$ rpki-client -vvf rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft File: 1WeS1ZfpzdAr_BbQtJLaParggPw.mft (raw, json) Hash identifier: EFxm11djV1mnzCNrK2BMd3wcfWeEMHs41oHwxltdldU= Subject key identifier: 7A:8E:83:C6:20:4F:DD:A4:E0:26:80:19:C5:61:36:55:45:92:28:C6 Authority key identifier: D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC Certificate issuer: /CN=A91731EA/serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Certificate serial: 1F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft Manifest number: 1F2B Signing time: Mon 08 Sep 2025 16:01:18 +0000 Manifest this update: Mon 08 Sep 2025 16:01:18 +0000 Manifest next update: Mon 15 Sep 2025 16:01:18 +0000 Files and hashes: 1: 1WeS1ZfpzdAr_BbQtJLaParggPw.crl (hash: 5WRjlnw/k3gH1bY/OziUSrL8LxU36ewiNJ0wViblTcc=) 2: 317CF2A634E811EFA8BEA738C4F9AE02.roa (hash: Uo0DI8uu4MaKQTtSGimWFCEZqnoAxk8F8R7u5G4FQ3c=) 3: 500DFDA8578611EA8CC3B124C4F9AE02.roa (hash: 1vTwS6NmMwWfh2eOEtEYiCFnJVIHS5ywk/KgkT3QCd4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8016 (0x1f50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731EA, serialNumber=D56792D597E9CDD02BFC16D0B492DA3DAAE080FC Validity Not Before: Sep 8 16:01:18 2025 GMT Not After : Sep 15 16:01:18 2025 GMT Subject: CN=68befdce-0c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:01:fe:68:c2:1e:25:75:69:86:60:98:26: 39:bd:6a:07:16:c3:40:47:3b:9e:01:a1:e4:06:3c: d7:f1:1a:6d:f9:e3:04:8c:b5:b5:4b:4c:53:36:1d: 4f:8c:44:89:dd:4e:cf:d6:fb:45:ed:9e:6e:3e:be: 7b:d4:da:b9:17:92:e1:78:96:a0:c7:a2:07:02:2a: 48:c6:3a:9a:c9:8a:df:82:7c:d5:e2:46:65:a6:a5: 52:a8:a2:fa:ed:eb:9d:99:fe:11:1a:8a:d6:96:9b: ee:78:f1:9b:79:1f:04:5a:f5:2c:35:18:e1:69:82: 94:d9:c7:7f:29:09:62:e0:59:c3:df:53:1f:a9:90: 4c:9c:6e:43:de:d7:68:78:7e:71:eb:1c:5c:54:ad: 47:67:97:1d:9e:fd:c6:db:58:b2:93:b4:6d:88:6d: 22:3c:89:9e:2d:4e:4e:0f:35:f5:f2:7d:fb:98:60: 40:be:da:4c:74:9a:b7:22:5b:38:73:e9:2b:06:91: 93:5a:7b:60:ea:fe:7b:4e:64:b5:46:4d:b3:53:18: 29:91:9a:36:aa:ee:d8:d1:8c:9e:b8:0d:91:45:44: b7:5b:b4:c2:47:09:c7:6b:57:e3:16:55:01:4c:89: c3:ff:00:42:97:bb:f4:a4:4f:af:94:51:90:09:6d: 13:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8E:83:C6:20:4F:DD:A4:E0:26:80:19:C5:61:36:55:45:92:28:C6 X509v3 Authority Key Identifier: keyid:D5:67:92:D5:97:E9:CD:D0:2B:FC:16:D0:B4:92:DA:3D:AA:E0:80:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1WeS1ZfpzdAr_BbQtJLaParggPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731EA/9AF3ED285EEC11E6886EC51BC4F9AE02/1WeS1ZfpzdAr_BbQtJLaParggPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:41:18:50:63:2c:73:08:70:77:42:a8:c5:dc:29:bc:2c:7a: