$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json) Hash identifier: QSW4b4gsbcvNgxJDCnje68aKNadlLJ+xPxGFtnjv7SQ= Subject key identifier: 43:6B:AF:7B:CC:90:38:0B:A0:4E:3F:FA:E4:F7:99:82:77:61:DC:49 Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Certificate serial: 0582 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft Manifest number: 057D Signing time: Fri 30 May 2025 23:30:22 +0000 Manifest this update: Fri 30 May 2025 23:30:21 +0000 Manifest next update: Fri 06 Jun 2025 23:30:21 +0000 Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: 3+Lz0rF0Ww53lwk390oJHaAVegOHAt0vIOilod6wsK8=) 2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: pYihusS4UyoIsK9PCzKPk27dDaihl6ZYHFqiCUhf6Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1410 (0x582) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB Validity Not Before: May 30 23:30:21 2025 GMT Not After : Jun 6 23:30:21 2025 GMT Subject: CN=683a3f8d-ff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d7:64:d1:57:cb:0b:3f:98:7a:fc:c8:ca:e8: b1:35:d0:63:0c:6c:05:87:46:5e:c3:5d:fd:67:af: 41:5f:16:b8:4a:06:0d:ee:c7:2c:dd:1f:6c:a8:a2: e0:e7:cb:a4:9d:53:1f:e7:7b:ac:0a:6e:9e:ba:d9: 3b:2d:e7:f1:4e:e6:0c:fc:b3:1f:66:23:db:05:c6: c0:d0:1b:c0:d0:f5:1c:76:75:ea:c9:59:6a:e1:a4: e7:7b:71:41:e2:aa:d2:fb:f3:8e:36:28:94:f7:9c: 17:dc:bc:58:8e:c6:d8:71:2a:1a:d9:71:ba:3c:3e: ef:42:89:2b:bb:3a:cf:fd:88:44:43:62:6f:1e:43: 39:f7:4d:ee:c0:9e:c5:3d:3e:bc:df:1c:2d:74:81: 79:d9:84:72:b1:1d:7b:ee:e3:64:a0:5d:b1:ec:e3: 04:27:19:94:b3:ae:9b:c3:8b:58:cc:d6:94:6c:c5: 16:a5:9d:d8:05:bf:c3:d6:91:5f:2e:45:9b:bf:b7: c2:ed:7a:7c:0c:80:68:ea:fc:ba:c4:b5:22:5f:79: cb:f4:99:4e:92:20:5e:41:d3:b7:73:df:70:be:a8: 19:8d:3a:ef:28:6d:26:c5:fe:4a:44:55:92:c7:a0: b1:05:3a:c1:a5:59:51:4c:73:2d:39:8a:36:e0:32: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6B:AF:7B:CC:90:38:0B:A0:4E:3F:FA:E4:F7:99:82:77:61:DC:49 X509v3 Authority Key Identifier: keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:18:a5:76:09:2c:92:05:0a:0a:e8:51:40:95:5f:49:4a:38: 45:a1:b7:58:9d:cc:ce:82:17:5c:e2:3b:d8:16:3f:9c:56:76: c7:44:33:dc:11:52:4d:61:da:56:eb:40:d0:92:01:0e:de:a5: 96:33:bd:e1:eb:b6:11:73:a4:0c:37:5f:3d:7e:e1:0c:5b:36: 80:6f:5d:91:31:99:bb:3d:6e:35:9a:7a:90:7a:c3:7a:c6:12: 5d:d0:b9:b4:58:b5:4c:52:40:a0:d9:88:bb:1c:2a:99:9d:da: d5:98:2e:f5:2b:0d:ef:1f:7e:4e:a2:9e:1b:ed:57:f5:0c:a4: c3:8c:8e:4c:9a:07:c9:ea:53:0c:8a:76:b1:c7:14:61:ba:d0: 7a:32:3c:11:3a:ea:7d:e4:d4:9b:a6:5a:8c:7a:dd:9c:06:71: 62:dc:d7:74:fa:63:0c:8d:78:58:f1:01:7f:1c:d5:f0:51:86: e6:5a:6a:60:13:43:4d:bc:fc:6e:33:19:ba:01:a5:28:43:52: 9d:f9:02:89:90:cb:0c:70:91:6d:d6:01:aa:f5:42:51:c5:1f: 59:bb:fa:26:9d:30:c5:fc:81:ad:a5:69:aa:55:1e:43:d5:79: 0f:36:b8:42:b9:50:38:7c:40:73:51:05:47:18:16:96:51:ce: 9f:bb:e6:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE RUZGMzFCQUIwHhcNMjUwNTMwMjMzMDIxWhcNMjUwNjA2MjMzMDIxWjAYMRYwFAYD VQQDEw02ODNhM2Y4ZC1mZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntdk0VfLCz+YevzIyuixNdBjDGwFh0Zew139Z69BXxa4SgYN7scs3R9sqKLg 58uknVMf53usCm6eutk7LefxTuYM/LMfZiPbBcbA0BvA0PUcdnXqyVlq4aTne3FB 4qrS+/OONiiU95wX3LxYjsbYcSoa2XG6PD7vQokruzrP/YhEQ2JvHkM5903uwJ7F PT683xwtdIF52YRysR177uNkoF2x7OMEJxmUs66bw4tYzNaUbMUWpZ3YBb/D1pFf LkWbv7fC7Xp8DIBo6vy6xLUiX3nL9JlOkiBeQdO3c99wvqgZjTrvKG0mxf5KRFWS x6CxBTrBpVlRTHMtOYo24DKeHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENrr3vM kDgLoE4/+uT3mYJ3YdxJMB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6 Z01DbXZOT09rWWJlX3pHNnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6GKV2CSySBQoK6FFAlV9JSjhFobdYnczOghdc4jvYFj+cVnbHRDPc EVJNYdpW60DQkgEO3qWWM73h67YRc6QMN189fuEMWzaAb12RMZm7PW41mnqQesN6 xhJd0Lm0WLVMUkCg2Yi7HCqZndrVmC71Kw3vH35Oop4b7Vf1DKTDjI5MmgfJ6lMM inaxxxRhutB6MjwROup95NSbplqMet2cBnFi3Nd0+mMMjXhY8QF/HNXwUYbmWmpg E0NNvPxuMxm6AaUoQ1Kd+QKJkMsMcJFt1gGq9UJRxR9Zu/omnTDF/IGtpWmqVR5D 1XkPNrhCuVA4fEBzUQVHGBaWUc6fu+Yi -----END CERTIFICATE-----Generated at Sat May 31 16:50:43 2025 by rpki-client