$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft File: I1WemnFX565_YExCiDcpLeAzCaA.mft (raw, json) Hash identifier: umdrOmRjLnE+FceyUb+m0gFn96mrQJkczKF3c1Ychrc= Subject key identifier: 19:9A:58:3E:FD:76:83:ED:49:6B:6F:0A:18:EF:7B:79:D5:50:9F:00 Authority key identifier: 23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 Certificate issuer: /CN=A91BEA2A/serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Certificate serial: 035B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft Manifest number: 0350 Signing time: Thu 21 May 2026 01:02:57 +0000 Manifest this update: Thu 21 May 2026 01:02:56 +0000 Manifest next update: Thu 28 May 2026 01:02:56 +0000 Files and hashes: 1: I1WemnFX565_YExCiDcpLeAzCaA.crl (hash: jFC7ET+w7jQaCaoL5dSmbMVJBAF/rQhZ++RTvvhBpWk=) 2: CFF0FDEC025911EDA0A85765C4F9AE02.roa (hash: WTlHRr9EKax6T/O9fwj+YYNDRY6mwviUU1kAbrECVpw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 859 (0x35b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA2A, serialNumber=23559E9A7157E7AE7F604C428837292DE03309A0 Validity Not Before: May 21 01:02:56 2026 GMT Not After : May 28 01:02:56 2026 GMT Subject: CN=6a0e59c1-888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:1f:3c:4c:a8:d1:55:f5:a7:8c:60:43:cb: 41:01:76:cd:57:e2:56:3e:c3:dc:b8:75:6e:64:68: 0a:19:a5:b8:b1:d2:c9:d3:62:d2:32:8c:79:d2:e9: 8d:4f:78:6f:da:1a:e0:36:6b:10:dd:85:cc:c4:f3: 13:77:e1:95:e3:f0:84:fe:0e:69:32:a6:3a:62:56: 50:fd:7b:d4:c3:cc:1a:45:a8:63:b5:81:ae:d5:fc: 84:68:76:0b:4a:46:da:22:67:3c:71:c8:21:89:a4: b9:75:5c:6a:57:98:48:7d:2d:3b:94:96:f0:55:e3: 4e:8f:4e:1b:17:ad:33:3f:8b:02:34:7a:7a:f1:5f: b8:97:d5:35:12:e3:aa:c2:f3:d6:dd:98:7b:f0:48: e9:36:7f:48:d4:1f:56:8c:5c:ee:70:cf:b5:73:ef: e1:02:82:3d:8d:d9:0e:26:1d:91:84:bd:7d:23:db: 50:9b:5e:6d:fb:8c:69:03:43:c1:eb:95:65:79:90: f1:7b:b5:33:4b:8a:84:ad:13:51:1a:f7:69:7c:38: bd:97:f9:e3:43:ee:8b:c0:88:32:07:c6:bf:e1:e3: fc:4a:7c:28:d5:1a:ec:4a:7c:a0:83:fc:da:40:41: c3:14:a9:3f:9e:a7:22:0b:58:0c:2b:af:be:91:5c: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9A:58:3E:FD:76:83:ED:49:6B:6F:0A:18:EF:7B:79:D5:50:9F:00 X509v3 Authority Key Identifier: keyid:23:55:9E:9A:71:57:E7:AE:7F:60:4C:42:88:37:29:2D:E0:33:09:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I1WemnFX565_YExCiDcpLeAzCaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA2A/3D350FD2025611EDA1322D5DC4F9AE02/I1WemnFX565_YExCiDcpLeAzCaA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:03:52:23:53:a0:8f:c0:a8:fb:f0:63:28:5e:f7:63:90:9a: