$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: oJsV8zhUjUj7OCdwHVcePeTS0hNG1SjAWpO9UvQ1OGA= Subject key identifier: AC:5C:CC:A2:33:04:03:C5:41:EC:F4:8B:D9:0D:54:A9:CD:94:B0:AD Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 3507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 34B2 Signing time: Sat 14 Jun 2025 14:26:14 +0000 Manifest this update: Sat 14 Jun 2025 14:26:14 +0000 Manifest next update: Sat 21 Jun 2025 14:26:14 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: NWeTzAHD1wCxfZeL73kuL4ibg7hZZrQcQ52n1KqaC2k=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13575 (0x3507) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Jun 14 14:26:14 2025 GMT Not After : Jun 21 14:26:14 2025 GMT Subject: CN=684d8686-43b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:c9:f6:b1:cc:8c:d3:6c:6d:97:2a:d3:68: 7b:e5:ba:06:38:fe:c0:bd:41:b8:7d:12:dd:90:13: 30:31:e1:bb:9c:24:09:85:52:15:98:8c:f6:4e:4e: cb:46:3e:4d:e6:ba:b7:44:64:dc:49:0e:a0:2e:43: a7:cf:5e:4e:92:5c:f7:98:ff:9c:8d:ec:2f:4a:24: d9:59:5c:ca:88:9e:70:3d:15:8f:87:62:84:2b:e9: 0f:07:0f:e0:3c:4a:b8:c3:67:cf:de:c5:43:03:af: 9e:41:fe:7e:57:e2:7f:5e:2a:45:bc:a0:f0:e7:6a: 23:a2:00:ea:b2:9b:7f:8f:aa:5b:9f:fd:72:ff:4b: dd:f4:bb:00:2b:ba:d7:35:08:c2:3d:66:fc:07:c3: 19:e9:11:b0:d7:79:c0:c9:b9:27:4d:28:6c:2f:8b: 39:8d:20:ff:f7:ea:dc:54:b3:1b:2b:0c:f2:e4:ca: 68:6c:53:5a:19:c7:b0:e8:e1:09:50:53:a1:01:40: 15:1e:07:1f:27:c9:95:53:dc:95:dc:02:0b:46:77: 74:0f:4c:fc:5c:2a:96:ab:9f:81:70:a0:17:23:f6: a6:82:87:64:1c:42:96:f8:5b:dc:2f:e9:28:7f:6b: 43:b0:ac:28:85:43:c6:a6:16:a5:b4:8e:64:69:f0: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:CC:A2:33:04:03:C5:41:EC:F4:8B:D9:0D:54:A9:CD:94:B0:AD X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:78:8f:19:23:48:be:4d:d9:4e:72:0d:df:fa:bc:ae:5c:30: cc:ff:a8:d2:e5:f1:11:db:9a:82:aa:60:59:e4:60:0d:df:ee: d5:d8:bb:79:b5:f8:a1:78:01:cb:7e:28:57:2d:a0:c8:a6:3d: fa:f3:18:3f:c8:75:4b:64:92:70:9a:d2:b3:b3:a8:31:61:4d: 66:31:47:12:57:23:d1:52:16:25:11:e5:d6:d8:4b:fc:df:47: 9e:7a:ef:32:bf:b8:6d:04:c5:c0:20:0e:a5:b6:9a:87:85:c8: 21:06:ff:53:77:4d:ed:d9:be:ad:23:bc:b1:63:b2:b5:a1:ba: 39:6e:ca:50:31:96:71:67:42:08:0a:1a:95:b8:64:b8:98:7c: 9a:ae:e8:b8:6b:5f:46:0d:5e:9a:be:83:d7:98:0a:a4:45:68: d6:33:3d:1b:4c:f4:19:4b:01:da:37:54:94:e7:ef:6d:9c:de: ea:80:66:0f:aa:93:f7:6c:c8:41:b4:5a:6e:9f:37:cf:5f:4d: b7:db:e6:87:35:09:dd:9b:c9:27:cb:e8:c9:c2:b2:e4:79:d3: f5:cd:ec:cf:28:f9:81:59:d5:31:3f:9e:49:03:63:e6:da:fa: 54:4a:0e:40:b9:3b:65:d2:64:ef:af:e3:80:f7:0c:af:73:88: a0:70:2b:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNjE0MTQyNjE0WhcNMjUwNjIxMTQyNjE0WjAYMRYwFAYD VQQDEw02ODRkODY4Ni00M2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq3J9rHMjNNsbZcq02h75boGOP7AvUG4fRLdkBMwMeG7nCQJhVIVmIz2Tk7L Rj5N5rq3RGTcSQ6gLkOnz15Oklz3mP+cjewvSiTZWVzKiJ5wPRWPh2KEK+kPBw/g PEq4w2fP3sVDA6+eQf5+V+J/XipFvKDw52ojogDqspt/j6pbn/1y/0vd9LsAK7rX NQjCPWb8B8MZ6RGw13nAybknTShsL4s5jSD/9+rcVLMbKwzy5MpobFNaGcew6OEJ UFOhAUAVHgcfJ8mVU9yV3AILRnd0D0z8XCqWq5+BcKAXI/amgodkHEKW+FvcL+ko f2tDsKwohUPGphaltI5kafBg+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxczKIz BAPFQez0i9kNVKnNlLCtMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9eI8ZI0i+TdlOcg3f+ryuXDDM/6jS5fER25qCqmBZ5GAN3+7V2Lt5 tfiheAHLfihXLaDIpj368xg/yHVLZJJwmtKzs6gxYU1mMUcSVyPRUhYlEeXW2Ev8 30eeeu8yv7htBMXAIA6ltpqHhcghBv9Td03t2b6tI7yxY7K1obo5bspQMZZxZ0II ChqVuGS4mHyarui4a19GDV6avoPXmAqkRWjWMz0bTPQZSwHaN1SU5+9tnN7qgGYP qpP3bMhBtFpunzfPX0232+aHNQndm8kny+jJwrLkedP1zezPKPmBWdUxP55JA2Pm 2vpUSg5AuTtl0mTvr+OA9wyvc4igcCtU -----END CERTIFICATE-----Generated at Sun Jun 15 09:29:22 2025 by rpki-client