$ rpki-client -vvf rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft File: WpbU7D01JJTZI51SrzWsEE2hL50.mft (raw, json) Hash identifier: OFmjxYOFMELPEVP8Hf3jM+z/B02Uj4lxPaJeZ5aoxFI= Subject key identifier: 3F:66:E7:54:30:6A:58:16:B2:5A:AE:11:CF:29:4E:80:E5:25:0B:16 Authority key identifier: 5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D Certificate issuer: /CN=A9129E3A/serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Certificate serial: 34ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft Manifest number: 3498 Signing time: Thu 24 Apr 2025 14:26:14 +0000 Manifest this update: Thu 24 Apr 2025 14:26:14 +0000 Manifest next update: Thu 01 May 2025 14:26:14 +0000 Files and hashes: 1: WpbU7D01JJTZI51SrzWsEE2hL50.crl (hash: HHZuVgTEtfj47+pPLZ8P/hoMUgmUZJdlAXFSoLYXIoU=) 2: 5E2DEF009C5C11E99CCA9656C4F9AE02.roa (hash: 6Ne7hQRkoimBuuEaTeZdl5fhQ7yZ46EDX0Sh7Chvt50=) 3: 8C333A4E6B9E11EDB0DCC676C4F9AE02.roa (hash: yA6Epbo7Tb7g6a4bRXGgsFN40BNWR1FgOiUmsWkDrGY=) 4: 57BD12E2CA1411ED9F6F423BC4F9AE02.roa (hash: /pyPonPmEFKa1hXT9c5EeNmCysabzskN0N3q8itE/yQ=) 5: 3E9F53C0A57711EAB2F52B2CC4F9AE02.roa (hash: e7zDDov11JCBn6iOfgz7E7SYErzUY0Kc8T1oGkGpfCQ=) 6: BBF1AAB475DE11E8B55A1C47C4F9AE02.roa (hash: Hw/97Nckkj5k8EOTbZ1dABRBDvHmajYpZ+iqkTDOE9U=) 7: B9AB0CB475DE11E8B55A1C47C4F9AE02.roa (hash: S1GxLRyW9jbWfhzDlGsZRExghMXH5ph382L3rO+OSJc=) 8: C6A9394ADEA211ED88586378C4F9AE02.roa (hash: XeOwCDJC/7tDXVlR92gvvBxO2ZkUMPl9GnCUEv+guSA=) 9: ED54502AAFCF11EA926A5C48C4F9AE02.roa (hash: ntvcTrpEA6rCyuNYSDHVsCeHSVzEDugmmxfTLFHpT0E=) 10: C8E115CEA6A711EA8A48CD2BC4F9AE02.roa (hash: y6Utban/MDhZmVm58zbd+GMT3Mgg7LB6jXrEukFmHX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13549 (0x34ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129E3A, serialNumber=5A96D4EC3D352494D9239D52AF35AC104DA12F9D Validity Not Before: Apr 24 14:26:14 2025 GMT Not After : May 1 14:26:14 2025 GMT Subject: CN=680a4a06-c25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c5:3c:34:d1:78:a1:82:3e:b1:bd:fb:9e:69: cf:cb:c4:f8:bb:fd:79:bd:1c:7b:13:8c:ab:c5:87: 24:b6:3c:bb:44:8f:a0:97:02:88:86:65:54:5c:f5: 76:d3:8b:5e:ff:b2:fd:e9:1c:f3:75:88:72:2f:40: 6c:4f:93:8e:35:82:79:3b:72:78:ed:d1:c6:b8:12: af:60:6f:52:da:bb:b5:a1:78:ab:16:3b:c6:df:4d: a6:d4:7a:47:65:cb:d9:fe:ed:22:88:6e:e5:d6:05: 1a:91:f2:bd:e8:0f:ad:28:04:13:6f:c0:44:40:83: eb:4e:01:e2:c0:fd:b8:20:8a:be:f8:04:bf:be:1a: 15:75:3f:64:1f:fb:b6:21:ff:cf:f7:7f:d3:a0:b0: 7a:9d:2b:9b:71:f0:33:b8:70:68:36:dc:3f:a2:aa: 73:24:41:23:d8:4d:f5:c8:8d:eb:7f:e2:9b:1e:c3: 6a:de:bf:15:18:5b:f3:fc:32:f8:93:d5:19:64:7d: 39:27:6d:85:0a:61:0e:96:e5:e4:91:9a:79:0f:46: 2c:1b:87:f0:35:7b:48:cc:4d:02:ed:4e:d0:40:f9: 65:70:3b:c6:6c:19:2c:8b:a0:e4:34:b4:f3:4f:f6: cf:af:ce:98:d1:a5:a1:fa:eb:e6:be:a7:17:37:45: