$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: A82H7ckwdeKzMR0SOu/bYH1E/UNqr0Hh4p39evIJ80s= Subject key identifier: 4F:48:C4:75:5B:40:4B:87:57:5C:64:38:96:3A:C6:93:03:2A:A4:39 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 077D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 0777 Signing time: Thu 24 Apr 2025 21:16:32 +0000 Manifest this update: Thu 24 Apr 2025 21:16:32 +0000 Manifest next update: Thu 01 May 2025 21:16:32 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: vnyVzY36kynws0lngKLY7wbg696GsoCZH2SMKE47ehU=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1917 (0x77d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Apr 24 21:16:32 2025 GMT Not After : May 1 21:16:32 2025 GMT Subject: CN=680aaa30-962c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:be:2f:6e:2a:d6:bf:9d:5f:3f:f8:45:3e:9f: bb:e5:79:78:af:9f:ff:6a:58:4a:28:f8:54:58:0a: 5a:76:74:71:40:69:b1:29:99:e0:ea:c1:4d:01:18: 56:1a:ff:2a:5b:5a:e5:a8:94:7b:2f:32:4a:ff:5a: 5a:62:98:59:f8:54:b3:3a:75:6b:98:da:08:94:bd: 21:f9:0d:43:d1:ee:78:6d:da:be:14:a6:28:28:cc: 39:2e:d7:b5:04:d9:53:0a:27:b7:fc:bc:bc:08:83: 90:ae:ef:45:64:0e:e4:03:31:c2:e8:3c:3b:b3:fc: e0:20:7e:28:99:d2:30:0e:5d:fd:82:79:49:83:1f: 37:46:4e:18:04:99:6a:d9:ed:e6:e7:98:d8:a1:4c: c9:79:6c:d3:51:c0:b2:93:c6:ea:ad:41:b3:84:94: 60:62:c0:46:35:d5:83:ef:dc:2c:7b:79:9a:a6:68: b4:31:7b:54:aa:15:af:ae:a4:94:98:b7:ca:0a:87: f0:1b:95:7a:42:86:99:11:e9:dc:60:f9:08:3c:72: 38:73:64:b3:09:6e:f4:20:80:e3:64:bc:46:be:8e: 32:a5:30:d9:19:83:43:8b:22:d1:cb:1b:04:b6:fb: b4:08:0e:b1:ca:ba:58:b2:cc:ab:3b:c5:74:d4:3c: f0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:C4:75:5B:40:4B:87:57:5C:64:38:96:3A:C6:93:03:2A:A4:39 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0e:f4:55:d7:03:58:c4:96:77:fe:ec:39:1e:55:60:20:bb: 42:47:01:32:04:f8:0b:7b:09:a2:55:5e:7e:91:b5:21:1f:3d: 19:28:c5:42:48:12:35:7e:3a:3d:57:11:ea:dd:fd:86:f4:33: 09:00:64:70:8f:d7:43:55:a2:0a:be:63:dd:65:24:a7:2c:85: 10:04:fd:60:da:61:de:60:c5:8f:19:2f:6e:74:d8:9e:c1:60: fb:bd:4f:34:9d:81:f0:41:81:e0:e6:c4:28:d4:a5:c7:e2:ad: a5:31:75:e0:51:60:73:b3:d7:16:22:e4:28:70:7c:00:e6:3e: 71:0a:62:b1:0d:fe:cd:7d:34:fa:74:5c:8c:62:7f:a2:be:8a: a8:bb:5b:d9:9c:c7:77:e8:c7:63:c7:0b:74:f2:be:58:0e:69: b8:4d:25:85:e1:34:70:50:cd:47:2a:12:93:79:01:89:70:0b: f0:33:13:cc:5f:17:40:9a:c2:99:37:fd:dd:c3:d1:50:ae:6c: d3:cd:65:89:4e:b6:cc:b3:29:69:4a:04:c6:70:f1:b6:59:da: 5d:71:3f:cf:61:64:76:0e:9e:af:13:e1:0e:09:0b:4b:ef:81: ad:68:1c:76:9d:09:d9:1b:6e:aa:23:7e:11:8c:40:dc:3a:9c: 3e:9f:8d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwNDI0MjExNjMyWhcNMjUwNTAxMjExNjMyWjAYMRYwFAYD VQQDEw02ODBhYWEzMC05NjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur4vbirWv51fP/hFPp+75Xl4r5//alhKKPhUWApadnRxQGmxKZng6sFNARhW Gv8qW1rlqJR7LzJK/1paYphZ+FSzOnVrmNoIlL0h+Q1D0e54bdq+FKYoKMw5Lte1 BNlTCie3/Ly8CIOQru9FZA7kAzHC6Dw7s/zgIH4omdIwDl39gnlJgx83Rk4YBJlq 2e3m55jYoUzJeWzTUcCyk8bqrUGzhJRgYsBGNdWD79wse3mapmi0MXtUqhWvrqSU mLfKCofwG5V6QoaZEencYPkIPHI4c2SzCW70IIDjZLxGvo4ypTDZGYNDiyLRyxsE tvu0CA6xyrpYssyrO8V01DzwgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE9IxHVb QEuHV1xkOJY6xpMDKqQ5MB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0DvRV1wNYxJZ3/uw5HlVgILtCRwEyBPgLewmiVV5+kbUhHz0ZKMVC SBI1fjo9VxHq3f2G9DMJAGRwj9dDVaIKvmPdZSSnLIUQBP1g2mHeYMWPGS9udNie wWD7vU80nYHwQYHg5sQo1KXH4q2lMXXgUWBzs9cWIuQocHwA5j5xCmKxDf7NfTT6 dFyMYn+ivoqou1vZnMd36Mdjxwt08r5YDmm4TSWF4TRwUM1HKhKTeQGJcAvwMxPM XxdAmsKZN/3dw9FQrmzTzWWJTrbMsylpSgTGcPG2WdpdcT/PYWR2Dp6vE+EOCQtL 74GtaBx2nQnZG26qI34RjEDcOpw+n435 -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:17 2025 by rpki-client