$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: miVnLjhIj1XWE4YHy4wqzTybKQ6yX7S7s/k4qoC5whA= Subject key identifier: A6:1D:11:13:D6:B5:35:88:79:F3:DC:2A:AB:5A:E4:A3:41:34:B5:96 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 02C0 Signing time: Thu 21 Aug 2025 01:36:27 +0000 Manifest this update: Thu 21 Aug 2025 01:36:26 +0000 Manifest next update: Thu 28 Aug 2025 01:36:26 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: emJEeDx4SMIdwGTB4Q88sQIVkr7/VKnm7XZIn1+z/+4=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: fWJ7cRsTCAW0U+0r1+X1xY7gsboVcmoNdt+pkuhh4IE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: Aug 21 01:36:26 2025 GMT Not After : Aug 28 01:36:26 2025 GMT Subject: CN=68a6781b-f115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:ac:00:24:a7:39:d0:7c:13:54:a4:ae:01: af:f9:7c:d1:04:ab:99:3e:aa:d6:2c:a0:ce:03:22: bf:b3:9c:78:30:e3:cb:c2:98:ef:ab:1d:ce:c9:bb: c9:52:2f:ef:2b:dc:b8:8a:2b:49:76:7f:fa:b8:c1: 86:23:bb:ac:bf:53:91:31:d2:64:18:61:47:da:d8: 0b:a9:e8:fa:54:09:03:8d:94:b1:f9:f9:99:13:da: 42:9a:48:fa:1f:62:b9:bf:2d:ac:c4:f6:48:71:ef: ac:22:8c:fc:5c:13:78:a2:3e:3f:28:c1:8d:09:05: e9:5f:0b:2f:ce:c9:56:24:bf:8e:fd:33:74:8a:3c: a4:3e:d8:82:1f:6e:59:53:75:02:6e:32:8c:76:a2: 23:0c:49:0d:ca:0d:17:11:1d:f9:14:bf:f0:a2:c8: a8:2b:fe:c8:5c:ae:03:9d:44:d8:3c:69:68:e9:d1: c4:a7:2a:19:47:30:e0:84:1e:e4:15:6e:2c:20:99: 36:51:be:b1:b7:c2:ab:a5:37:91:5d:cd:18:91:99: 11:1c:19:86:b4:f0:fb:51:39:97:a1:e6:44:01:67: 27:f0:cc:b8:69:d0:5f:60:3d:48:10:1c:12:72:5f: 20:8c:e0:9c:6f:94:f6:e0:0c:d5:c8:81:d1:e3:23: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:11:13:D6:B5:35:88:79:F3:DC:2A:AB:5A:E4:A3:41:34:B5:96 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:21:82:a8:94:26:bf:d6:5d:d7:8c:d0:d1:12:08:c0:0d:46: a6:a2:c8:27:81:65:a0:21:b5:e7:51:92:05:c3:f7:9c:29:cf: 34:bb:78:17:62:a1:46:15:b7:61:27:0e:a4:1f:92:c5:69:f3: c8:c5:21:e5:ac:b3:2d:bf:a6:bb:45:d9:0b:7b:04:59:11:61: a0:1a:15:20:c6:93:49:25:de:b8:7d:07:86:6e:5e:97:20:4a: 89:cb:01:d0:a2:13:af:51:61:a8:e9:54:e9:7a:5b:45:d3:2a: d5:e0:c6:3a:a8:b8:e3:76:1f:39:23:fb:f9:b1:2e:05:71:77: c1:98:1e:65:fa:b2:54:85:44:89:43:d1:e8:37:8c:85:aa:0a: a8:d4:77:86:fd:c8:c0:54:50:ef:61:d9:f5:4f:fd:68:aa:51: 13:e2:36:86:2d:aa:fa:8f:4d:fd:15:61:29:88:78:6a:14:68: 5c:00:4f:63:12:f7:05:bd:6f:fe:9e:81:69:cb:fb:7a:f5:f9: 1e:4c:8f:84:9d:f2:e8:21:e6:ad:cc:33:9a:2c:97:0b:b7:e8: 40:14:fe:6b:bf:7d:5c:87:e1:19:75:4a:33:28:2e:b8:06:df: 68:e0:49:2a:6f:ac:78:0f:e6:25:49:c3:d2:34:0c:43:13:d6: 73:f6:53:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjUwODIxMDEzNjI2WhcNMjUwODI4MDEzNjI2WjAYMRYwFAYD VQQDEw02OGE2NzgxYi1mMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweSsACSnOdB8E1SkrgGv+XzRBKuZPqrWLKDOAyK/s5x4MOPLwpjvqx3OybvJ Ui/vK9y4iitJdn/6uMGGI7usv1ORMdJkGGFH2tgLqej6VAkDjZSx+fmZE9pCmkj6 H2K5vy2sxPZIce+sIoz8XBN4oj4/KMGNCQXpXwsvzslWJL+O/TN0ijykPtiCH25Z U3UCbjKMdqIjDEkNyg0XER35FL/wosioK/7IXK4DnUTYPGlo6dHEpyoZRzDghB7k FW4sIJk2Ub6xt8KrpTeRXc0YkZkRHBmGtPD7UTmXoeZEAWcn8My4adBfYD1IEBwS cl8gjOCcb5T24AzVyIHR4yO9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYdERPW tTWIefPcKqta5KNBNLWWMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHIYKolCa/1l3XjNDREgjADUamosgngWWgIbXnUZIFw/ecKc80u3gX YqFGFbdhJw6kH5LFafPIxSHlrLMtv6a7RdkLewRZEWGgGhUgxpNJJd64fQeGbl6X IEqJywHQohOvUWGo6VTpeltF0yrV4MY6qLjjdh85I/v5sS4FcXfBmB5l+rJUhUSJ Q9HoN4yFqgqo1HeG/cjAVFDvYdn1T/1oqlET4jaGLar6j039FWEpiHhqFGhcAE9j EvcFvW/+noFpy/t69fkeTI+EnfLoIeatzDOaLJcLt+hAFP5rv31ch+EZdUozKC64 Bt9o4Ekqb6x4D+YlScPSNAxDE9Zz9lO1 -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:10 2025 by rpki-client