$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: bgkd4Ar4aV4j+v8OG3EoOeIw9ioJQn5e6IRQtrbWpdc= Subject key identifier: 01:AD:FB:E9:32:C5:8B:3B:A2:86:30:3A:E3:AA:09:93:7C:E7:CF:E1 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 05 Signing time: Sat 19 Jul 2025 08:28:18 +0000 Manifest this update: Sat 19 Jul 2025 08:28:18 +0000 Manifest next update: Sat 26 Jul 2025 08:28:18 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: 3iuOq3hQcg7hTsHpoWM86NdusGT89Uk0f5REAv8L/Ao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Jul 19 08:28:18 2025 GMT Not After : Jul 26 08:28:18 2025 GMT Subject: CN=687b5722-6af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f4:24:0e:99:c6:d0:6b:68:8b:6b:84:c3:4d: d3:1c:0f:59:46:d9:85:69:84:5c:de:44:d1:eb:44: d2:50:d4:c3:50:3f:7e:7e:e7:7f:da:39:e5:77:f8: c4:d2:35:c6:11:19:92:47:49:ff:e0:cc:25:f7:13: 4b:7c:6c:b6:4a:f8:68:71:97:19:8e:41:a4:5f:0a: c9:37:11:98:67:bd:57:3c:12:81:0e:a2:db:cd:87: ce:4a:13:2e:67:c0:21:1b:17:a0:a1:68:5f:0f:05: 83:f1:ef:43:15:12:43:5f:7c:d5:c9:4f:21:09:9e: eb:bf:62:a7:85:04:d3:76:ae:29:02:85:a6:db:2b: 08:4f:d8:70:07:4e:84:18:eb:49:e6:b4:6a:fc:56: a3:b8:c0:d5:a1:26:0d:d9:ef:e4:0f:55:71:a2:74: 3c:e6:d8:48:c3:41:82:74:1a:7a:2c:76:8a:9a:2e: 66:db:c7:b2:81:9c:7e:4e:4a:40:2c:b3:d9:82:2a: b2:4f:d8:ce:57:19:ff:9a:38:aa:cd:9d:9b:88:0f: ac:c7:3a:47:92:97:b5:44:ab:0f:d9:47:33:ff:1e: 8a:bd:ce:ee:ce:7a:eb:6a:1b:3c:23:b2:90:5a:c7: 43:f1:7e:06:ae:20:c4:54:a8:32:cc:b2:21:90:91: e4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AD:FB:E9:32:C5:8B:3B:A2:86:30:3A:E3:AA:09:93:7C:E7:CF:E1 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:62:24:7a:c2:f2:2e:b8:f9:76:5d:91:dc:56:8b:0c:a8:15: 83:59:49:64:30:de:8e:60:4d:54:a1:15:b5:0e:70:a4:44:b9: 6c:e9:c2:ba:ac:9a:9b:ca:00:f1:50:84:8d:b6:a1:31:de:44: a8:42:46:bb:0f:1b:cb:0b:58:35:ef:33:f9:f1:4e:02:a5:d0: 7b:d0:bd:c9:56:8d:04:e1:19:c9:37:4f:e9:7f:30:e0:34:6b: e7:08:f4:40:08:e8:c1:3d:0c:bd:f1:9b:fe:b5:8e:26:5d:4d: 13:e0:75:d1:0a:cb:3e:0a:f1:4b:18:05:95:86:b1:a5:37:58: f7:69:a4:7c:79:b0:f2:0a:a3:5f:cf:af:1a:f5:f4:db:b5:04: 41:6e:6d:6b:9e:e0:b8:c7:75:d0:7f:fd:f5:3d:b0:fa:11:91: d3:e8:92:4a:44:6b:86:52:02:8b:76:09:de:87:3b:63:5a:c2: c8:2c:43:40:67:6b:25:15:5a:e0:1a:94:c5:5d:b6:32:ec:7a: 49:66:93:87:ee:13:b7:a1:f2:60:fb:eb:4e:32:29:47:01:7d: 63:d0:f7:32:9c:3d:d4:37:ac:fe:95:45:93:a4:49:01:2f:27: 92:6f:ee:79:b0:12:02:2e:8f:03:cf:ba:02:2e:38:a8:ad:c8: 15:1d:ee:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTA3MTkwODI4MThaFw0yNTA3MjYwODI4MThaMBgxFjAUBgNV BAMTDTY4N2I1NzIyLTZhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDK9CQOmcbQa2iLa4TDTdMcD1lG2YVphFzeRNHrRNJQ1MNQP35+53/aOeV3+MTS NcYRGZJHSf/gzCX3E0t8bLZK+GhxlxmOQaRfCsk3EZhnvVc8EoEOotvNh85KEy5n wCEbF6ChaF8PBYPx70MVEkNffNXJTyEJnuu/YqeFBNN2rikChabbKwhP2HAHToQY 60nmtGr8VqO4wNWhJg3Z7+QPVXGidDzm2EjDQYJ0GnosdoqaLmbbx7KBnH5OSkAs s9mCKrJP2M5XGf+aOKrNnZuID6zHOkeSl7VEqw/ZRzP/Hoq9zu7OeutqGzwjspBa x0PxfgauIMRUqDLMsiGQkeRRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAa376TLF izuihjA646oJk3znz+EwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJFiJHrC8i64+XZdkdxWiwyoFYNZSWQw3o5gTVShFbUOcKREuWzpwrqs mpvKAPFQhI22oTHeRKhCRrsPG8sLWDXvM/nxTgKl0HvQvclWjQThGck3T+l/MOA0 a+cI9EAI6ME9DL3xm/61jiZdTRPgddEKyz4K8UsYBZWGsaU3WPdppHx5sPIKo1/P rxr19Nu1BEFubWue4LjHddB//fU9sPoRkdPokkpEa4ZSAot2Cd6HO2NawsgsQ0Bn ayUVWuAalMVdtjLseklmk4fuE7eh8mD7604yKUcBfWPQ9zKcPdQ3rP6VRZOkSQEv J5Jv7nmwEgIujwPPugIuOKityBUd7pk= -----END CERTIFICATE-----Generated at Sun Jul 20 11:34:11 2025 by rpki-client