$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft File: dE87SIpTzJP_qdl19F0f9emsipw.mft (raw, json) Hash identifier: ozDcLN2Ro+PaflA7/34WI3Lp8ccXlISiTLbBBGmNab0= Subject key identifier: CA:49:77:7E:B2:77:5E:DE:50:DA:92:66:AD:BC:36:83:10:0C:00:00 Authority key identifier: 74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C Certificate issuer: /CN=A91CC0C9/serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:34:56 +0000 Manifest this update: Sat 09 Aug 2025 08:34:56 +0000 Manifest next update: Sat 16 Aug 2025 08:34:55 +0000 Files and hashes: 1: dE87SIpTzJP_qdl19F0f9emsipw.crl (hash: c2zbj7ezZcmnpWg86lZBU9tSJLfLmJNZoy71+vc3cYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=744F3B488A53CC93FFA9D975F45D1FF5E9AC8A9C Validity Not Before: Aug 9 08:34:56 2025 GMT Not After : Aug 16 08:34:55 2025 GMT Subject: CN=68970830-45c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fb:bf:9d:a9:0f:d1:0a:f0:ba:73:47:2e:d3: 9e:62:d2:72:6f:bc:16:89:b8:b9:01:53:d5:29:46: 13:ff:85:33:ec:97:e7:d0:53:ca:70:31:1b:7a:f0: cf:80:b7:c6:87:00:fe:ad:8d:0c:81:58:22:0c:7b: 20:11:39:66:7d:f9:d4:0b:89:3f:65:73:f1:8a:54: 32:b6:ba:41:b3:7b:34:05:77:0d:c4:ae:98:87:cf: 68:7f:60:c2:e8:6f:a7:7b:23:36:de:d5:24:11:63: ed:fe:54:c0:15:1f:a7:2f:f4:0b:21:66:98:21:fb: 25:ea:ed:36:8e:8c:73:cd:a1:71:4f:95:a1:59:58: 8f:e6:ea:b2:80:d2:bd:b8:ee:08:5d:56:a9:eb:03: e2:87:45:0b:b3:d8:51:3d:78:27:a5:7d:9b:e1:89: 2a:64:d2:35:75:26:14:3b:86:13:76:5b:0d:79:7e: f9:47:e5:8c:17:37:54:8d:97:d8:a8:03:87:e8:32: 11:2d:85:f6:13:40:e0:48:9d:78:8b:a7:31:f5:e9: 29:76:4d:77:95:e7:fd:d2:db:aa:2e:c6:19:47:e6: d8:1c:91:b4:1c:5f:c7:b1:d4:97:a2:c1:ea:60:f9: 05:3c:09:8f:73:f4:91:05:d4:4f:9c:b8:92:85:28: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:49:77:7E:B2:77:5E:DE:50:DA:92:66:AD:BC:36:83:10:0C:00:00 X509v3 Authority Key Identifier: keyid:74:4F:3B:48:8A:53:CC:93:FF:A9:D9:75:F4:5D:1F:F5:E9:AC:8A:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dE87SIpTzJP_qdl19F0f9emsipw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/BB2723765FB411F08203447DC4F9AE02/dE87SIpTzJP_qdl19F0f9emsipw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:12:0c:2f:df:1a:63:97:59:e5:3c:4b:ef:5b:95:ab:2c:6c: f0:35:87:c3:c2:4f:e4:78:01:38:96:eb:96:87:5d:a6:af:7e: 2e:38:be:a7:7e:9e:47:87:c1:12:18:45:75:eb:35:63:2d:15: 19:ce:78:a7:f4:f6:3a:2e:4e:df:e2:3f:80:5d:d4:c2:33:6f: cb:49:26:a3:5c:b4:bd:41:b9:f6:60:6b:33:a8:b0:8e:94:db: 24:8a:99:6c:58:99:47:51:a6:c5:e8:2b:1d:91:0e:31:95:b3: 8b:e5:20:94:65:51:b1:31:81:93:5c:ba:3e:de:a4:cc:c2:31: c8:41:c4:e8:41:1d:2b:3b:93:99:d7:93:17:82:98:2b:a4:5d: 33:44:d6:40:e0:8e:19:8d:64:5f:ab:47:64:65:af:6f:04:f5: 3f:81:f7:5b:8e:79:3e:dc:ca:f0:13:de:88:85:1d:b1:2f:3b: 5f:b8:c9:9c:d6:f8:37:61:64:66:c0:1a:88:64:4f:37:b5:76: 73:a0:f2:a4:98:56:41:b9:61:35:ac:34:f0:29:98:0a:b6:4a: 9a:5d:de:39:26:57:93:0d:dd:6a:ab:26:f1:ca:28:51:fd:48: 78:77:ab:4c:c4:43:d7:0b:89:a9:06:80:98:16:08:d2:9d:67: 48:62:4c:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNzQ0RjNCNDg4QTUzQ0M5M0ZGQTlEOTc1RjQ1RDFGRjVF OUFDOEE5QzAeFw0yNTA4MDkwODM0NTZaFw0yNTA4MTYwODM0NTVaMBgxFjAUBgNV BAMTDTY4OTcwODMwLTQ1YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9+7+dqQ/RCvC6c0cu055i0nJvvBaJuLkBU9UpRhP/hTPsl+fQU8pwMRt68M+A t8aHAP6tjQyBWCIMeyAROWZ9+dQLiT9lc/GKVDK2ukGzezQFdw3ErpiHz2h/YMLo b6d7Izbe1SQRY+3+VMAVH6cv9AshZpgh+yXq7TaOjHPNoXFPlaFZWI/m6rKA0r24 7ghdVqnrA+KHRQuz2FE9eCelfZvhiSpk0jV1JhQ7hhN2Ww15fvlH5YwXN1SNl9io A4foMhEthfYTQOBInXiLpzH16Sl2TXeV5/3S26ouxhlH5tgckbQcX8ex1Jeiwepg +QU8CY9z9JEF1E+cuJKFKJRLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUykl3frJ3 Xt5Q2pJmrbw2gxAMAAAwHwYDVR0jBBgwFoAUdE87SIpTzJP/qdl19F0f9emsipww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0JCMjcyMzc2NUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQX3FkbDE5RjBmOWVtc2lw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZEU4N1NJcFR6SlBfcWRsMTlGMGY5ZW1zaXB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0JCMjcyMzc2NUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL2RFODdTSXBUekpQ X3FkbDE5RjBmOWVtc2lwdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGQSDC/fGmOXWeU8S+9blassbPA1h8PCT+R4ATiW65aHXaavfi44vqd+ nkeHwRIYRXXrNWMtFRnOeKf09jouTt/iP4Bd1MIzb8tJJqNctL1BufZgazOosI6U 2ySKmWxYmUdRpsXoKx2RDjGVs4vlIJRlUbExgZNcuj7epMzCMchBxOhBHSs7k5nX kxeCmCukXTNE1kDgjhmNZF+rR2Rlr28E9T+B91uOeT7cyvAT3oiFHbEvO1+4yZzW +DdhZGbAGohkTze1dnOg8qSYVkG5YTWsNPApmAq2Sppd3jkmV5MN3WqrJvHKKFH9 SHh3q0zEQ9cLiakGgJgWCNKdZ0hiTD0= -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:38 2025 by rpki-client