$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: fWbLKZkGkjtg4QSI7RX3Gp2sUyv76ZZF2kqzU+j7YLw= Subject key identifier: E9:B6:BA:3D:4E:91:D8:F0:E4:C8:59:87:8D:4C:FE:1D:4E:F4:92:D7 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 02DE Signing time: Sun 19 Oct 2025 03:25:35 +0000 Manifest this update: Sun 19 Oct 2025 03:25:34 +0000 Manifest next update: Sun 26 Oct 2025 03:25:34 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: sQhs/MaUC/61ZrL08dvfCYJMMvPMJbwMpM8kYK76fG4=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: fWJ7cRsTCAW0U+0r1+X1xY7gsboVcmoNdt+pkuhh4IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Oct 19 03:25:34 2025 GMT Not After : Oct 26 03:25:34 2025 GMT Subject: CN=68f45a2f-da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:b6:33:27:cb:97:5c:16:a2:38:e1:30:68: d2:4b:9e:81:ba:3c:86:73:67:f2:1b:eb:fe:b5:4e: 34:a2:87:1b:bf:d4:9e:ac:ce:ec:67:63:6e:f8:db: c6:be:af:9f:7b:34:87:e1:00:d6:bb:fa:52:f4:cb: 8d:6e:30:35:9a:a8:54:36:0c:d6:33:c6:85:a5:20: 59:41:91:16:04:7a:70:f6:4e:0d:bb:da:60:31:87: 66:97:94:f6:ae:b9:d1:0b:24:26:eb:98:4f:27:48: 2c:a6:ca:f2:f1:ec:0f:c7:57:fd:a2:06:b3:aa:38: 9a:29:3a:07:89:0a:ec:ee:7e:a8:e5:4d:ea:e8:da: 0a:06:62:08:e6:d9:d3:80:3a:8d:d6:28:70:b1:e0: 81:cb:bd:fc:9f:4e:54:f6:8a:da:79:2a:ac:9f:6f: c0:17:1b:20:40:eb:52:b4:3f:f9:a5:30:3b:db:cf: 31:7b:bc:56:ba:b2:d1:8c:ed:28:14:ae:7b:9a:78: 7a:2c:8a:70:25:7c:08:e5:1f:64:9b:5f:4c:dd:76: a6:c0:db:01:92:37:51:36:e9:59:0d:ff:fd:51:5f: da:f3:e4:13:7d:54:f0:1c:05:70:b4:5d:49:63:67: 58:76:0a:32:9b:1b:49:da:2f:5b:c1:2d:5b:67:5b: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:B6:BA:3D:4E:91:D8:F0:E4:C8:59:87:8D:4C:FE:1D:4E:F4:92:D7 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:7e:12:c1:77:5f:97:e3:ab:93:bb:51:21:89:46:f9:81: 6e:3b:40:d7:f4:f8:4b:79:61:9b:1c:11:ad:22:09:47:61:6a: 2d:3f:76:ce:e7:bf:b6:58:22:3f:1c:32:90:c7:3b:32:31:97: 38:ac:f4:d9:9b:50:b4:81:f1:05:57:10:d5:6f:54:50:b1:b8: cf:ca:2c:96:5d:05:25:19:42:c1:88:73:90:f7:c6:b5:f0:69: 89:1c:98:b5:1f:99:da:72:a8:92:fb:de:97:89:80:ae:83:82: fe:18:0a:48:cf:e4:24:37:3c:53:2c:c3:37:19:fe:72:55:c9: c2:26:2e:03:d5:24:97:eb:0c:e6:40:4a:b8:e3:e4:32:4b:01: 53:b4:22:4d:ae:b3:6e:fe:0c:59:fc:ab:c5:cf:cf:73:cc:bf: 7f:09:de:c2:f4:90:a8:5e:50:fc:19:36:a2:0a:34:04:f6:fc: d5:a2:74:9a:52:b8:01:a4:d7:c8:a6:13:f9:20:b5:9d:40:9a: aa:35:45:6b:72:48:a4:c6:7c:58:eb:b7:e0:1d:29:7f:aa:d5: 90:1f:ab:a8:4d:29:a0:b7:f2:0e:bb:16:07:53:a2:09:59:b3: e0:2c:19:d6:d6:9d:08:c2:17:2c:c9:a8:6c:fa:36:eb:74:26: 28:5f:29:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjUxMDE5MDMyNTM0WhcNMjUxMDI2MDMyNTM0WjAYMRYwFAYD VQQDEw02OGY0NWEyZi1kYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylm2MyfLl1wWojjhMGjSS56BujyGc2fyG+v+tU40oocbv9SerM7sZ2Nu+NvG vq+fezSH4QDWu/pS9MuNbjA1mqhUNgzWM8aFpSBZQZEWBHpw9k4Nu9pgMYdml5T2 rrnRCyQm65hPJ0gspsry8ewPx1f9ogazqjiaKToHiQrs7n6o5U3q6NoKBmII5tnT gDqN1ihwseCBy738n05U9oraeSqsn2/AFxsgQOtStD/5pTA7288xe7xWurLRjO0o FK57mnh6LIpwJXwI5R9km19M3XamwNsBkjdRNulZDf/9UV/a8+QTfVTwHAVwtF1J Y2dYdgoymxtJ2i9bwS1bZ1siVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOm2uj1O kdjw5MhZh41M/h1O9JLXMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8X4SwXdfl+Ork7tRIYlG+YFuO0DX9PhLeWGbHBGtIglHYWotP3bO 57+2WCI/HDKQxzsyMZc4rPTZm1C0gfEFVxDVb1RQsbjPyiyWXQUlGULBiHOQ98a1 8GmJHJi1H5nacqiS+96XiYCug4L+GApIz+QkNzxTLMM3Gf5yVcnCJi4D1SSX6wzm QEq44+QySwFTtCJNrrNu/gxZ/KvFz89zzL9/Cd7C9JCoXlD8GTaiCjQE9vzVonSa UrgBpNfIphP5ILWdQJqqNUVrckikxnxY67fgHSl/qtWQH6uoTSmgt/IOuxYHU6IJ WbPgLBnW1p0Iwhcsyahs+jbrdCYoXyl5 -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:47 2025 by rpki-client