$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: WgO4Yu5NqoadrM8GQtF24tcG6uMy/Gcq/ulJZB9ECaE= Subject key identifier: ED:96:69:4E:5D:46:13:9D:DA:6F:C1:CE:70:4A:A6:C6:8F:FF:B4:10 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 02AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 02A5 Signing time: Sun 29 Jun 2025 01:03:27 +0000 Manifest this update: Sun 29 Jun 2025 01:03:26 +0000 Manifest next update: Sun 06 Jul 2025 01:03:26 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: 0MVtDcHwlvKEmD9IjuU26wEd24hcMT950rFlXmJzeyM=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: fWJ7cRsTCAW0U+0r1+X1xY7gsboVcmoNdt+pkuhh4IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 682 (0x2aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Jun 29 01:03:26 2025 GMT Not After : Jul 6 01:03:26 2025 GMT Subject: CN=686090de-0dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:46:b6:a9:fe:14:db:5d:ca:40:81:d8:6c: 48:64:21:cf:bc:9c:89:31:ac:c1:3e:c3:4e:09:23: 3c:5a:ee:80:b3:01:39:d3:03:57:6b:e6:8f:15:85: 15:dc:73:10:05:61:70:8d:7e:c9:2e:e2:ca:53:44: 8d:2f:b9:38:89:13:26:03:1a:63:90:17:64:ff:05: bf:37:73:33:51:4a:24:ff:bd:fe:41:65:19:24:12: 0c:ea:45:06:31:a4:df:9f:c3:99:3a:01:18:25:81: 3c:b9:94:1d:40:81:20:c7:c3:78:02:dc:25:5a:50: b7:c4:54:89:53:53:9f:59:49:a7:b8:fc:79:54:8e: 1a:21:a3:f4:51:26:10:c7:25:df:fd:8b:21:c8:01: 8b:bd:e1:97:f1:7e:73:99:b3:9e:a1:01:c2:b5:c5: 46:60:30:bd:ed:0e:1d:89:1d:94:53:e5:b7:b6:d6: 24:b8:39:45:08:75:7a:69:68:fa:74:ea:ab:83:cc: 76:c2:29:e1:08:06:f1:59:9f:68:74:b8:04:7f:34: a4:02:05:e1:30:67:12:ac:48:a1:7e:cc:e7:d2:50: d7:3c:76:46:69:e2:7f:c6:80:75:d7:3a:a2:d7:06: cd:4c:7e:df:d8:3e:82:a6:e0:9f:b8:75:81:38:0b: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:96:69:4E:5D:46:13:9D:DA:6F:C1:CE:70:4A:A6:C6:8F:FF:B4:10 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:79:58:ab:a8:88:aa:68:84:42:9e:a2:b3:84:3b:27:54:29: c7:11:d7:5a:48:e3:47:93:b5:dc:1f:d8:4f:00:cc:8d:1c:d0: 60:42:b0:73:39:ef:a0:3e:b7:5e:b4:27:8f:c5:2d:0f:aa:15: c9:af:11:55:b3:72:a8:cc:79:77:cf:28:1c:97:e8:43:2b:6e: 6c:70:7c:fb:8f:fa:78:c4:7d:d6:e7:69:ed:57:3d:f9:2c:7f: de:47:a0:74:a0:b4:1d:0b:82:d0:0e:53:16:5d:1c:9a:1e:1c: 51:72:c4:a7:e0:b4:d6:28:7b:7a:7d:ab:1e:aa:e7:e1:99:69: f7:1c:15:e9:8a:78:5c:b9:56:01:fa:fb:16:9b:ed:5a:52:e3: 40:4f:b3:e5:fe:9c:bb:d8:2f:97:d3:ba:d5:74:b9:20:c0:40: 0e:7e:9d:31:e4:78:65:fc:79:21:b7:39:ff:b7:9b:01:f2:7e: ec:65:3c:6c:ad:a3:39:42:73:0a:a0:68:0f:6d:fb:86:ef:89: e0:a2:ce:b2:43:3c:1f:96:29:57:ab:97:b3:42:e0:86:06:77: e5:a6:1b:36:28:c9:41:9e:c4:d9:40:d0:54:5b:0e:7c:9e:ee: c6:5b:ae:3d:70:4d:20:70:91:20:97:dc:56:72:23:da:6f:dc: 21:bd:3f:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjUwNjI5MDEwMzI2WhcNMjUwNzA2MDEwMzI2WjAYMRYwFAYD VQQDEw02ODYwOTBkZS0wZGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRNGtqn+FNtdykCB2GxIZCHPvJyJMazBPsNOCSM8Wu6AswE50wNXa+aPFYUV 3HMQBWFwjX7JLuLKU0SNL7k4iRMmAxpjkBdk/wW/N3MzUUok/73+QWUZJBIM6kUG MaTfn8OZOgEYJYE8uZQdQIEgx8N4AtwlWlC3xFSJU1OfWUmnuPx5VI4aIaP0USYQ xyXf/YshyAGLveGX8X5zmbOeoQHCtcVGYDC97Q4diR2UU+W3ttYkuDlFCHV6aWj6 dOqrg8x2winhCAbxWZ9odLgEfzSkAgXhMGcSrEihfszn0lDXPHZGaeJ/xoB11zqi 1wbNTH7f2D6CpuCfuHWBOAsgXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2WaU5d RhOd2m/BznBKpsaP/7QQMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPeVirqIiqaIRCnqKzhDsnVCnHEddaSONHk7XcH9hPAMyNHNBgQrBz Oe+gPrdetCePxS0PqhXJrxFVs3KozHl3zygcl+hDK25scHz7j/p4xH3W52ntVz35 LH/eR6B0oLQdC4LQDlMWXRyaHhxRcsSn4LTWKHt6fasequfhmWn3HBXpinhcuVYB +vsWm+1aUuNAT7Pl/py72C+X07rVdLkgwEAOfp0x5Hhl/Hkhtzn/t5sB8n7sZTxs raM5QnMKoGgPbfuG74ngos6yQzwflilXq5ezQuCGBnflphs2KMlBnsTZQNBUWw58 nu7GW649cE0gcJEgl9xWciPab9whvT9m -----END CERTIFICATE-----Generated at Sun Jun 29 14:25:21 2025 by rpki-client