$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: uIU+MF3zWMRl8DRjYITcS+asVkhqlhaFfMhrXOw7HHU= Subject key identifier: 68:1D:03:FF:30:47:7A:D7:6D:C3:76:5B:CD:B2:AB:05:D3:6F:05:5C Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3500 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34AB Signing time: Sat 31 May 2025 14:26:25 +0000 Manifest this update: Sat 31 May 2025 14:26:24 +0000 Manifest next update: Sat 07 Jun 2025 14:26:24 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: 4N7XIgyOSoPrjzrLWIM0F49oQBeUYTMdNfzFuydMY6U=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:26:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13568 (0x3500) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: May 31 14:26:24 2025 GMT Not After : Jun 7 14:26:24 2025 GMT Subject: CN=683b1190-cffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:d6:c3:3f:e5:1a:c9:db:6c:b3:7c:d6:86: 66:a8:e8:43:8d:05:66:17:ef:57:4a:71:1b:7a:a9: 87:9c:e7:bd:b8:f3:12:5a:d4:10:0c:89:c6:d0:20: 0e:c9:e2:32:b3:7a:a3:0f:ab:b7:01:9b:1f:51:d1: 55:3e:29:cc:7f:a2:db:76:9e:7a:13:c9:fa:d5:d5: d4:0c:70:15:90:c6:f4:4d:86:e4:ba:46:27:73:a6: 65:52:2e:c9:64:79:90:04:dc:d4:08:68:95:f7:cf: 24:ea:13:50:7c:28:03:ce:e8:2a:4a:b4:ed:70:9c: 9e:6e:35:b4:2e:8f:cf:6c:c8:e6:3d:3a:76:16:9d: 2b:40:25:a7:d8:ed:32:46:fa:9e:20:87:59:1d:68: a0:87:3c:6b:8c:4c:93:07:50:cb:4d:1f:49:ff:6c: f9:6b:47:71:a0:5d:9f:8a:5c:28:fa:e9:2d:61:03: 3b:f7:e2:58:61:db:ff:5e:27:f0:6d:c8:c4:0e:bd: b8:a4:04:1b:dd:7f:9c:42:0e:db:bb:54:0d:44:d0: b4:81:a6:bc:14:c4:53:cb:d8:e3:ef:83:b2:a5:2d: b8:e8:3b:da:d9:14:d6:1c:46:63:48:33:37:9c:7f: 60:f3:44:9c:8d:c0:42:7f:bf:ea:69:55:0d:ee:ae: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1D:03:FF:30:47:7A:D7:6D:C3:76:5B:CD:B2:AB:05:D3:6F:05:5C X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:95:93:d4:73:cb:bd:88:9e:9c:e1:be:85:fe:b8:49:df:e0: b1:b9:15:ae:d9:35:3c:af:ba:9d:eb:fa:67:8f:9b:89:ac:86: 5e:d6:55:29:bf:31:b6:a8:12:db:f2:15:8b:f3:6a:8d:3a:47: b4:b5:5d:2f:27:d5:84:ff:67:82:46:5f:38:de:97:ce:d5:32: 91:23:2c:85:5b:a1:6a:d1:1a:73:1c:cd:ae:30:3a:bb:20:97: 22:57:f9:12:fe:57:80:e9:0f:b8:45:62:34:e8:58:c6:83:a6: cc:c3:c1:5f:24:a6:0b:94:3e:6d:50:5f:bf:9e:5f:d7:25:35: a3:a7:7d:e5:97:51:b2:9d:f0:83:8c:c6:df:cf:2f:3c:d0:1d: 01:ac:c7:0d:c3:59:e4:e2:cd:7e:1f:14:15:98:cd:b6:aa:27: 4a:3e:85:58:8a:11:4f:49:85:ec:7c:77:1f:a9:e2:be:b3:b0: c0:87:71:46:01:00:6b:39:23:af:d5:8c:20:a3:33:ec:f7:ec: a8:af:6a:7f:24:a8:0f:49:8a:16:b6:99:72:04:6b:78:46:d8: eb:f0:43:bc:7e:4a:06:da:e1:78:68:a8:a8:16:62:58:fc:d7: cd:50:57:0e:07:af:63:a6:73:98:77:cb:cc:57:a2:01:c4:0e: d3:37:a1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNTMxMTQyNjI0WhcNMjUwNjA3MTQyNjI0WjAYMRYwFAYD VQQDEw02ODNiMTE5MC1jZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwIzWwz/lGsnbbLN81oZmqOhDjQVmF+9XSnEbeqmHnOe9uPMSWtQQDInG0CAO yeIys3qjD6u3AZsfUdFVPinMf6Lbdp56E8n61dXUDHAVkMb0TYbkukYnc6ZlUi7J ZHmQBNzUCGiV988k6hNQfCgDzugqSrTtcJyebjW0Lo/PbMjmPTp2Fp0rQCWn2O0y RvqeIIdZHWighzxrjEyTB1DLTR9J/2z5a0dxoF2filwo+uktYQM79+JYYdv/Xifw bcjEDr24pAQb3X+cQg7bu1QNRNC0gaa8FMRTy9jj74OypS246Dva2RTWHEZjSDM3 nH9g80ScjcBCf7/qaVUN7q7SNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgdA/8w R3rXbcN2W82yqwXTbwVcMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIlZPUc8u9iJ6c4b6F/rhJ3+CxuRWu2TU8r7qd6/pnj5uJrIZe1lUp vzG2qBLb8hWL82qNOke0tV0vJ9WE/2eCRl843pfO1TKRIyyFW6Fq0RpzHM2uMDq7 IJciV/kS/leA6Q+4RWI06FjGg6bMw8FfJKYLlD5tUF+/nl/XJTWjp33ll1GynfCD jMbfzy880B0BrMcNw1nk4s1+HxQVmM22qidKPoVYihFPSYXsfHcfqeK+s7DAh3FG AQBrOSOv1YwgozPs9+yor2p/JKgPSYoWtplyBGt4Rtjr8EO8fkoG2uF4aKioFmJY /NfNUFcOB69jpnOYd8vMV6IBxA7TN6F9 -----END CERTIFICATE-----Generated at Sat May 31 17:12:51 2025 by rpki-client