d3:f3:2e:e4:c7:da:7b:ef:31:cc:42: cf:56:c8:8d:54:c6:1d:d4:aa:26:05:e8:73:4b:9f:91:af:48: e8:70:33:bb:15:ef:65:20:a9:08:6f:2b:63:32:ca:e3:eb:ed: b8:d0:e2:3b:71:c5:e6:a9:b8:b6:24:34:bd:63:c6:e0:63:63: d1:92:ee:4f:07:96:b4:9a:b8:1a:9f:e7:f9:28:c6:1f:c8:03: 23:f9:6e:34:25:3f:74:87:2e:30:e7:a7:b3:6f:7d:35:ff:dc: 06:2c:5b:a1:6e:89:f0:dd:ad:dc:1f:8e:32:79:10:93:c3:fb: 23:f5:b7:1e:65:83:30:49:8e:ec:fe:5c:df:e0:3a:a5:d1:78: 4e:08:89:c8:cd:84:ed:aa:50:37:fa:bd:99:93:76:ac:8a:4f: 23:a1:d3:e8:f9:a0:ae:a0:b9:ad:d3:c3:ad:20:75:39:c9:45: bf:4d:d7:d8:66:b4:72:8b:70:0b:df:94:16:12:f9:4b:4a:1f: 4d:18:d0:c7:6d:62:40:1b:70:04:5b:a9:32:eb:b2:3e:1c:28: 28:32:f7:07:ea:02:d2:83:57:99:6a:65:b1:df:6e:f2:93:95: 86:99:f8:61:00:6a:8e:c3:75:cd:94:73:fa:28:05:74:ff:de: 9c:89:5e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNzIwMTQyNjUzWhcNMjUwNzI3MTQyNjUzWjAYMRYwFAYD VQQDEw02ODdjZmNhZC0yNzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHvsNy4mozzmZQ1JUiBT0A+G0wSQjw6ldVAPfZg38ISivv+GaHPlSTlGay8x NTVVWOTJ6xPP6BOtJdhAxv+uBPI3kbA7ZoVy4NMK47zesGdvJaJ5f+f0DKGDbnsX NOHujZXCPXQQxkNx2aycM/SnJq+HaV4PJXfK4n7diqcJrrzZ+H1kxZ98vblIPII2 iEAnAYDHPCrnL9XR4ZWpkYn5phx8H6/6UoAAyh4joHYJhGD+LtxAfMdSFQMzCk3I UYhlaagqMv9uUiGEHIs4cmusgRPgF8sjwLboARsptTwAA+OggRcznNv3K+xq/wp7 KU3vpykeJDOM+CJ/ce1a3ycBcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFRmTFKu l7F3NSCaXfy3tXoI4rzEMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuo3q2G6Xo0/Mu5Mfae+8xzELPVsiNVMYd1KomBehzS5+Rr0jocDO7 Fe9lIKkIbytjMsrj6+240OI7ccXmqbi2JDS9Y8bgY2PRku5PB5a0mrgan+f5KMYf yAMj+W40JT90hy4w56ezb301/9wGLFuhbonw3a3cH44yeRCTw/sj9bceZYMwSY7s /lzf4Dql0XhOCInIzYTtqlA3+r2Zk3asik8jodPo+aCuoLmt08OtIHU5yUW/TdfY ZrRyi3AL35QWEvlLSh9NGNDHbWJAG3AEW6ky67I+HCgoMvcH6gLSg1eZamWx327y k5WGmfhhAGqOw3XNlHP6KAV0/96ciV6r -----END CERTIFICATE-----Generated at Sun Jul 20 22:50:03 2025 by rpki-client