$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: dCCX5IBtVBmPtr+6GnIz3zpTin15VaAjYG4JxvpdAKo= Subject key identifier: 0F:21:53:02:33:16:70:DE:27:51:CF:D3:97:42:21:31:91:E9:10:0E Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 07DB Signing time: Tue 04 Nov 2025 21:16:50 +0000 Manifest this update: Tue 04 Nov 2025 21:16:50 +0000 Manifest next update: Tue 11 Nov 2025 21:16:49 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: e/Scrk7nafVlZXxqRkdfGJnJi/4+fl50lzoZStTuFMc=) 2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=) 3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: 8JiU8Oos87rOfxfxW5raSyPKQ8t3Ze/tzK20sDot2kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2019 (0x7e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Nov 4 21:16:50 2025 GMT Not After : Nov 11 21:16:49 2025 GMT Subject: CN=690a6d42-dc42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:c1:86:1f:ec:ce:16:4d:41:7e:5a:76:f9: c8:92:e9:08:4c:e9:e0:76:59:8f:3f:9f:26:5d:67: 5b:13:ac:01:1d:83:44:4c:c0:5c:f6:93:2e:94:74: 3c:c0:a3:38:0e:bc:18:d1:01:45:c2:63:46:ee:94: 02:2e:70:07:91:31:2e:05:9e:9d:d8:bb:11:93:c7: 47:b4:a3:e2:0f:2f:ba:41:95:2d:6f:7c:17:3d:95: 79:d6:34:b5:12:76:18:70:fe:ad:71:e4:fc:e4:d4: e3:e5:3a:cc:9b:76:6a:ea:57:67:65:fc:0f:4e:10: af:1b:2e:2f:82:30:30:58:c6:f1:76:bf:89:8e:8e: de:6f:3f:4f:24:0f:d3:32:33:5c:68:0d:1c:9c:2a: 74:ac:26:3e:90:0a:b7:ad:8a:52:26:89:53:dc:2c: 9d:f3:18:9d:99:4c:9b:41:d5:dc:ac:b0:54:56:e4: 9c:b1:b7:ce:ad:97:53:61:03:60:2c:c3:ba:b7:1e: 1a:6a:14:8d:ff:df:b3:4e:24:22:b7:8a:91:53:05: 60:37:c5:47:58:26:99:04:6d:a7:79:d6:50:d0:64: bf:d8:d2:07:ae:04:e5:47:d1:4d:d1:da:78:43:9e: fd:77:07:88:dd:d2:84:1d:5d:86:3d:e0:f7:75:3f: 40:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:21:53:02:33:16:70:DE:27:51:CF:D3:97:42:21:31:91:E9:10:0E X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:6e:4a:4a:45:5d:1d:9f:45:da:8f:a7:a4:b1:a6:94:6a:38: c9:75:b5:95:d6:36:dc:f2:62:f8:5a:3e:b7:3d:77:ab:a9:8f: a8:af:ed:36:8c:f3:aa:a0:3f:9a:53:d5:77:9f:df:2a:e6:c5: 82:87:87:ee:23:eb:83:c5:cb:a6:56:43:49:98:ea:72:30:da: fc:0d:71:db:06:ca:97:52:75:9f:e8:26:4c:71:fc:ac:d2:f6: a1:28:6c:96:b3:4a:c3:6d:ac:65:c0:fb:a3:7d:1d:03:3d:e1: b0:f3:e2:db:86:cb:01:f8:23:bd:c1:0e:bb:21:af:c0:73:54: 77:00:46:54:71:22:0c:9f:64:a0:ca:9c:d9:4c:72:22:26:42: b1:91:6a:24:7c:ce:76:f2:48:fc:de:be:9e:7f:45:76:e6:6d: 70:cc:09:a0:fd:c6:95:ba:28:62:55:24:64:12:56:1b:dc:32: 81:86:3b:3a:67:a9:e8:a2:e7:7d:e9:a7:4c:64:b3:1e:34:56: 54:16:76:3b:1e:5c:57:16:10:8c:23:e2:7b:36:f2:ac:8d:32: 95:18:ff:7a:ed:5a:bd:31:73:fb:32:eb:e8:d3:3f:f5:2b:d5: b3:e8:27:b1:6e:aa:c9:43:f2:00:d9:41:08:5a:a7:2a:41:8a: 3b:b4:c1:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUxMTA0MjExNjUwWhcNMjUxMTExMjExNjQ5WjAYMRYwFAYD VQQDEw02OTBhNmQ0Mi1kYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yLBhh/szhZNQX5advnIkukITOngdlmPP58mXWdbE6wBHYNETMBc9pMulHQ8 wKM4DrwY0QFFwmNG7pQCLnAHkTEuBZ6d2LsRk8dHtKPiDy+6QZUtb3wXPZV51jS1 EnYYcP6tceT85NTj5TrMm3Zq6ldnZfwPThCvGy4vgjAwWMbxdr+Jjo7ebz9PJA/T MjNcaA0cnCp0rCY+kAq3rYpSJolT3Cyd8xidmUybQdXcrLBUVuScsbfOrZdTYQNg LMO6tx4aahSN/9+zTiQit4qRUwVgN8VHWCaZBG2nedZQ0GS/2NIHrgTlR9FN0dp4 Q579dweI3dKEHV2GPeD3dT9AcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8hUwIz FnDeJ1HP05dCITGR6RAOMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwbkpKRV0dn0Xaj6eksaaUajjJdbWV1jbc8mL4Wj63PXerqY+or+02 jPOqoD+aU9V3n98q5sWCh4fuI+uDxcumVkNJmOpyMNr8DXHbBsqXUnWf6CZMcfys 0vahKGyWs0rDbaxlwPujfR0DPeGw8+LbhssB+CO9wQ67Ia/Ac1R3AEZUcSIMn2Sg ypzZTHIiJkKxkWokfM528kj83r6ef0V25m1wzAmg/caVuihiVSRkElYb3DKBhjs6 Z6nooud96adMZLMeNFZUFnY7HlxXFhCMI+J7NvKsjTKVGP967Vq9MXP7Muvo0z/1 K9Wz6CexbqrJQ/IA2UEIWqcqQYo7tMEf -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:48 2025 by rpki-client