$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: iXGpPUSJLci2syg/l1ktIwwrUJ7VLnKxYgRSqiIEGWA= Subject key identifier: 29:89:F8:61:67:E2:4D:70:DD:AC:BF:B9:42:E3:24:59:57:F5:40:25 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 1F Signing time: Fri 05 Sep 2025 08:23:44 +0000 Manifest this update: Fri 05 Sep 2025 08:23:43 +0000 Manifest next update: Fri 12 Sep 2025 08:23:43 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: QM5I/zmDdD0/8ikkCQD5/unDI98HitolZILcigXExuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Sep 5 08:23:43 2025 GMT Not After : Sep 12 08:23:43 2025 GMT Subject: CN=68ba9e0f-650e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:20:d8:c6:df:ad:20:78:51:b8:dc:0c:dc: 54:e8:72:c6:0a:ca:49:39:56:f5:fc:04:fd:db:8f: 33:2a:2a:06:7a:2b:e7:72:d7:9c:99:c3:c4:9a:8a: ef:20:73:34:7b:ca:32:dd:ca:98:9f:38:d4:81:88: b5:ab:83:21:ce:17:0b:33:f0:da:8f:32:f2:ba:07: 92:b9:90:d1:c3:8c:17:ad:e2:aa:95:13:0a:3e:94: e9:d0:0a:4a:72:03:c8:3f:9d:4e:f3:71:02:07:aa: c0:6c:11:3d:10:68:4b:df:f4:f4:68:b6:bc:6d:ce: ee:3f:c4:c6:c8:5d:4b:32:33:31:6a:14:d5:d1:46: 20:1e:1c:bd:ae:82:b4:59:50:70:70:1e:c3:df:fd: 26:3c:22:60:5b:e2:57:5e:a3:f3:7d:f0:44:96:e4: 51:91:f2:e3:dd:6c:5a:42:e6:1d:94:ff:d0:61:fd: 5b:78:65:83:71:62:89:4a:a5:f8:eb:75:6d:b1:2f: fb:d1:ad:2b:9d:d8:41:5f:55:8d:03:a1:59:7a:c3: 77:ea:e7:13:df:b1:c0:9f:b6:e4:62:c5:95:41:55: 67:a4:8c:35:6c:e8:6d:1e:f7:ea:e7:1a:ce:66:f8: 83:8d:d2:a5:39:9d:16:fa:e4:7a:4e:47:b5:90:b6: e0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:89:F8:61:67:E2:4D:70:DD:AC:BF:B9:42:E3:24:59:57:F5:40:25 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:a0:e4:c2:87:07:c6:74:9f:48:6e:bd:29:25:e3:6f:84:d6: 7d:c2:8d:c5:00:f6:3e:65:c4:cf:be:0c:a4:a7:1d:7c:82:53: 3a:d8:60:69:a8:33:8a:63:af:cd:3d:4d:e3:91:bf:04:b9:25: 7b:44:d1:81:df:84:b5:23:99:19:1a:3f:6e:20:ca:c7:44:38: 5f:a0:3d:ea:4a:a3:0d:2a:f0:80:a6:1b:e6:78:06:9f:05:74: 8b:ef:d8:4b:ed:d4:6c:3b:2b:85:e6:9d:27:67:e4:d4:b8:55: 50:7a:d1:2b:be:15:26:41:a3:da:20:4c:90:4e:38:8c:cc:81: 3a:f6:09:98:d4:ec:95:47:6d:90:e6:d6:4a:ef:9b:f3:26:57: 25:f8:a6:8b:1f:53:36:87:c2:71:eb:35:ca:73:dc:a4:c1:9a: 2b:b2:8c:7a:db:0d:c7:6b:ba:07:da:1b:10:24:05:51:dd:3e: ff:a2:2c:d7:bb:6f:0a:91:3e:48:d1:ec:7d:3e:72:48:25:19: 7c:61:31:b5:fb:dd:2d:ce:f3:a6:5b:73:b0:3c:cf:d4:73:58: d3:c4:b0:eb:c6:af:7c:39:7b:40:6c:a1:9e:7e:ad:e5:52:98: c8:97:7f:14:20:15:62:fe:00:9d:a3:d4:7b:fe:fb:c5:18:47: 49:8e:83:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTA5MDUwODIzNDNaFw0yNTA5MTIwODIzNDNaMBgxFjAUBgNV BAMTDTY4YmE5ZTBmLTY1MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7IyDYxt+tIHhRuNwM3FTocsYKykk5VvX8BP3bjzMqKgZ6K+dy15yZw8Saiu8g czR7yjLdypifONSBiLWrgyHOFwsz8NqPMvK6B5K5kNHDjBet4qqVEwo+lOnQCkpy A8g/nU7zcQIHqsBsET0QaEvf9PRotrxtzu4/xMbIXUsyMzFqFNXRRiAeHL2ugrRZ UHBwHsPf/SY8ImBb4ldeo/N98ESW5FGR8uPdbFpC5h2U/9Bh/Vt4ZYNxYolKpfjr dW2xL/vRrSud2EFfVY0DoVl6w3fq5xPfscCftuRixZVBVWekjDVs6G0e9+rnGs5m +ION0qU5nRb65HpOR7WQtuAtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKYn4YWfi TXDdrL+5QuMkWVf1QCUwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJGg5MKHB8Z0n0huvSkl42+E1n3CjcUA9j5lxM++DKSnHXyCUzrYYGmo M4pjr809TeORvwS5JXtE0YHfhLUjmRkaP24gysdEOF+gPepKow0q8ICmG+Z4Bp8F dIvv2Evt1Gw7K4XmnSdn5NS4VVB60Su+FSZBo9ogTJBOOIzMgTr2CZjU7JVHbZDm 1krvm/MmVyX4posfUzaHwnHrNcpz3KTBmiuyjHrbDcdrugfaGxAkBVHdPv+iLNe7 bwqRPkjR7H0+ckglGXxhMbX73S3O86Zbc7A8z9RzWNPEsOvGr3w5e0BsoZ5+reVS mMiXfxQgFWL+AJ2j1Hv++8UYR0mOgzc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:07:31 2025 by rpki-client