b9:67:a8:b9:e6:26:95:2b:8f:f4:b9:15:99:dd:47:9c:24:ed: 4d:13:b2:4b:3a:79:f4:cf:83:c4:62:53:6c:3a:da:2f:6e:87: c3:c7:4a:57:de:e2:cd:55:3d:59:80:93:9d:4b:bd:88:ac:94: 29:53:db:f6:d5:4e:58:86:a1:93:64:54:6b:ee:68:f5:48:c7: 4f:35:bf:4f:bd:76:a7:bc:70:77:d8:8b:a3:f0:8c:1c:9e:32: c0:76:ab:3c:e1:d6:59:fa:bc:49:70:0e:19:15:30:51:bf:69: 14:a6:f5:e8:d4:15:dd:4c:a5:29:f3:cf:a5:ed:c0:be:e3:79: bb:ac:77:91:ac:d2:48:40:2b:1f:9d:b3:d7:fc:43:13:40:1c: 62:f0:7c:fc:02:44:e3:b6:6a:f2:cc:66:7c:77:5c:7a:4f:35: d0:e8:58:87:48:24:13:5c:f0:1c:38:ac:de:12:b6:3b:b9:7c: 85:23:f1:63:20:95:33:46:ed:02:10:be:fa:f0:49:19:fc:14: 89:14:50:24:0e:10:e0:31:55:7c:a9:8d:9c:b7:ee:ea:0c:d4: f4:c2:f9:05:28:21:92:2b:04:c8:f6:d4:0d:87:bf:56:fd:5f: d1:84:32:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVBMkExMTAvBgNVBAUTKDIzNTU5RTlBNzE1N0U3QUU3RjYwNEM0Mjg4MzcyOTJE RTAzMzA5QTAwHhcNMjYwNTIxMDEwMjU2WhcNMjYwNTI4MDEwMjU2WjAYMRYwFAYD VQQDEw02YTBlNTljMS04ODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoesfPEyo0VX1p4xgQ8tBAXbNV+JWPsPcuHVuZGgKGaW4sdLJ02LSMox50umN T3hv2hrgNmsQ3YXMxPMTd+GV4/CE/g5pMqY6YlZQ/XvUw8waRahjtYGu1fyEaHYL SkbaImc8ccghiaS5dVxqV5hIfS07lJbwVeNOj04bF60zP4sCNHp68V+4l9U1EuOq wvPW3Zh78EjpNn9I1B9WjFzucM+1c+/hAoI9jdkOJh2RhL19I9tQm15t+4xpA0PB 65VleZDxe7UzS4qErRNRGvdpfDi9l/njQ+6LwIgyB8a/4eP8Snwo1RrsSnygg/za QEHDFKk/nqciC1gMK6++kVyO6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBmaWD79 doPtSWtvChjve3nVUJ8AMB8GA1UdIwQYMBaAFCNVnppxV+euf2BMQog3KS3gMwmg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUEyQS8zRDM1MEZEMjAy NTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2NV9ZRXhDaURjcExlQXpD YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kxV2VtbkZYNTY1X1lFeENpRGNwTGVBekNhQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUEyQS8zRDM1MEZEMjAyNTYxMUVEQTEzMjJENURDNEY5QUUwMi9JMVdlbW5GWDU2 NV9ZRXhDaURjcExlQXpDYUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQNSI1Ogj8Co+/BjKF73Y5CauWeoueYmlSuP9LkVmd1HnCTtTROySzp59M+D xGJTbDraL26Hw8dKV97izVU9WYCTnUu9iKyUKVPb9tVOWIahk2RUa+5o9UjHTzW/ T712p7xwd9iLo/CMHJ4ywHarPOHWWfq8SXAOGRUwUb9pFKb16NQV3UylKfPPpe3A vuN5u6x3kazSSEArH52z1/xDE0AcYvB8/AJE47Zq8sxmfHdcek810OhYh0gkE1zw HDis3hK2O7l8hSPxYyCVM0btAhC++vBJGfwUiRRQJA4Q4DFVfKmNnLfu6gzU9ML5 BSghkisEyPbUDYe/Vv1f0YQyhg== -----END CERTIFICATE-----Generated at Thu May 21 10:52:05 2026 by rpki-client