$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: WptHtkiNGqT6Z2ucYCc04Rotu/qCSPNMkav5Dn3IW+g= Subject key identifier: BB:18:FA:86:F5:8A:89:A8:86:E2:05:FF:40:3B:A0:29:C2:54:D3:14 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 033E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 0333 Signing time: Wed 25 Mar 2026 00:42:08 +0000 Manifest this update: Wed 25 Mar 2026 00:42:07 +0000 Manifest next update: Wed 01 Apr 2026 00:42:07 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: s0JXaofC1VNYoqU0fTAma6d1zUEwyK/jkO3ZUGE4/Rs=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: WTlHRr9EKax6T/O9fwj+YYNDRY6mwviUU1kAbrECVpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 830 (0x33e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Mar 25 00:42:07 2026 GMT Not After : Apr 1 00:42:07 2026 GMT Subject: CN=69c32f60-8ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:dc:bb:87:3d:c3:90:91:10:96:55:ae:98: f1:9c:90:54:2d:5e:d7:d9:9f:57:14:59:03:74:30: 17:54:39:1b:59:c4:57:9b:4f:e5:d8:3b:42:58:85: 30:88:70:a8:78:50:cd:9b:9e:a4:62:31:20:64:f0: 4c:71:6e:11:f4:65:fb:9b:bd:77:87:70:98:4f:9a: eb:c7:d4:bb:81:3b:12:27:cc:97:c7:1d:f8:5e:f9: 5c:fc:82:0d:01:ae:71:e0:22:44:31:ad:c0:56:9a: e4:1b:4b:df:47:9d:d0:4e:07:88:17:15:6b:e7:35: 86:56:0c:cc:d0:1e:02:33:ec:c4:f7:81:95:71:52: bf:9b:8c:8e:7d:3a:c1:e2:12:66:4f:90:c6:07:b4: 7a:fe:0d:00:ca:5e:f1:7c:ae:60:1c:c1:3d:19:b7: 86:96:d4:ef:5e:71:8c:83:89:7e:7e:38:0f:f2:8f: ca:5f:a2:37:b6:6f:6c:44:95:c6:02:7c:79:a8:60: 71:b0:1b:75:9f:bc:f2:29:e3:e1:33:62:fa:44:77: cd:ba:c7:82:c5:b9:81:31:a4:21:ef:b9:a3:d0:b5: 1d:d9:59:0f:fa:0f:27:d0:a7:f7:f7:2b:ed:bb:35: 94:ac:2a:70:ce:7f:20:07:72:36:ac:d4:6e:e8:a7: 4a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:18:FA:86:F5:8A:89:A8:86:E2:05:FF:40:3B:A0:29:C2:54:D3:14 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:c3:3a:81:e7:fa:2f:f9:d6:78:ba:0f:1a:68:0e:67:d3: e6:11:a1:77:3d:5e:f9:72:48:1a:4e:0a:a1:69:b5:56:a3:3e: 7f:4b:58:ca:a3:47:d5:45:0e:a7:b1:22:f4:d9:7e:eb:3e:6c: 31:f9:37:6e:9b:d0:c7:8f:0d:c1:c1:a0:bf:b6:50:98:b8:32: d1:b7:dc:58:00:24:7a:86:f7:09:28:39:e0:fb:4a:db:0f:f9: ce:bf:04:11:85:14:e4:a0:97:37:69:37:bd:33:66:a3:05:28: 72:f8:39:10:07:60:5e:4e:0f:1e:f6:21:27:73:38:bb:50:70: 3e:42:e3:21:b6:8f:94:d9:59:8d:fd:b1:1a:a6:e4:cb:9f:81: 9c:a6:0a:f3:09:ba:d6:c7:a9:63:01:6a:8a:eb:21:7b:8f:4e: 3b:4b:18:1e:0e:df:a2:01:58:f8:de:82:d9:c5:f1:0b:bc:fe: 52:2f:de:6f:26:1a:f5:65:b9:55:1e:e8:9a:48:a8:bb:ac:2d: 67:22:ff:6d:80:bc:89:cf:4f:76:99:d6:a3:30:82:e8:86:b6: fb:c7:2b:6b:cc:2c:0d:16:09:c9:f1:b3:c6:b7:d1:7d:1a:26: ad:3d:1a:38:84:25:a6:69:f6:6a:d6:cb:79:99:75:92:8a:6f: 73:29:ce:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjYwMzI1MDA0MjA3WhcNMjYwNDAxMDA0MjA3WjAYMRYwFAYD VQQDEw02OWMzMmY2MC04YWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRvcu4c9w5CREJZVrpjxnJBULV7X2Z9XFFkDdDAXVDkbWcRXm0/l2DtCWIUw iHCoeFDNm56kYjEgZPBMcW4R9GX7m713h3CYT5rrx9S7gTsSJ8yXxx34Xvlc/IIN Aa5x4CJEMa3AVprkG0vfR53QTgeIFxVr5zWGVgzM0B4CM+zE94GVcVK/m4yOfTrB 4hJmT5DGB7R6/g0Ayl7xfK5gHME9GbeGltTvXnGMg4l+fjgP8o/KX6I3tm9sRJXG Anx5qGBxsBt1n7zyKePhM2L6RHfNuseCxbmBMaQh77mj0LUd2VkP+g8n0Kf39yvt uzWUrCpwzn8gB3I2rNRu6KdK/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsY+ob1 iomohuIF/0A7oCnCVNMUMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACgTDOoHn+i/51ni6DxpoDmfT5hGhdz1e+XJIGk4KoWm1VqM+f0tYyqNH1UUO p7Ei9Nl+6z5sMfk3bpvQx48NwcGgv7ZQmLgy0bfcWAAkeob3CSg54PtK2w/5zr8E EYUU5KCXN2k3vTNmowUocvg5EAdgXk4PHvYhJ3M4u1BwPkLjIbaPlNlZjf2xGqbk y5+BnKYK8wm61sepYwFqiushe49OO0sYHg7fogFY+N6C2cXxC7z+Ui/ebyYa9WW5 VR7omkiou6wtZyL/bYC8ic9PdpnWozCC6Ia2+8cra8wsDRYJyfGzxrfRfRomrT0a OIQlpmn2atbLeZl1kopvcynOZw== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:53 2026 by rpki-client