$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: /lT0cxET/B5GMxtKVPOGzcAuQBRby4/klb34EOHCcYc= Subject key identifier: 9A:F7:0D:A1:45:5C:42:99:E8:F4:9C:A4:9F:00:6A:20:30:F0:4B:FD Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34FB Signing time: Tue 04 Nov 2025 14:28:01 +0000 Manifest this update: Tue 04 Nov 2025 14:28:01 +0000 Manifest next update: Tue 11 Nov 2025 14:28:01 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: PCn/fCQSHBU+IGytd2IFkmkGOH5lMd+9y4v+by5j34w=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Nov 4 14:28:01 2025 GMT Not After : Nov 11 14:28:01 2025 GMT Subject: CN=690a0d71-b7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:fc:23:42:78:51:d2:17:f4:19:bb:d8:52: 43:62:fb:95:44:81:cc:6d:ed:67:64:21:cc:4b:bf: 6d:fe:1d:91:55:8e:48:83:f0:7d:ee:f3:86:33:c7: 3b:f8:4e:a0:67:f8:e5:a1:e0:6d:84:3b:63:17:df: 91:a2:69:08:52:5b:b6:67:ab:e4:d9:34:b6:ce:53: 80:e6:49:22:be:54:0e:e8:e2:21:87:bc:3e:a8:bd: b5:ff:9b:2f:fe:9e:74:67:7e:42:79:c7:af:8f:7f: 0d:c5:ab:6d:27:ad:ff:d2:88:f7:3b:31:4e:4a:bf: d1:d5:f2:6c:74:07:a1:7f:07:05:34:ef:3f:32:d1: f9:71:0e:d7:12:37:e8:ca:20:db:a0:18:85:31:81: 71:b3:d2:51:50:39:25:d0:fa:58:9b:31:39:37:4a: f6:cf:e4:cc:53:90:9a:c5:26:bf:ea:48:ef:5c:62: b7:bc:ad:d6:6d:4c:38:42:7c:9b:c8:62:83:3e:e4: fb:e7:19:8c:0f:5e:87:7b:f1:4b:dd:57:fb:f5:83: c8:7f:3a:eb:8e:a7:95:08:cc:17:a7:d4:97:77:d2: 76:25:4b:60:92:80:f5:b8:59:fc:4f:02:4b:9d:90: 1b:d2:46:52:f0:ac:ba:ad:9e:49:d8:96:a8:22:8f: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:0D:A1:45:5C:42:99:E8:F4:9C:A4:9F:00:6A:20:30:F0:4B:FD X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:8b:e2:52:49:b7:64:3c:4a:fe:c6:ba:02:24:f6:1d:d3:08: e9:3a:2e:cf:a3:6e:7c:37:34:6e:35:b1:05:c2:e0:0a:c3:4c: 20:9b:fb:9f:ae:ed:c0:7f:0c:d8:dc:f8:04:67:e5:29:e2:93: 17:66:88:41:38:9f:41:68:23:40:cf:d6:bb:b3:99:bb:7f:3b: db:82:53:c0:7d:3c:37:6a:03:4c:ca:e7:b7:0f:f0:52:39:0a: f3:ef:d3:e5:96:09:28:cd:f4:af:ed:85:f0:a3:c9:d3:5b:fd: 99:49:fa:68:88:e3:16:e8:17:d9:0c:13:f1:a5:41:2b:30:ee: 5c:a5:d1:f1:fc:07:4c:f2:31:d4:81:1b:28:3f:01:8b:92:01: c2:b0:3f:c3:4a:fe:33:69:2e:51:35:79:0c:5f:4c:0d:b4:80: 32:37:b0:66:0b:09:c1:15:16:c6:88:15:96:ff:c8:2a:4d:09: 0e:58:c4:d7:d1:06:0f:ba:ce:d7:77:41:e4:cc:b9:79:3f:52: 90:0d:ce:81:20:9d:eb:9c:fb:c8:77:7a:26:a1:a0:6f:d2:17: 01:6c:a1:14:c2:d8:ff:32:a8:26:5b:64:b8:a8:06:43:d4:07: 0a:d0:38:f9:f4:9d:5d:cf:2b:11:1e:1c:bc:c5:2a:e3:af:f1: 85:dd:11:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUxMTA0MTQyODAxWhcNMjUxMTExMTQyODAxWjAYMRYwFAYD VQQDEw02OTBhMGQ3MS1iN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbT8I0J4UdIX9Bm72FJDYvuVRIHMbe1nZCHMS79t/h2RVY5Ig/B97vOGM8c7 +E6gZ/jloeBthDtjF9+RomkIUlu2Z6vk2TS2zlOA5kkivlQO6OIhh7w+qL21/5sv /p50Z35Cecevj38NxattJ63/0oj3OzFOSr/R1fJsdAehfwcFNO8/MtH5cQ7XEjfo yiDboBiFMYFxs9JRUDkl0PpYmzE5N0r2z+TMU5CaxSa/6kjvXGK3vK3WbUw4Qnyb yGKDPuT75xmMD16He/FL3Vf79YPIfzrrjqeVCMwXp9SXd9J2JUtgkoD1uFn8TwJL nZAb0kZS8Ky6rZ5J2JaoIo+nSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr3DaFF XEKZ6PScpJ8AaiAw8Ev9MB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCi+JSSbdkPEr+xroCJPYd0wjpOi7Po258NzRuNbEFwuAKw0wgm/uf ru3AfwzY3PgEZ+Up4pMXZohBOJ9BaCNAz9a7s5m7fzvbglPAfTw3agNMyue3D/BS OQrz79PllgkozfSv7YXwo8nTW/2ZSfpoiOMW6BfZDBPxpUErMO5cpdHx/AdM8jHU gRsoPwGLkgHCsD/DSv4zaS5RNXkMX0wNtIAyN7BmCwnBFRbGiBWW/8gqTQkOWMTX 0QYPus7Xd0HkzLl5P1KQDc6BIJ3rnPvId3omoaBv0hcBbKEUwtj/MqgmW2S4qAZD 1AcK0Dj59J1dzysRHhy8xSrjr/GF3RHf -----END CERTIFICATE-----Generated at Wed Nov 5 13:32:32 2025 by rpki-client