$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: E+g+QJXKg3Crr8Lo83X5y2Qd6fgcOTIqCTq5BwMHzk0= Subject key identifier: 31:D2:B5:BE:3D:3F:0B:46:C8:D0:6E:CB:92:F4:7A:40:3E:2B:DA:D0 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 35 Signing time: Sun 19 Oct 2025 11:04:50 +0000 Manifest this update: Sun 19 Oct 2025 11:04:50 +0000 Manifest next update: Sun 26 Oct 2025 11:04:50 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: 34wS6rqtuit2/2KVg5e87sTL2leGlQniYHzR3HqTUzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Oct 19 11:04:50 2025 GMT Not After : Oct 26 11:04:50 2025 GMT Subject: CN=68f4c5d2-136b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:9a:59:62:e7:4a:63:6f:d0:aa:f7:c4:d7: 6a:c1:7e:6c:fa:d9:df:af:75:21:f3:ae:c7:b7:e9: 21:87:21:0d:77:44:9a:4b:26:f0:90:82:45:01:ca: 1d:a9:82:cc:49:65:50:0f:0b:3e:b4:30:00:5f:68: ed:91:30:8d:7d:bc:e0:a7:63:2a:1c:fe:53:fa:34: 8b:ac:a0:7b:a7:5c:df:c3:e7:44:22:2d:7b:92:19: 95:c8:71:b9:00:38:22:7a:e1:b2:c3:23:46:28:93: 13:7e:63:25:96:a8:6e:bf:39:b3:50:0b:1c:61:90: 40:fa:41:72:83:e8:f2:9e:ca:78:00:1e:be:e9:96: 4e:83:8d:47:3e:70:57:79:d5:c8:b1:c8:2e:57:b9: bc:cb:75:66:b9:b9:6a:7d:a6:1f:f2:90:a8:55:0c: ed:1f:6e:03:c3:a8:93:d5:bf:15:0f:13:36:94:1b: 59:22:f0:fd:91:88:6d:44:03:a1:f7:9c:6e:6f:1f: c5:be:78:dc:7b:24:14:b3:ba:6e:68:54:0e:da:c4: 8c:ae:e5:42:a3:ee:fe:91:6c:48:fc:87:01:40:c9: c2:d7:3c:4f:3e:fa:b1:94:eb:16:05:e5:89:dc:bf: 40:ca:f0:7a:ad:b7:8d:31:a8:b2:05:22:df:e5:bd: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:B5:BE:3D:3F:0B:46:C8:D0:6E:CB:92:F4:7A:40:3E:2B:DA:D0 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:06:9c:36:60:df:08:ae:09:98:02:1d:56:dd:1a:78:38:f2: ca:8b:cc:0c:c3:68:73:9f:30:bb:5b:2a:52:15:84:14:c5:0d: 9b:69:b5:18:93:e7:c6:c9:b9:37:7d:25:9e:5d:e7:f0:bd:1a: bf:d5:7e:e5:00:9a:a8:63:69:43:29:9c:8a:3b:06:e8:2f:ed: cc:a3:9e:29:bc:af:39:13:42:16:a1:0e:c2:66:3a:e5:2a:80: c6:d1:e3:ba:c2:6d:58:f9:07:c1:78:c2:b5:b8:c4:b5:fc:b5: f5:cd:b8:19:a9:17:48:0f:81:8c:c5:9d:b7:69:7f:02:a5:77: 6a:b3:0a:57:2c:53:83:2d:c5:b6:87:81:66:58:e4:02:aa:b8: 1b:bf:a6:b4:72:d0:11:39:75:79:b2:f9:ee:92:cf:c8:ac:cd: a4:9d:7e:7d:19:2b:7c:d3:13:12:9d:9a:39:6a:38:01:3d:e1: 8e:ce:f3:dc:1c:c0:2c:18:51:a4:a8:fd:87:20:9d:6a:25:dc: 50:ea:8e:a9:37:c1:6b:0b:88:14:9f:5e:50:c3:a6:5f:fd:6c: 85:24:9b:40:be:cf:36:71:ed:0b:0d:81:b4:ef:0e:a0:2d:83: 40:24:19:6a:7b:52:a8:5f:6f:f9:40:5f:8f:c6:cd:4c:09:1c: c9:4a:3d:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTEwMTkxMTA0NTBaFw0yNTEwMjYxMTA0NTBaMBgxFjAUBgNV BAMTDTY4ZjRjNWQyLTEzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJvZpZYudKY2/QqvfE12rBfmz62d+vdSHzrse36SGHIQ13RJpLJvCQgkUByh2p gsxJZVAPCz60MABfaO2RMI19vOCnYyoc/lP6NIusoHunXN/D50QiLXuSGZXIcbkA OCJ64bLDI0YokxN+YyWWqG6/ObNQCxxhkED6QXKD6PKeyngAHr7plk6DjUc+cFd5 1cixyC5XubzLdWa5uWp9ph/ykKhVDO0fbgPDqJPVvxUPEzaUG1ki8P2RiG1EA6H3 nG5vH8W+eNx7JBSzum5oVA7axIyu5UKj7v6RbEj8hwFAycLXPE8++rGU6xYF5Ync v0DK8Hqtt40xqLIFIt/lvcerAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMdK1vj0/ C0bI0G7LkvR6QD4r2tAwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJEGnDZg3wiuCZgCHVbdGng48sqLzAzDaHOfMLtbKlIVhBTFDZtptRiT 58bJuTd9JZ5d5/C9Gr/VfuUAmqhjaUMpnIo7Bugv7cyjnim8rzkTQhahDsJmOuUq gMbR47rCbVj5B8F4wrW4xLX8tfXNuBmpF0gPgYzFnbdpfwKld2qzClcsU4MtxbaH gWZY5AKquBu/prRy0BE5dXmy+e6Sz8iszaSdfn0ZK3zTExKdmjlqOAE94Y7O89wc wCwYUaSo/YcgnWol3FDqjqk3wWsLiBSfXlDDpl/9bIUkm0C+zzZx7QsNgbTvDqAt g0AkGWp7Uqhfb/lAX4/GzUwJHMlKPf8= -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:51 2025 by rpki-client