$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json) Hash identifier: jPG9MXsc85CH2vc9X0Et/Beuka+dx7MNzgoemGOEPww= Subject key identifier: 6C:99:75:95:20:4E:4C:EB:21:C1:CC:92:12:27:11:78:28:AD:85:D5 Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft Manifest number: D9 Signing time: Sun 15 Jun 2025 04:41:38 +0000 Manifest this update: Sun 15 Jun 2025 04:41:38 +0000 Manifest next update: Sun 22 Jun 2025 04:41:37 +0000 Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: gQv1kbvB/7J6kLXsob9LWlccoyJje18Gh4wB5LlHbQ8=) 2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: KGzLhO+/ocV7ZlwOEymZzMf0KbOdaZwWpGWGZFRolBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E Validity Not Before: Jun 15 04:41:38 2025 GMT Not After : Jun 22 04:41:37 2025 GMT Subject: CN=684e4f02-801e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e4:52:3b:5d:25:64:14:5a:09:db:e4:12:02: d8:9f:a8:3d:21:82:ac:cf:37:f2:31:0e:35:ac:10: e5:7a:07:7c:3f:e2:8b:9a:51:ca:f4:ce:5a:3a:d2: 42:f3:11:cf:0c:78:bf:ed:27:8f:be:dd:a3:b8:c1: 25:32:d5:ac:79:43:8a:b2:11:26:2b:ca:5e:76:dd: 94:5e:c0:fe:c1:76:fd:19:95:bb:f3:c2:a0:3b:5b: 3d:b2:23:39:33:39:81:a2:6f:56:07:43:b8:f2:93: dd:bb:b6:59:01:f3:ec:85:61:af:3b:f1:8a:72:d9: ec:81:a0:2a:72:38:7f:0c:8a:81:bb:79:8b:22:f6: d9:04:77:96:8c:0a:52:33:3a:ec:76:b1:ef:f7:a2: fc:50:d6:88:0c:c9:4f:d7:4e:0f:a0:bc:a9:ae:3b: 3c:12:ec:38:14:0b:df:bd:fe:7a:ea:5c:35:26:f9: 72:e2:9c:80:20:19:85:09:4b:2d:24:cb:78:96:6e: fe:bf:9c:94:9e:c2:8b:25:b8:55:86:bd:1a:32:1a: 1c:1e:fd:73:ed:d9:1c:1d:c6:42:6a:64:66:93:18: f3:99:37:0f:23:39:56:f5:d7:e5:8f:60:37:0b:7f: b3:1a:bb:5f:9d:3e:62:23:31:95:e2:ba:74:d9:1c: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:99:75:95:20:4E:4C:EB:21:C1:CC:92:12:27:11:78:28:AD:85:D5 X509v3 Authority Key Identifier: keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:7d:bb:30:8c:d5:81:e5:34:1a:bf:12:d5:33:d9:98:e5:81: 5b:8b:b3:ae:05:2d:52:3b:6c:68:ca:66:b4:00:61:ce:c8:16: 02:7e:49:1c:9f:bb:aa:1c:de:aa:f2:92:bc:d0:75:d0:9b:af: 1f:44:48:fa:fc:00:5a:8d:5a:fd:eb:c1:e0:1a:ad:fe:c8:73: b5:eb:ad:52:2e:b4:48:ed:9c:85:28:4c:fe:ae:e3:06:01:df: a9:95:1a:2c:3b:e4:a1:81:b4:86:ce:2e:ba:ed:d4:dc:24:4f: 83:78:f9:f0:3c:77:54:4d:72:b2:cf:ed:9e:30:8a:ec:d3:03: fd:7f:db:24:a7:0c:63:71:ec:41:38:bd:24:a5:d7:b9:a4:6a: ce:64:82:d0:e0:e7:eb:f7:ae:50:c4:04:30:5d:5b:71:62:bc: 7c:87:36:65:8e:70:84:4e:fc:79:0e:f6:3c:d8:6a:63:ed:39: 60:a5:b4:61:96:80:3b:72:39:32:ba:b4:28:0c:13:6f:74:60: 56:47:77:d9:e4:cc:a7:22:ba:ab:95:a7:ea:ea:37:8f:43:ac: 89:88:75:e3:59:02:27:c0:c8:11:93:9c:b0:a7:fe:b3:ed:62: 9f:72:60:ec:a3:e7:9f:97:15:dc:1a:e1:f9:f3:18:52:6d:e0: 82:92:fd:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4RTIxMTAvBgNVBAUTKDBFREI0QTM3MjcwQkY0OTQxODRBNDZFNjAyMzE0OEZF RDZFMzNBMUUwHhcNMjUwNjE1MDQ0MTM4WhcNMjUwNjIyMDQ0MTM3WjAYMRYwFAYD VQQDEw02ODRlNGYwMi04MDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7uRSO10lZBRaCdvkEgLYn6g9IYKszzfyMQ41rBDlegd8P+KLmlHK9M5aOtJC 8xHPDHi/7SePvt2juMElMtWseUOKshEmK8pedt2UXsD+wXb9GZW788KgO1s9siM5 MzmBom9WB0O48pPdu7ZZAfPshWGvO/GKctnsgaAqcjh/DIqBu3mLIvbZBHeWjApS MzrsdrHv96L8UNaIDMlP104PoLyprjs8Euw4FAvfvf566lw1Jvly4pyAIBmFCUst JMt4lm7+v5yUnsKLJbhVhr0aMhocHv1z7dkcHcZCamRmkxjzmTcPIzlW9dflj2A3 C3+zGrtfnT5iIzGV4rp02Rz1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGyZdZUg TkzrIcHMkhInEXgorYXVMB8GA1UdIwQYMBaAFA7bSjcnC/SUGEpG5gIxSP7W4zoe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhFMi9BRjMyMDgzRUZD NjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlKUVlTa2JtQWpGSV90YmpP aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R0dEtOeWNMOUpRWVNrYm1BakZJX3Riak9oNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhFMi9BRjMyMDgzRUZDNjgxMUVFOTk2MURENURDNEY5QUUwMi9EdHRLTnljTDlK UVlTa2JtQWpGSV90YmpPaDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApfbswjNWB5TQavxLVM9mY5YFbi7OuBS1SO2xoyma0AGHOyBYCfkkc n7uqHN6q8pK80HXQm68fREj6/ABajVr968HgGq3+yHO1661SLrRI7ZyFKEz+ruMG Ad+plRosO+ShgbSGzi667dTcJE+DePnwPHdUTXKyz+2eMIrs0wP9f9skpwxjcexB OL0kpde5pGrOZILQ4Ofr965QxAQwXVtxYrx8hzZljnCETvx5DvY82Gpj7TlgpbRh loA7cjkyurQoDBNvdGBWR3fZ5MynIrqrlafq6jePQ6yJiHXjWQInwMgRk5ywp/6z 7WKfcmDso+eflxXcGuH58xhSbeCCkv2U -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:59 2025 by rpki-client