$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: L/x/FO0hCXJkiLs2w5x5xcRc9enPMlzMhC/YDgY80Q8= Subject key identifier: 1B:7D:00:2E:77:CD:C2:7C:70:E6:F4:5E:85:0E:D0:00:8F:03:1F:34 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 078F Signing time: Thu 12 Jun 2025 21:05:17 +0000 Manifest this update: Thu 12 Jun 2025 21:05:16 +0000 Manifest next update: Thu 19 Jun 2025 21:05:16 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: SIBSTSK5Ien4YTFR0zjYVRfi0CE8wtv2A8pbhm7OoH0=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Jun 12 21:05:16 2025 GMT Not After : Jun 19 21:05:16 2025 GMT Subject: CN=684b410d-6586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:68:ad:7e:88:45:44:ae:8a:05:12:c8:de: da:e3:2f:a0:99:94:d6:80:85:ed:de:a2:fb:e2:a1: 03:3a:20:4c:4d:86:f4:8e:d1:15:4c:2a:9c:79:42: 39:b3:a8:0e:35:4b:71:ce:a3:7c:de:9f:24:c8:fa: 0a:88:09:23:14:73:9b:3d:9e:87:78:d7:aa:7a:42: 6a:8b:15:82:11:fe:a2:b9:6f:fb:4c:6c:0f:1e:fd: 80:31:cf:15:dc:9b:a8:a2:6f:7a:26:5d:9a:f3:f1: 7b:3a:b6:50:44:4d:d8:8e:c1:5a:02:ef:e7:af:2f: 93:1e:77:c9:6c:50:f8:45:d1:b3:cc:5a:df:c6:b0: 94:4d:83:15:ca:15:1f:84:71:88:c5:6a:bf:6e:05: 6e:8f:45:32:95:a2:92:e9:7d:de:d6:07:a9:e4:26: c2:80:74:ea:96:00:7e:cc:57:02:6c:df:c4:72:23: dc:a6:6f:75:c6:7b:02:d8:b6:87:8e:30:b6:1d:f6: 80:83:46:3e:19:ab:30:08:60:48:df:a3:6c:61:6f: 12:23:7f:86:ab:69:6d:ca:e5:e7:2d:c1:15:9e:a5: 5d:cc:3f:61:ee:43:d3:f4:b6:08:e7:ad:d6:01:5c: 48:17:f7:ac:4d:f2:bd:99:ec:15:82:51:72:ef:de: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7D:00:2E:77:CD:C2:7C:70:E6:F4:5E:85:0E:D0:00:8F:03:1F:34 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:76:e7:52:bc:d8:bd:50:55:ab:3a:7c:9c:58:c2:b4:b5:33: 29:21:6a:50:38:f6:c4:24:9e:5e:c1:08:79:ba:05:02:19:4c: 12:76:a9:30:d4:10:a4:32:d6:22:9f:8d:92:98:ad:62:9a:61: e3:f7:de:1e:17:01:b7:1e:5c:84:55:23:ea:93:e4:93:3a:19: fa:e7:96:65:77:80:06:fa:37:fb:6c:14:9f:5a:4d:79:78:0a: 46:a7:cc:4b:38:cd:02:e0:25:8c:42:47:1b:66:44:69:57:47: 35:d1:56:d9:bf:5e:7f:29:24:7c:4d:d6:e4:94:48:d6:62:30: 50:df:14:d2:05:01:80:c0:ad:57:04:27:3d:cc:85:58:12:ba: c3:08:b6:e7:28:0a:8c:58:36:3e:16:cd:5b:7e:c9:f9:7c:78: a8:43:f7:63:b2:b4:f7:45:1a:7c:30:d7:e7:e3:cf:bf:88:aa: de:bc:2a:50:21:f3:c5:8a:1f:44:34:27:23:9c:7d:99:dd:97: d3:e2:49:21:79:2f:80:f1:2f:1e:70:5c:09:d7:8c:e3:a8:1c: 76:85:07:8c:76:f7:03:6f:c7:7d:04:16:aa:fb:02:22:41:1e: da:15:75:8d:49:15:1d:58:6d:ee:00:91:dd:d1:56:98:8a:8c: b6:22:3c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwNjEyMjEwNTE2WhcNMjUwNjE5MjEwNTE2WjAYMRYwFAYD VQQDEw02ODRiNDEwZC02NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJVorX6IRUSuigUSyN7a4y+gmZTWgIXt3qL74qEDOiBMTYb0jtEVTCqceUI5 s6gONUtxzqN83p8kyPoKiAkjFHObPZ6HeNeqekJqixWCEf6iuW/7TGwPHv2AMc8V 3Juoom96Jl2a8/F7OrZQRE3YjsFaAu/nry+THnfJbFD4RdGzzFrfxrCUTYMVyhUf hHGIxWq/bgVuj0UylaKS6X3e1gep5CbCgHTqlgB+zFcCbN/EciPcpm91xnsC2LaH jjC2HfaAg0Y+GaswCGBI36NsYW8SI3+Gq2ltyuXnLcEVnqVdzD9h7kPT9LYI563W AVxIF/esTfK9mewVglFy794AnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt9AC53 zcJ8cOb0XoUO0ACPAx80MB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPdudSvNi9UFWrOnycWMK0tTMpIWpQOPbEJJ5ewQh5ugUCGUwSdqkw 1BCkMtYin42SmK1immHj994eFwG3HlyEVSPqk+STOhn655Zld4AG+jf7bBSfWk15 eApGp8xLOM0C4CWMQkcbZkRpV0c10VbZv15/KSR8TdbklEjWYjBQ3xTSBQGAwK1X BCc9zIVYErrDCLbnKAqMWDY+Fs1bfsn5fHioQ/djsrT3RRp8MNfn48+/iKrevCpQ IfPFih9ENCcjnH2Z3ZfT4kkheS+A8S8ecFwJ14zjqBx2hQeMdvcDb8d9BBaq+wIi QR7aFXWNSRUdWG3uAJHd0VaYioy2IjyA -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:49 2025 by rpki-client