$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: ol/zEpnmdXZky/nqBlxEQP++G6IxpxmgCRTibMVs16k= Subject key identifier: 95:95:79:00:9B:F0:16:FD:5A:7D:4F:7E:70:13:5E:AD:A1:5E:6F:A6 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1F22 Signing time: Fri 22 Aug 2025 16:04:58 +0000 Manifest this update: Fri 22 Aug 2025 16:04:58 +0000 Manifest next update: Fri 29 Aug 2025 16:04:58 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: FOF1X84FcTrGaXcGp7RsSzkEb84womX+3VVCpIVTaW8=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8007 (0x1f47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Aug 22 16:04:58 2025 GMT Not After : Aug 29 16:04:58 2025 GMT Subject: CN=68a8952a-dda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:d5:55:84:2a:31:dd:98:24:66:cf:e8:46: 53:e4:75:e5:db:e0:73:80:aa:66:fa:43:34:62:5f: bf:6d:22:16:5d:33:2d:d9:18:94:d6:95:8d:42:3e: b1:6e:06:9a:2c:bd:48:0b:91:9e:05:22:06:7e:b7: bb:e2:14:ac:51:76:ff:f8:d2:80:e3:f8:12:3e:f0: e1:ed:77:5e:f7:df:80:b2:32:35:40:d6:a4:3a:1a: 99:36:01:66:dc:6b:5b:c7:fe:8f:77:ea:a1:50:30: c9:af:c7:aa:1a:f3:1d:31:d2:ec:dc:1e:c9:1a:d9: 5d:17:e5:95:25:be:ce:25:3d:66:3d:63:e6:92:d4: 2c:09:01:14:bc:3a:59:13:35:03:7a:ca:4b:f1:78: 75:ed:38:44:f9:ca:cb:d5:b4:67:2b:a2:e0:15:ae: bf:ff:ee:a2:73:1f:87:12:bd:07:1c:06:26:5e:a8: 24:ed:55:84:67:bd:5f:fb:40:fb:eb:82:4f:05:05: cd:85:fa:2d:1f:7e:a0:dc:6d:18:33:4d:8a:b1:77: 4c:43:ad:ff:46:65:16:3d:d4:6f:d1:be:71:71:8d: b1:7c:38:41:92:91:a6:7b:3f:c3:5c:cd:2c:0d:d4: c2:44:54:8a:86:6c:50:5d:7e:9f:2b:30:59:9f:f0: 41:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:95:79:00:9B:F0:16:FD:5A:7D:4F:7E:70:13:5E:AD:A1:5E:6F:A6 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6f:fc:eb:4c:b4:3f:b3:78:39:3b:49:30:7b:91:b3:8b:d5: 25:69:12:ab:01:93:31:b9:a0:9a:7e:1d:e6:83:b0:32:68:47: 6c:5d:46:d6:c4:d1:62:9b:91:e6:b0:4e:ac:fb:15:24:45:50: 4c:42:6b:37:bb:73:57:a9:f0:13:06:2d:62:1e:93:7b:df:23: 5f:9e:bf:d8:7b:92:7d:50:19:18:df:8a:73:04:95:71:e4:70: 88:81:2d:3f:79:c5:46:6d:bd:f3:69:41:80:1c:2d:8e:9b:3b: 5f:8c:b7:16:b7:32:12:b9:6a:e0:d4:fe:a6:1d:5e:35:47:82: 76:56:a8:c7:1e:72:c4:29:d8:19:09:77:b8:ca:c8:7a:45:d1: 9c:74:78:48:31:c6:a0:ea:93:f6:e2:9b:a0:e6:25:50:94:97: 50:be:b3:02:a3:26:5c:ac:95:1e:4e:d9:8d:46:19:9d:01:eb: 33:ea:1e:1d:a0:4d:2d:32:a8:ea:4c:99:17:7d:6d:cc:c5:64: 85:b0:11:ef:91:c8:b8:43:02:dd:a2:24:56:82:f3:45:3a:c7: 69:df:0a:64:7e:72:cd:d7:b5:90:c8:c1:7d:61:ac:39:a8:53: 81:1c:06:80:a7:dd:1b:92:89:bf:b8:c0:eb:41:e1:2f:9e:f7: 71:19:43:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwODIyMTYwNDU4WhcNMjUwODI5MTYwNDU4WjAYMRYwFAYD VQQDEw02OGE4OTUyYS1kZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlDVVYQqMd2YJGbP6EZT5HXl2+BzgKpm+kM0Yl+/bSIWXTMt2RiU1pWNQj6x bgaaLL1IC5GeBSIGfre74hSsUXb/+NKA4/gSPvDh7Xde99+AsjI1QNakOhqZNgFm 3Gtbx/6Pd+qhUDDJr8eqGvMdMdLs3B7JGtldF+WVJb7OJT1mPWPmktQsCQEUvDpZ EzUDespL8Xh17ThE+crL1bRnK6LgFa6//+6icx+HEr0HHAYmXqgk7VWEZ71f+0D7 64JPBQXNhfotH36g3G0YM02KsXdMQ63/RmUWPdRv0b5xcY2xfDhBkpGmez/DXM0s DdTCRFSKhmxQXX6fKzBZn/BBswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWVeQCb 8Bb9Wn1PfnATXq2hXm+mMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzb/zrTLQ/s3g5O0kwe5Gzi9UlaRKrAZMxuaCafh3mg7AyaEdsXUbW xNFim5HmsE6s+xUkRVBMQms3u3NXqfATBi1iHpN73yNfnr/Ye5J9UBkY34pzBJVx 5HCIgS0/ecVGbb3zaUGAHC2OmztfjLcWtzISuWrg1P6mHV41R4J2VqjHHnLEKdgZ CXe4ysh6RdGcdHhIMcag6pP24pug5iVQlJdQvrMCoyZcrJUeTtmNRhmdAesz6h4d oE0tMqjqTJkXfW3MxWSFsBHvkci4QwLdoiRWgvNFOsdp3wpkfnLN17WQyMF9Yaw5 qFOBHAaAp90bkom/uMDrQeEvnvdxGUP4 -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:36 2025 by rpki-client