$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: 9/0eXHDT5PmGQei8J+KXyyssNH3affbBRh/UjUpF8+M= Subject key identifier: F8:92:37:16:AD:73:3D:88:C7:BB:07:67:01:3A:91:E9:81:8D:90:59 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 02C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 02C1 Signing time: Sat 23 Aug 2025 01:40:27 +0000 Manifest this update: Sat 23 Aug 2025 01:40:27 +0000 Manifest next update: Sat 30 Aug 2025 01:40:27 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: cMpPGU27AusifqevEfc6yJQr6SbIwN40Cwc/TMd+ces=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: fWJ7cRsTCAW0U+0r1+X1xY7gsboVcmoNdt+pkuhh4IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 710 (0x2c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Aug 23 01:40:27 2025 GMT Not After : Aug 30 01:40:27 2025 GMT Subject: CN=68a91c0b-83fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:6e:2f:54:98:03:ed:16:d5:35:2c:8f:be: 4f:6c:60:b0:85:d7:ed:bc:0f:7e:d2:2d:ac:37:ac: f2:1e:8f:78:ba:78:17:ea:47:0e:e2:40:76:1d:38: a2:b2:7b:dc:e7:53:63:32:76:74:5a:78:e3:4d:f2: f8:80:d4:cf:83:f2:8d:04:ff:a6:06:4d:ff:ce:e6: b4:17:dd:75:e7:2a:78:de:c9:77:78:d4:e9:83:1f: 56:ee:d5:99:ef:80:1c:1a:11:94:33:d2:51:7c:0d: 78:a3:fc:7d:1a:20:ce:3d:02:73:02:5c:14:8b:74: 7f:3e:c9:28:bc:94:ae:6d:6d:f3:93:d5:2e:9b:db: cd:9e:46:53:12:2a:3d:1e:7a:32:5d:c9:9b:7f:b4: 58:f8:d5:d7:14:5f:8f:77:a4:25:11:d3:45:f6:62: 0f:a4:50:09:d6:1b:30:97:9b:cc:86:ed:fc:d3:3f: 7a:e9:90:79:2d:d4:4e:55:ee:9d:f2:cf:e5:15:68: 26:a9:62:d5:17:d1:f9:1b:e1:bc:79:ec:63:9d:32: c5:84:43:2e:d0:74:89:31:05:54:da:d8:15:4a:59: 02:46:d6:31:7f:5f:0e:e3:b3:f4:8b:71:3c:25:0b: 6d:39:3e:8e:18:c0:85:a0:c5:b6:97:b4:e1:6f:6f: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:92:37:16:AD:73:3D:88:C7:BB:07:67:01:3A:91:E9:81:8D:90:59 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:42:b3:10:82:da:03:3a:27:98:68:ab:f9:57:77:03:9c:cb: e3:bb:1d:f5:0f:03:9b:e2:6e:51:5a:31:5f:71:9e:38:f0:88: 4a:17:e1:ca:19:21:6d:31:cf:fe:6c:ef:3d:c5:06:87:2c:73: a3:40:42:7a:a6:03:52:7f:f1:ca:bf:e2:df:04:59:bc:43:fb: a0:a4:33:2d:fa:90:68:63:6b:8c:d2:74:ed:86:3b:84:51:70: 71:8c:13:7c:0b:a3:65:8c:ad:75:45:47:89:e3:a9:62:81:a2: 28:0e:75:32:58:16:04:38:f6:4b:2e:69:b2:1f:58:5d:ad:ed: 55:58:56:10:9a:b6:da:50:89:ae:a4:9e:b0:c7:74:d8:66:be: 30:c5:50:c4:7e:d6:b7:ad:9a:9e:c6:68:e4:ce:c2:f9:1e:95: fb:f5:f4:a1:f2:61:2a:8e:be:f6:7d:26:74:a9:a7:29:7e:4c: 34:d0:88:f5:4f:d7:de:f8:c8:15:8d:87:c1:8a:85:3b:17:a9: f2:63:4b:68:74:71:c9:c0:db:5f:7b:ee:93:6a:2d:1a:0a:1a: e7:02:a5:3f:05:ea:1d:58:3a:68:c7:0e:5f:e4:04:6e:7d:ae: e2:42:77:68:1b:2a:e4:2d:1b:d0:33:a0:d0:26:0e:91:45:65: d2:83:d2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjUwODIzMDE0MDI3WhcNMjUwODMwMDE0MDI3WjAYMRYwFAYD VQQDEw02OGE5MWMwYi04M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaBuL1SYA+0W1TUsj75PbGCwhdftvA9+0i2sN6zyHo94ungX6kcO4kB2HTii snvc51NjMnZ0WnjjTfL4gNTPg/KNBP+mBk3/zua0F9115yp43sl3eNTpgx9W7tWZ 74AcGhGUM9JRfA14o/x9GiDOPQJzAlwUi3R/PskovJSubW3zk9Uum9vNnkZTEio9 HnoyXcmbf7RY+NXXFF+Pd6QlEdNF9mIPpFAJ1hswl5vMhu380z966ZB5LdROVe6d 8s/lFWgmqWLVF9H5G+G8eexjnTLFhEMu0HSJMQVU2tgVSlkCRtYxf18O47P0i3E8 JQttOT6OGMCFoMW2l7Thb2+glwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiSNxat cz2Ix7sHZwE6kemBjZBZMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQrMQgtoDOieYaKv5V3cDnMvjux31DwOb4m5RWjFfcZ448IhKF+HK GSFtMc/+bO89xQaHLHOjQEJ6pgNSf/HKv+LfBFm8Q/ugpDMt+pBoY2uM0nTthjuE UXBxjBN8C6NljK11RUeJ46ligaIoDnUyWBYEOPZLLmmyH1hdre1VWFYQmrbaUImu pJ6wx3TYZr4wxVDEfta3rZqexmjkzsL5HpX79fSh8mEqjr72fSZ0qacpfkw00Ij1 T9fe+MgVjYfBioU7F6nyY0todHHJwNtfe+6Tai0aChrnAqU/BeodWDpoxw5f5ARu fa7iQndoGyrkLRvQM6DQJg6RRWXSg9IV -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:25 2025 by rpki-client