$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: kmgr/3xiwPRyBxZIiQCY6fWgSyKww8VkKOx6Uk0PJIE= Subject key identifier: A9:5E:A1:28:C3:C4:46:24:F4:65:88:86:2C:C0:A4:5C:C5:F1:78:5E Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34DC Signing time: Thu 04 Sep 2025 14:26:52 +0000 Manifest this update: Thu 04 Sep 2025 14:26:52 +0000 Manifest next update: Thu 11 Sep 2025 14:26:52 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: CvnMhR1e9G0I33nXb8UKLRh+ymIzVONOQ4ZISrBtAEs=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13617 (0x3531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Sep 4 14:26:52 2025 GMT Not After : Sep 11 14:26:52 2025 GMT Subject: CN=68b9a1ac-5b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5d:1d:d4:b7:37:50:15:62:c7:5c:38:a0:2c: 06:b7:e5:09:82:2b:cc:c2:dc:fb:6c:92:96:da:c6: 54:0a:69:4b:6b:39:e4:ba:0f:8e:52:de:bf:ad:1e: a5:32:ed:8c:58:79:b6:b8:b5:3b:25:6d:ec:d1:46: c0:18:9b:e1:95:d3:4b:40:3d:e5:28:44:ff:8a:ee: cc:f4:ba:66:8d:6c:a8:c7:6b:0c:85:ec:70:28:14: 48:74:9f:7b:eb:d0:25:98:6b:b0:fa:fb:e1:55:0a: 6c:35:73:67:42:fb:3a:d8:fd:0d:b7:52:29:87:0e: fa:6b:aa:39:a9:1a:7c:e2:f0:9e:3b:76:bd:e9:93: 85:8b:b5:55:12:6e:99:23:bb:39:83:ad:19:af:c7: 20:56:59:d7:b6:42:19:b3:c6:33:5b:17:65:f5:07: 1d:e6:cf:26:60:d1:bf:60:60:4e:fc:a5:22:05:23: 3f:1e:31:75:cc:cd:30:1b:d3:b4:3a:30:5c:69:8a: 69:6c:74:d6:82:b7:ca:78:e5:7e:4c:7e:7d:81:69: 08:b1:14:1b:27:19:41:e1:68:39:a4:46:c5:84:2b: ea:36:a5:16:53:69:82:ee:3c:52:1e:19:0b:9a:1b: 96:18:8d:5c:10:d3:30:be:bc:e0:d9:fc:f1:20:17: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5E:A1:28:C3:C4:46:24:F4:65:88:86:2C:C0:A4:5C:C5:F1:78:5E X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a4:b7:15:56:64:fd:74:24:e0:c6:79:95:7d:94:16:0e:83: 55:e2:37:6d:7c:c3:23:2b:f1:c7:da:ce:b3:68:dd:8e:6b:a0: 1e:7d:90:18:85:ab:c3:9c:c4:8f:0a:1b:c0:29:d9:e5:5e:ec: 0b:36:0e:95:3b:41:37:43:36:9f:71:b4:df:41:a8:ba:ab:32: a8:89:b9:8b:1d:73:a4:75:2a:16:25:53:d3:56:6e:d8:b1:43: b3:db:8d:a0:76:6b:2c:8e:dc:42:df:c3:29:ba:ac:4c:f8:92: 0c:b2:ad:0d:79:8a:82:bb:8d:9d:7f:33:e4:f5:64:65:8b:8d: d3:b4:af:13:68:4c:67:9c:b1:66:06:01:72:df:eb:bc:29:d0: 99:72:47:95:74:fb:0d:5b:66:bc:a4:6a:4d:44:f0:1a:7c:94: a6:89:c8:2d:26:f9:00:97:43:5a:3c:c1:8d:ac:32:06:51:fe: 16:85:db:dd:a2:0c:1e:ba:1f:dd:8e:0e:2d:2c:53:e3:fc:78: 6a:05:66:78:4d:74:99:e3:78:71:07:fd:e2:99:4a:10:81:19: 29:90:b2:d5:eb:25:30:bd:46:f1:0e:68:a3:26:88:c6:ba:2a: 28:56:d1:e0:b8:e7:ff:41:fc:0a:94:45:5e:12:08:19:de:2f: 83:77:d4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwOTA0MTQyNjUyWhcNMjUwOTExMTQyNjUyWjAYMRYwFAYD VQQDEw02OGI5YTFhYy01YjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA910d1Lc3UBVix1w4oCwGt+UJgivMwtz7bJKW2sZUCmlLaznkug+OUt6/rR6l Mu2MWHm2uLU7JW3s0UbAGJvhldNLQD3lKET/iu7M9LpmjWyox2sMhexwKBRIdJ97 69AlmGuw+vvhVQpsNXNnQvs62P0Nt1Iphw76a6o5qRp84vCeO3a96ZOFi7VVEm6Z I7s5g60Zr8cgVlnXtkIZs8YzWxdl9Qcd5s8mYNG/YGBO/KUiBSM/HjF1zM0wG9O0 OjBcaYppbHTWgrfKeOV+TH59gWkIsRQbJxlB4Wg5pEbFhCvqNqUWU2mC7jxSHhkL mhuWGI1cENMwvrzg2fzxIBf5jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKleoSjD xEYk9GWIhizApFzF8XheMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJpLcVVmT9dCTgxnmVfZQWDoNV4jdtfMMjK/HH2s6zaN2Oa6AefZAY havDnMSPChvAKdnlXuwLNg6VO0E3QzafcbTfQai6qzKoibmLHXOkdSoWJVPTVm7Y sUOz242gdmssjtxC38MpuqxM+JIMsq0NeYqCu42dfzPk9WRli43TtK8TaExnnLFm BgFy3+u8KdCZckeVdPsNW2a8pGpNRPAafJSmicgtJvkAl0NaPMGNrDIGUf4Whdvd ogweuh/djg4tLFPj/HhqBWZ4TXSZ43hxB/3imUoQgRkpkLLV6yUwvUbxDmijJojG uiooVtHguOf/QfwKlEVeEggZ3i+Dd9Qq -----END CERTIFICATE-----Generated at Sat Sep 6 07:04:36 2025 by rpki-client