b4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:E7:54:30:6A:58:16:B2:5A:AE:11:CF:29:4E:80:E5:25:0B:16 X509v3 Authority Key Identifier: keyid:5A:96:D4:EC:3D:35:24:94:D9:23:9D:52:AF:35:AC:10:4D:A1:2F:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WpbU7D01JJTZI51SrzWsEE2hL50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129E3A/197EC0B61D8611E2ABEF22DD08B02CD2/WpbU7D01JJTZI51SrzWsEE2hL50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:3b:89:2e:0c:5a:ea:45:a5:0f:18:c4:0e:cb:b5:0d:5d:54: 67:cd:c7:8e:f7:5d:ee:f1:84:22:24:4f:b4:96:ce:05:e2:3f: d2:46:e5:17:2b:ff:5a:4a:e3:78:6d:ac:42:b8:29:8f:9e:17: f4:58:db:46:30:5d:af:43:01:58:64:de:35:ff:3a:56:4b:80: 60:94:fd:87:c9:db:7c:d0:de:25:d7:ce:94:78:13:e1:7e:a2: 15:f8:71:86:78:70:6a:54:0d:e9:70:ee:22:21:a2:1b:dd:bb: a1:90:b1:42:29:3d:1c:b9:52:10:20:46:96:4e:f9:a7:4d:b8: b8:90:74:0b:c9:4e:d1:96:f3:0c:60:78:34:f3:78:98:28:ef: 96:69:64:f1:29:96:2b:84:cb:99:27:f1:a5:dd:71:70:13:ad: 68:fe:32:96:d9:17:07:bf:48:75:84:75:4b:1b:a5:2f:d9:a9: 8d:ab:62:dd:9b:2f:9a:e8:ac:f9:f3:6a:19:2a:36:4c:d2:7a: e5:bb:43:2e:4b:2a:f8:ec:d2:9e:94:75:9f:b5:a7:ab:eb:50: d4:f6:2e:0b:34:a5:92:63:a8:c1:64:5b:11:2f:56:61:da:ab: 2a:0a:ea:f7:0a:55:0f:dc:3e:62:4a:99:f4:7d:ea:85:92:39: 84:90:eb:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlFM0ExMTAvBgNVBAUTKDVBOTZENEVDM0QzNTI0OTREOTIzOUQ1MkFGMzVBQzEw NERBMTJGOUQwHhcNMjUwNDI0MTQyNjE0WhcNMjUwNTAxMTQyNjE0WjAYMRYwFAYD VQQDEw02ODBhNGEwNi1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMU8NNF4oYI+sb37nmnPy8T4u/15vRx7E4yrxYcktjy7RI+glwKIhmVUXPV2 04te/7L96RzzdYhyL0BsT5OONYJ5O3J47dHGuBKvYG9S2ru1oXirFjvG302m1HpH ZcvZ/u0iiG7l1gUakfK96A+tKAQTb8BEQIPrTgHiwP24IIq++AS/vhoVdT9kH/u2 If/P93/ToLB6nSubcfAzuHBoNtw/oqpzJEEj2E31yI3rf+KbHsNq3r8VGFvz/DL4 k9UZZH05J22FCmEOluXkkZp5D0YsG4fwNXtIzE0C7U7QQPllcDvGbBksi6DkNLTz T/bPr86Y0aWh+uvmvqcXN0W0jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9m51Qw algWslquEc8pToDlJQsWMB8GA1UdIwQYMBaAFFqW1Ow9NSSU2SOdUq81rBBNoS+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUUzQS8xOTdFQzBCNjFE ODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpKVFpJNTFTcnpXc0VFMmhM NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dwYlU3RDAxSkpUWkk1MVNyeldzRUUyaEw1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUUzQS8xOTdFQzBCNjFEODYxMUUyQUJFRjIyREQwOEIwMkNEMi9XcGJVN0QwMUpK VFpJNTFTcnpXc0VFMmhMNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjO4kuDFrqRaUPGMQOy7UNXVRnzceO913u8YQiJE+0ls4F4j/SRuUX K/9aSuN4baxCuCmPnhf0WNtGMF2vQwFYZN41/zpWS4BglP2Hydt80N4l186UeBPh fqIV+HGGeHBqVA3pcO4iIaIb3buhkLFCKT0cuVIQIEaWTvmnTbi4kHQLyU7RlvMM YHg083iYKO+WaWTxKZYrhMuZJ/Gl3XFwE61o/jKW2RcHv0h1hHVLG6Uv2amNq2Ld my+a6Kz582oZKjZM0nrlu0MuSyr47NKelHWftaer61DU9i4LNKWSY6jBZFsRL1Zh 2qsqCur3ClUP3D5iSpn0feqFkjmEkOtm -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:55 2025 by rpki-client