$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: PnJTfSL8DyeyGp3hDftrh/S6f/YbQFrFJ2FuR9KJ5+Q= Subject key identifier: EF:89:37:D7:24:62:3C:27:E6:44:F3:94:6D:AA:42:A1:C1:57:9F:F3 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:12:33 +0000 Manifest this update: Sat 23 Aug 2025 08:12:32 +0000 Manifest next update: Sat 30 Aug 2025 08:12:32 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: hyNnU1dO4xyY4hGgtH0Uz57fjr3k+FKceLXbKvg37z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Aug 23 08:12:32 2025 GMT Not After : Aug 30 08:12:32 2025 GMT Subject: CN=68a977f0-4c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:44:e2:95:3e:7f:29:d6:fe:12:21:0b:21: 3d:8e:61:ec:e0:d5:9e:ca:9e:cd:d5:e6:34:05:bb: 11:c8:36:cf:e7:ed:64:41:5a:68:69:e9:a4:c6:59: b4:86:cf:99:bb:68:eb:2b:73:53:f4:ab:d2:26:11: a4:b8:a2:18:e5:6b:b7:9b:f1:7f:44:96:28:27:6f: f3:f4:32:8f:dc:72:90:ff:4c:61:5a:eb:af:13:e0: c6:98:04:7a:89:b7:e7:eb:79:d0:c5:c7:19:90:fc: 97:ed:56:7d:23:a8:a8:08:b5:45:d3:bf:6b:2b:db: 7f:ec:7b:89:55:97:56:c9:d7:3c:0d:7f:38:d4:8a: e7:a4:bd:bf:3d:62:3d:20:a1:3b:ec:48:9b:a5:1b: 5f:5c:e9:8d:60:17:75:23:dd:d8:53:82:f8:ea:83: b0:ef:2d:d3:d5:96:0f:41:51:85:66:5c:19:9f:3b: 4a:53:d3:59:03:50:43:48:37:77:15:3f:e4:a0:d5: 76:cf:49:60:e4:cc:6c:7d:e5:3b:b4:2e:a6:c9:27: 8a:1a:c0:1d:ee:f7:7f:07:20:41:07:ca:00:62:21: b0:a7:01:0f:18:ef:79:aa:f0:5a:76:9a:2b:1e:28: b2:c9:5b:3a:1a:dd:b5:3f:7a:9c:e7:d2:16:98:fd: 80:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:89:37:D7:24:62:3C:27:E6:44:F3:94:6D:AA:42:A1:C1:57:9F:F3 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d3:59:5c:f5:44:a3:d6:27:bb:0d:07:9b:e5:0e:89:07:dd: 78:f7:7b:3e:b1:b3:53:c5:fa:50:f2:8c:77:31:a3:1f:d6:1c: 68:d7:e4:c8:4e:30:2b:11:64:f2:13:bf:6a:63:11:aa:ca:14: 5c:b7:5a:4c:eb:ef:82:99:30:65:a4:84:10:ca:0f:d9:67:b6: 2d:cd:21:dc:09:23:8a:95:d0:23:6d:96:a1:58:0e:03:cb:81: c2:99:8e:c7:1e:af:7b:3d:e6:7c:9a:41:38:10:31:71:07:3d: c4:f7:38:f6:06:20:8d:de:04:d5:8d:a4:54:ef:4a:5c:ce:50: 99:8a:af:8a:7f:9c:52:5e:87:77:82:65:ef:53:8b:47:8a:33: e7:28:9a:0f:90:a8:9f:d4:ba:e7:8d:34:c0:f7:66:cb:b3:73: f6:12:e2:a2:6e:32:2d:8c:a0:24:2a:37:28:38:e5:77:2d:34: 0c:59:d6:b3:6f:d4:15:be:1c:57:2d:e9:9b:f4:39:2f:bf:f5: 1f:4f:01:44:15:7f:05:5c:f8:3c:0e:04:45:b4:54:73:9b:de: 43:55:59:cc:c8:1b:0f:f8:20:70:93:0a:02:52:0c:7d:b9:a9: 61:fb:91:d6:af:77:b7:9a:5a:5a:69:ca:b6:96:9e:5d:2e:b5: e7:d9:28:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTA4MjMwODEyMzJaFw0yNTA4MzAwODEyMzJaMBgxFjAUBgNV BAMTDTY4YTk3N2YwLTRjNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf0ETilT5/Kdb+EiELIT2OYezg1Z7Kns3V5jQFuxHINs/n7WRBWmhp6aTGWbSG z5m7aOsrc1P0q9ImEaS4ohjla7eb8X9Elignb/P0Mo/ccpD/TGFa668T4MaYBHqJ t+fredDFxxmQ/JftVn0jqKgItUXTv2sr23/se4lVl1bJ1zwNfzjUiuekvb89Yj0g oTvsSJulG19c6Y1gF3Uj3dhTgvjqg7DvLdPVlg9BUYVmXBmfO0pT01kDUENIN3cV P+Sg1XbPSWDkzGx95Tu0LqbJJ4oawB3u938HIEEHygBiIbCnAQ8Y73mq8Fp2mise KLLJWzoa3bU/epzn0haY/YCjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU74k31yRi PCfmRPOUbapCocFXn/MwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADnTWVz1RKPWJ7sNB5vlDokH3Xj3ez6xs1PF+lDyjHcxox/WHGjX5MhO MCsRZPITv2pjEarKFFy3Wkzr74KZMGWkhBDKD9lnti3NIdwJI4qV0CNtlqFYDgPL gcKZjscer3s95nyaQTgQMXEHPcT3OPYGII3eBNWNpFTvSlzOUJmKr4p/nFJeh3eC Ze9Ti0eKM+comg+QqJ/UuueNNMD3Zsuzc/YS4qJuMi2MoCQqNyg45XctNAxZ1rNv 1BW+HFct6Zv0OS+/9R9PAUQVfwVc+DwOBEW0VHOb3kNVWczIGw/4IHCTCgJSDH25 qWH7kdavd7eaWlppyraWnl0utefZKBg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:43:56 2025 by rpki-client