$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: Wcb54c5OQkU2jawXBcy+XX/kDpmXVIr6ANqFq6x/K2Q= Subject key identifier: 22:F6:6A:DC:D4:92:AD:07:75:61:9A:28:9F:58:E2:EB:D3:D4:74:75 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 07AA Signing time: Mon 04 Aug 2025 21:38:28 +0000 Manifest this update: Mon 04 Aug 2025 21:38:28 +0000 Manifest next update: Mon 11 Aug 2025 21:38:28 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: O5uW4VmkDCLG88f9KHJGmlsVPRb0BtpJtHOuTAmwcFU=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Aug 4 21:38:28 2025 GMT Not After : Aug 11 21:38:28 2025 GMT Subject: CN=68912854-1c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:5a:f4:a4:b4:6c:d3:1f:94:78:e6:56:18: c9:bc:30:7c:f1:fb:aa:65:9e:67:90:f1:0c:ba:b7: 28:82:6f:0b:6a:1e:a0:3d:09:1f:e6:10:c1:43:a8: 5d:fa:b3:b5:71:c9:4f:28:59:f8:44:df:ad:4d:5b: 6a:d2:af:a7:76:99:d6:d7:09:09:a1:9a:a0:c1:16: 87:18:82:65:d7:b2:77:f1:96:76:e5:30:dd:b6:09: c7:fd:a6:2d:79:60:f5:4d:ea:ab:0f:e5:3c:4a:92: f5:e8:31:be:81:98:70:ad:95:db:fc:df:a4:3f:7d: 4b:50:e9:ed:a7:7a:a1:56:c3:b4:cb:c4:04:34:9b: 07:16:a4:da:af:3d:61:55:aa:ab:00:b4:d4:ef:bb: 01:32:05:5d:fb:9e:7e:62:c1:58:87:81:19:32:c3: b3:4b:e0:65:20:fe:14:26:31:02:42:3b:e8:f4:ac: 60:b0:23:91:d8:c3:25:90:dd:c9:5b:18:0c:2e:d2: 12:73:3e:59:3f:2e:32:a3:aa:b8:4a:37:5c:8d:2e: 5b:ea:7a:d9:9f:48:d3:80:af:e1:13:30:fb:54:56: a2:c5:58:8b:8e:82:64:48:9d:66:a0:29:ab:a9:f5: a5:6a:44:63:0c:10:61:80:d8:e8:34:09:0a:98:80: 25:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F6:6A:DC:D4:92:AD:07:75:61:9A:28:9F:58:E2:EB:D3:D4:74:75 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:f3:ec:36:7b:77:30:1e:a2:44:4e:ea:a9:71:18:d6:19:76: 79:6c:0f:07:26:41:a8:bd:2f:c2:ff:bf:6d:9f:58:6b:3b:aa: ed:20:11:24:7a:53:82:d6:b8:fd:ec:86:14:de:2a:0b:2c:dd: fb:03:75:3c:0b:ee:c5:fa:00:2a:cb:68:5e:ee:bf:2e:98:6c: cc:27:59:df:ea:82:02:9a:b7:1e:f7:12:5c:c9:81:e5:e7:2b: 6a:e1:60:c8:c6:f9:a3:34:ab:93:55:0d:de:25:1c:60:27:82: e2:93:df:10:30:a4:57:2b:67:7e:0b:c3:32:aa:74:0a:f5:0a: da:b0:6f:43:32:15:91:72:ab:81:1a:03:6d:42:eb:50:60:e0: 68:cb:7e:dc:eb:e1:16:70:c2:78:44:f9:69:c1:af:78:0c:45: 18:24:7a:27:11:55:8d:15:42:dd:45:b6:80:8c:59:9b:15:5e: 3a:f7:ab:09:53:d9:0d:d3:9e:e3:c6:93:83:90:fd:2c:ec:a2: 0b:35:57:6e:e5:41:9e:77:fd:47:42:7c:cd:75:89:bf:9b:d6: 5c:17:81:94:79:d8:c8:75:c4:94:c1:8f:0e:c0:db:26:22:8e: db:3e:3a:c8:18:f9:a5:e1:6a:9d:72:20:9e:b3:8b:01:99:6e: 50:60:e1:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwODA0MjEzODI4WhcNMjUwODExMjEzODI4WjAYMRYwFAYD VQQDEw02ODkxMjg1NC0xYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4ta9KS0bNMflHjmVhjJvDB88fuqZZ5nkPEMurcogm8Lah6gPQkf5hDBQ6hd +rO1cclPKFn4RN+tTVtq0q+ndpnW1wkJoZqgwRaHGIJl17J38ZZ25TDdtgnH/aYt eWD1TeqrD+U8SpL16DG+gZhwrZXb/N+kP31LUOntp3qhVsO0y8QENJsHFqTarz1h VaqrALTU77sBMgVd+55+YsFYh4EZMsOzS+BlIP4UJjECQjvo9KxgsCOR2MMlkN3J WxgMLtIScz5ZPy4yo6q4SjdcjS5b6nrZn0jTgK/hEzD7VFaixViLjoJkSJ1moCmr qfWlakRjDBBhgNjoNAkKmIAl5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL2atzU kq0HdWGaKJ9Y4uvT1HR1MB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG8+w2e3cwHqJETuqpcRjWGXZ5bA8HJkGovS/C/79tn1hrO6rtIBEk elOC1rj97IYU3ioLLN37A3U8C+7F+gAqy2he7r8umGzMJ1nf6oICmrce9xJcyYHl 5ytq4WDIxvmjNKuTVQ3eJRxgJ4Lik98QMKRXK2d+C8MyqnQK9QrasG9DMhWRcquB GgNtQutQYOBoy37c6+EWcMJ4RPlpwa94DEUYJHonEVWNFULdRbaAjFmbFV4696sJ U9kN057jxpODkP0s7KILNVdu5UGed/1HQnzNdYm/m9ZcF4GUedjIdcSUwY8OwNsm Io7bPjrIGPml4WqdciCes4sBmW5QYOGp -----END CERTIFICATE-----Generated at Wed Aug 6 07:49:27 2025 by rpki-client