$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: 95d5QAR4g27sjhxosAuLQDScf42KV4beKb//wciMWVk= Subject key identifier: C2:31:CD:C1:5D:C1:55:89:FE:8F:E2:C8:03:A8:A3:D3:50:2B:05:84 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 3C Signing time: Mon 03 Nov 2025 07:29:42 +0000 Manifest this update: Mon 03 Nov 2025 07:29:42 +0000 Manifest next update: Mon 10 Nov 2025 07:29:42 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: x3nAHCKTr4A1X+LQdZ1wAABlbVBgQLsFKljKU+Or0s0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Nov 3 07:29:42 2025 GMT Not After : Nov 10 07:29:42 2025 GMT Subject: CN=690859e6-24ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0e:3e:a7:dd:36:9a:78:b5:ec:c8:52:4b:45: 18:42:46:13:54:7e:b8:6b:8a:cb:77:f1:46:7d:ae: 13:5f:24:de:ed:99:fb:43:01:dd:3e:e9:f7:bd:fc: 4d:30:23:72:39:22:59:d7:a9:4a:45:36:7b:c9:c3: b7:58:c0:b6:e4:f3:d8:90:ba:b7:59:a8:f2:0d:1c: f1:73:4e:03:6a:8e:c4:ec:59:ef:7b:0d:dd:fb:42: d7:92:fb:85:ee:6b:35:1c:1d:be:af:5b:7f:42:0f: 0a:7b:1b:40:dc:a0:b9:8f:1b:40:31:83:56:b2:53: 87:a5:8f:ac:a5:c4:7d:0a:84:96:91:ba:f8:25:ea: 23:4a:d0:7f:fc:4d:08:79:3a:b0:c2:12:04:38:ba: d8:bb:33:b9:ad:b9:4d:64:3e:12:85:c4:07:c6:c7: ab:85:f3:15:32:2e:a1:5d:70:fd:1a:9a:19:5c:d0: eb:b3:be:11:42:29:5f:02:01:28:49:c4:72:d4:7d: 8a:8b:8d:1f:45:6b:95:83:85:75:5b:0e:b1:e4:9f: a5:a1:3c:98:a7:ed:64:aa:90:45:b2:9e:01:94:aa: 2d:19:29:c0:dd:fa:d9:af:5e:52:a7:9a:af:fe:f6: e3:dd:99:69:82:af:c3:71:94:25:c3:e2:41:48:52: 01:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:31:CD:C1:5D:C1:55:89:FE:8F:E2:C8:03:A8:A3:D3:50:2B:05:84 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:82:ca:67:25:75:f0:24:50:04:e4:08:81:1a:4b:c9:b0:67: 4a:9a:4d:92:cb:f3:47:0b:e3:68:5d:bd:b7:9e:7c:57:a8:54: 8e:5f:33:c3:90:fb:cc:66:ea:19:9b:29:c1:da:88:c8:10:3b: a8:1a:55:30:34:3b:8e:15:17:11:81:62:21:3e:4d:3b:35:3b: d7:be:82:41:f3:96:b5:72:07:aa:c5:75:9a:59:be:81:ca:45: e2:5c:45:53:30:31:9b:a9:0f:90:f0:d5:9f:98:bb:b6:a0:7b: bb:cd:db:f6:94:fe:56:3e:6b:67:3a:5c:c1:a0:88:d2:97:81: 1e:cf:3a:24:1b:9e:79:60:5f:91:1e:80:eb:75:c5:33:4e:40: b6:1d:52:cb:0f:50:80:b1:3b:67:17:d1:58:23:c5:a5:a2:ec: 9c:47:b4:39:c5:02:7e:b0:33:1a:60:9a:c9:6b:0a:5d:0b:13: 9e:02:65:22:d9:65:18:84:38:59:d8:db:8a:b3:6e:7d:08:3d: eb:c4:39:35:ab:9c:f3:5b:25:69:09:dd:78:b6:ff:cb:b7:9d: a4:e8:44:5a:8e:ff:88:d9:2e:9b:29:46:a6:28:ea:e1:a0:35: c2:f7:c4:d0:1f:52:6b:50:7e:69:5a:df:db:5e:0c:ae:3c:94: 2d:9c:2e:04 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTExMDMwNzI5NDJaFw0yNTExMTAwNzI5NDJaMBgxFjAUBgNV BAMTDTY5MDg1OWU2LTI0ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbDj6n3TaaeLXsyFJLRRhCRhNUfrhrist38UZ9rhNfJN7tmftDAd0+6fe9/E0w I3I5IlnXqUpFNnvJw7dYwLbk89iQurdZqPINHPFzTgNqjsTsWe97Dd37QteS+4Xu azUcHb6vW39CDwp7G0DcoLmPG0Axg1ayU4elj6ylxH0KhJaRuvgl6iNK0H/8TQh5 OrDCEgQ4uti7M7mtuU1kPhKFxAfGx6uF8xUyLqFdcP0amhlc0OuzvhFCKV8CAShJ xHLUfYqLjR9Fa5WDhXVbDrHkn6WhPJin7WSqkEWyngGUqi0ZKcDd+tmvXlKnmq/+ 9uPdmWmCr8NxlCXD4kFIUgENAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwjHNwV3B VYn+j+LIA6ij01ArBYQwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIiCymcldfAkUATkCIEaS8mwZ0qaTZLL80cL42hdvbeefFeoVI5fM8OQ +8xm6hmbKcHaiMgQO6gaVTA0O44VFxGBYiE+TTs1O9e+gkHzlrVyB6rFdZpZvoHK ReJcRVMwMZupD5Dw1Z+Yu7age7vN2/aU/lY+a2c6XMGgiNKXgR7POiQbnnlgX5Ee gOt1xTNOQLYdUssPUICxO2cX0VgjxaWi7JxHtDnFAn6wMxpgmslrCl0LE54CZSLZ ZRiEOFnY24qzbn0IPevEOTWrnPNbJWkJ3Xi2/8u3naToRFqO/4jZLpspRqYo6uGg NcL3xNAfUmtQfmla39teDK48lC2cLgQ= -----END CERTIFICATE-----Generated at Wed Nov 5 04:47:19 2025 by rpki-client