$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: GAm6X5vm53wZtw9s5YgyJezpsFsAmSFOgXGeK+EP/p8= Subject key identifier: 44:05:58:4C:0D:F9:C1:09:A7:1F:CE:04:BB:87:D0:1B:F7:0F:8F:18 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3548 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34F3 Signing time: Mon 20 Oct 2025 14:28:09 +0000 Manifest this update: Mon 20 Oct 2025 14:28:08 +0000 Manifest next update: Mon 27 Oct 2025 14:28:08 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: NsThPYDYkcHDLeZEp7uDd2s0HoqvFP7vx8V2D9f1TRQ=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13640 (0x3548) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Oct 20 14:28:08 2025 GMT Not After : Oct 27 14:28:08 2025 GMT Subject: CN=68f646f9-721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c0:02:74:6e:b7:cf:99:90:6e:0a:a7:96:fb: 1a:fc:02:f2:09:58:7a:ff:4b:03:b9:63:5e:50:c7: 64:4c:e6:62:f6:36:e1:ad:73:66:bc:47:b4:e5:21: 21:72:11:eb:3c:63:a3:48:9a:80:8c:33:a0:e2:cb: 39:5a:e2:2b:dc:f1:60:a2:b3:e5:f9:ca:f9:60:96: e1:d6:e3:1c:40:80:eb:db:1d:46:22:7c:89:e3:57: 87:0d:b9:60:ff:c1:8b:da:bd:9e:3e:55:7b:9b:5c: c4:59:89:59:aa:fc:0c:de:48:20:6b:68:65:69:29: d3:d4:7b:da:ae:99:24:7f:a4:9a:c2:f8:94:ca:56: 62:82:78:6e:c7:09:da:2c:69:d3:42:49:a7:08:a1: 20:3c:92:bf:7a:f9:11:1a:c7:37:7e:88:ef:11:d0: 17:62:3e:05:48:4e:64:63:ec:a6:3e:cb:d7:4c:b6: b8:8c:a8:6f:66:76:0d:38:be:90:f3:c5:d7:bb:ac: b0:65:3d:1a:25:95:8d:64:7e:dc:27:77:19:9c:20: b6:33:22:02:6b:6a:33:9f:b3:8f:ed:4d:f2:2d:cb: 1e:90:2a:8c:8d:ef:c2:60:6f:c1:d9:85:82:90:86: 04:74:d0:8a:41:57:ba:ce:d0:6b:16:bb:08:ea:90: 74:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:05:58:4C:0D:F9:C1:09:A7:1F:CE:04:BB:87:D0:1B:F7:0F:8F:18 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2d:98:09:28:00:e5:57:85:98:e1:d9:a7:f6:a5:11:01:ab: 64:e6:40:f4:05:05:f7:b3:15:0e:4e:f6:09:67:41:4d:87:47: 17:96:f7:6e:ad:22:4d:d6:97:1a:d9:bd:e6:14:a2:10:97:d0: 3b:14:d5:48:db:5e:1f:1d:c0:81:17:7f:65:bf:41:80:57:79: 9f:81:43:3e:2c:c7:01:2b:b8:ef:09:d0:d8:56:51:09:ad:fb: 18:0c:37:4f:ee:41:9c:70:f5:a0:ad:ad:cd:02:d2:56:9b:79: c4:9c:30:70:77:7c:c5:3b:51:aa:c7:60:56:37:3f:83:b7:5d: 7a:ba:b6:13:c5:02:22:1e:ef:d7:5a:c7:5f:f5:b7:84:ff:bb: 27:77:4c:81:5f:83:3a:05:bd:20:49:0c:13:7e:7a:09:69:79: 47:20:87:f7:0c:6f:af:c1:40:35:cd:f7:7b:d2:35:b1:36:3d: 9a:89:2f:4a:03:87:62:62:fb:cb:e8:4b:9d:94:4c:16:78:34: e6:ff:7e:39:f0:e3:7b:0a:66:29:af:43:e9:f9:52:50:bd:07: 9d:24:4b:da:11:2e:23:a9:39:69:f1:36:61:58:4c:12:35:0c: 42:47:a5:e5:b2:68:ab:ca:76:52:71:bc:43:41:4d:12:97:20: b1:f9:5e:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUxMDIwMTQyODA4WhcNMjUxMDI3MTQyODA4WjAYMRYwFAYD VQQDEw02OGY2NDZmOS03MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMACdG63z5mQbgqnlvsa/ALyCVh6/0sDuWNeUMdkTOZi9jbhrXNmvEe05SEh chHrPGOjSJqAjDOg4ss5WuIr3PFgorPl+cr5YJbh1uMcQIDr2x1GInyJ41eHDblg /8GL2r2ePlV7m1zEWYlZqvwM3kgga2hlaSnT1Hvarpkkf6SawviUylZignhuxwna LGnTQkmnCKEgPJK/evkRGsc3fojvEdAXYj4FSE5kY+ymPsvXTLa4jKhvZnYNOL6Q 88XXu6ywZT0aJZWNZH7cJ3cZnCC2MyICa2ozn7OP7U3yLcsekCqMje/CYG/B2YWC kIYEdNCKQVe6ztBrFrsI6pB03QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQFWEwN +cEJpx/OBLuH0Bv3D48YMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeLZgJKADlV4WY4dmn9qURAatk5kD0BQX3sxUOTvYJZ0FNh0cXlvdu rSJN1pca2b3mFKIQl9A7FNVI214fHcCBF39lv0GAV3mfgUM+LMcBK7jvCdDYVlEJ rfsYDDdP7kGccPWgra3NAtJWm3nEnDBwd3zFO1Gqx2BWNz+Dt116urYTxQIiHu/X Wsdf9beE/7snd0yBX4M6Bb0gSQwTfnoJaXlHIIf3DG+vwUA1zfd70jWxNj2aiS9K A4diYvvL6EudlEwWeDTm/3458ON7CmYpr0Pp+VJQvQedJEvaES4jqTlp8TZhWEwS NQxCR6XlsmirynZScbxDQU0SlyCx+V6m -----END CERTIFICATE-----Generated at Wed Oct 22 03:10:04 2025 by rpki-client