$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json) Hash identifier: ew6MVHNp/VJfDJCuY2ivrJ7TeXLdZzlsbPXLqKdR2qI= Subject key identifier: 19:3F:6E:F4:90:6B:E5:34:0D:EE:D3:A0:E5:A3:21:C6:08:0B:CB:BA Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft Manifest number: 0564 Signing time: Sat 12 Apr 2025 23:00:57 +0000 Manifest this update: Sat 12 Apr 2025 23:00:56 +0000 Manifest next update: Sat 19 Apr 2025 23:00:56 +0000 Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: 4WBcjvIEBzptrMHCWgZiUg3xGOhFXmOfIKy5Ui8P3o0=) 2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: RmQ8zbwrgPfWmABubjovTPZFuV0KwF8EcH+Qm23I29E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Validity Not Before: Apr 12 23:00:56 2025 GMT Not After : Apr 19 23:00:56 2025 GMT Subject: CN=67faf0a9-6c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ab:02:c2:93:c5:ca:ea:ee:ba:b9:41:73:48: 09:86:c8:29:09:bb:29:4a:9e:6d:18:26:c8:81:95: 50:62:a7:ae:00:9e:08:6b:45:d9:d8:12:c6:62:36: 52:c4:cd:cd:3a:66:23:e3:54:cb:67:e5:6a:ca:7c: b6:72:d8:00:a4:43:96:ef:e6:35:f3:5e:a7:9d:dc: 69:d0:90:9f:11:1e:ba:46:c4:77:f1:1c:ad:04:e2: 5d:ca:38:14:3b:a2:df:39:76:79:cd:a0:4b:0e:be: 81:64:14:45:53:f4:74:d5:97:de:6c:65:40:be:97: eb:5a:2c:1a:90:5d:7a:e9:9e:fc:31:0b:98:51:30: 07:68:6d:a8:79:91:cf:2f:a9:8d:10:33:0f:45:6a: 10:43:44:7c:f6:93:7e:cb:0b:84:aa:8a:58:83:8d: b1:43:a0:20:8e:82:f4:87:40:2b:fe:1c:4e:67:1f: da:6e:04:1f:e8:bf:3c:0d:b8:09:c5:2d:70:7f:da: 26:61:fb:aa:20:1b:ec:26:cb:c3:4f:59:e8:e1:fa: a3:c7:e7:4a:ae:0d:75:2b:9e:ac:b5:76:db:6e:c0: a8:1d:23:ec:41:18:3c:4a:33:6e:45:cf:2e:6d:2f: 9f:1e:cb:6e:2c:6b:a8:7e:ed:e3:1d:e1:ca:b5:2f: 09:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3F:6E:F4:90:6B:E5:34:0D:EE:D3:A0:E5:A3:21:C6:08:0B:CB:BA X509v3 Authority Key Identifier: keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:eb:54:6b:a4:87:33:14:20:b5:e5:8e:31:ca:01:1b:06:c3: de:ce:1d:f0:4d:a3:85:36:80:9c:ab:21:03:48:86:bd:39:dd: 2c:67:5e:42:67:55:68:35:a8:c3:b0:cc:01:d2:bf:f2:ab:d4: 31:75:9c:ac:ec:17:20:5c:4a:9b:31:ea:08:91:e4:7b:ef:39: 5c:7c:59:55:a9:68:12:0a:43:87:cf:7d:2d:4b:f9:a3:bc:60: 96:d2:16:05:88:05:27:7e:db:6d:e1:d2:09:07:c1:75:54:83: 07:e1:40:23:54:a1:8c:8e:d2:58:36:1f:d2:ab:de:3e:e5:6f: 6b:df:d9:4e:56:09:43:3c:1a:a1:2d:8b:0b:72:a1:d0:be:3e: 88:f6:4d:7b:df:4d:82:65:ab:b9:6e:ab:87:0d:57:a9:f8:11: d4:37:4a:c8:f5:5e:53:ed:82:6b:90:29:d5:dc:31:04:8d:93: 9e:a9:65:30:2e:54:83:08:d0:c8:e0:68:20:1b:b2:c7:63:69: 09:4b:90:98:cc:48:d3:f2:77:6a:5e:0c:34:46:70:5b:04:66: 40:41:86:b6:9f:a1:3f:3d:47:0c:8c:c9:3c:02:83:ca:c6:2e: 7d:80:61:0f:e9:58:19:d3:f3:52:28:7d:be:ec:01:10:a4:5c: 14:31:a8:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE RUZGMzFCQUIwHhcNMjUwNDEyMjMwMDU2WhcNMjUwNDE5MjMwMDU2WjAYMRYwFAYD VQQDEw02N2ZhZjBhOS02YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6sCwpPFyuruurlBc0gJhsgpCbspSp5tGCbIgZVQYqeuAJ4Ia0XZ2BLGYjZS xM3NOmYj41TLZ+Vqyny2ctgApEOW7+Y1816nndxp0JCfER66RsR38RytBOJdyjgU O6LfOXZ5zaBLDr6BZBRFU/R01ZfebGVAvpfrWiwakF166Z78MQuYUTAHaG2oeZHP L6mNEDMPRWoQQ0R89pN+ywuEqopYg42xQ6AgjoL0h0Ar/hxOZx/abgQf6L88DbgJ xS1wf9omYfuqIBvsJsvDT1no4fqjx+dKrg11K56stXbbbsCoHSPsQRg8SjNuRc8u bS+fHstuLGuofu3jHeHKtS8JMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk/bvSQ a+U0De7ToOWjIcYIC8u6MB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6 Z01DbXZOT09rWWJlX3pHNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY61RrpIczFCC15Y4xygEbBsPezh3wTaOFNoCcqyEDSIa9Od0sZ15C Z1VoNajDsMwB0r/yq9QxdZys7BcgXEqbMeoIkeR77zlcfFlVqWgSCkOHz30tS/mj vGCW0hYFiAUnfttt4dIJB8F1VIMH4UAjVKGMjtJYNh/Sq94+5W9r39lOVglDPBqh LYsLcqHQvj6I9k17302CZau5bquHDVep+BHUN0rI9V5T7YJrkCnV3DEEjZOeqWUw LlSDCNDI4GggG7LHY2kJS5CYzEjT8ndqXgw0RnBbBGZAQYa2n6E/PUcMjMk8AoPK xi59gGEP6VgZ0/NSKH2+7AEQpFwUMajH -----END CERTIFICATE-----Generated at Sun Apr 13 04:32:06 2025 by rpki-client