e5:41:3e:8a:6f:16:17:37:eb:c4:a3:42:e9:1a:46:27:54:f0: 8b:f6:3e:ed:38:6c:56:f8:4c:92:a8:cc:fb:ef:06:27:74:20: f5:51:d0:92:43:9e:0a:5b:0d:1b:8e:d6:04:74:62:83:bf:ba: c0:f9:eb:44:a0:5d:a0:de:2e:16:d0:d8:e6:43:96:33:82:3b: ef:02:e8:cc:91:0d:5f:96:83:ad:cd:41:1f:bf:67:2d:14:4b: db:20:90:6f:f8:73:d3:b4:32:69:40:e8:5e:13:42:00:3c:31: ac:a6:10:a4:27:7b:07:89:a5:fc:0e:b8:8f:d0:3d:c7:bf:67: 51:3b:7d:48:bc:c5:32:4a:3e:6b:75:6e:82:2f:e5:24:65:13: 35:fd:66:b9:b9:d6:e3:7d:da:6f:53:df:32:63:89:56:5d:93: 5e:d6:c6:b6:ec:ce:09:a0:88:10:ef:50:98:31:46:13:05:72: 6d:eb:27:6c:5c:41:1b:bc:d5:af:f9:05:62:39:78:63:71:ec: 4d:ee:8d:08:c6:fd:ec:3f:2d:d0:d4:c0:6f:eb:8c:53:b0:a2: 40:7a:69:23:59:73:4b:a1:36:46:cb:18:ac:6e:7f:92:54:94: 26:06:9c:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMxRUExMTAvBgNVBAUTKEQ1Njc5MkQ1OTdFOUNERDAyQkZDMTZEMEI0OTJEQTNE QUFFMDgwRkMwHhcNMjUwOTA4MTYwMTE4WhcNMjUwOTE1MTYwMTE4WjAYMRYwFAYD VQQDEw02OGJlZmRjZS0wYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyUB/mjCHiV1aYZgmCY5vWoHFsNARzueAaHkBjzX8Rpt+eMEjLW1S0xTNh1P jESJ3U7P1vtF7Z5uPr571Nq5F5LheJagx6IHAipIxjqayYrfgnzV4kZlpqVSqKL6 7eudmf4RGorWlpvuePGbeR8EWvUsNRjhaYKU2cd/KQli4FnD31MfqZBMnG5D3tdo eH5x6xxcVK1HZ5cdnv3G21iyk7RtiG0iPImeLU5ODzX18n37mGBAvtpMdJq3Ils4 c+krBpGTWntg6v57TmS1Rk2zUxgpkZo2qu7Y0YyeuA2RRUS3W7TCRwnHa1fjFlUB TInD/wBCl7v0pE+vlFGQCW0TJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHqOg8Yg T92k4CaAGcVhNlVFkijGMB8GA1UdIwQYMBaAFNVnktWX6c3QK/wW0LSS2j2q4ID8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzFFQS85QUYzRUQyODVF RUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpkQXJfQmJRdEpMYVBhcmdn UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFXZVMxWmZwemRBcl9CYlF0SkxhUGFyZ2dQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFFQS85QUYzRUQyODVFRUMxMUU2ODg2RUM1MUJDNEY5QUUwMi8xV2VTMVpmcHpk QXJfQmJRdEpMYVBhcmdnUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpQRhQYyxzCHB3QqjF3Cm8LHrlQT6KbxYXN+vEo0LpGkYnVPCL9j7t OGxW+EySqMz77wYndCD1UdCSQ54KWw0bjtYEdGKDv7rA+etEoF2g3i4W0NjmQ5Yz gjvvAujMkQ1floOtzUEfv2ctFEvbIJBv+HPTtDJpQOheE0IAPDGsphCkJ3sHiaX8 DriP0D3Hv2dRO31IvMUySj5rdW6CL+UkZRM1/Wa5udbjfdpvU98yY4lWXZNe1sa2 7M4JoIgQ71CYMUYTBXJt6ydsXEEbvNWv+QViOXhjcexN7o0Ixv3sPy3Q1MBv64xT sKJAemkjWXNLoTZGyxisbn+SVJQmBpzV -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:49 2025 by rpki-client