$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: aIeLoKFWARqBbNy8pEDAbr436bY2mv6xL3f26/leO+8= Subject key identifier: 8C:70:A4:08:DF:49:09:70:E7:7E:1C:F2:19:2B:28:8A:56:4B:19:27 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 07B3 Signing time: Fri 22 Aug 2025 21:25:22 +0000 Manifest this update: Fri 22 Aug 2025 21:25:21 +0000 Manifest next update: Fri 29 Aug 2025 21:25:21 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: GPp4ndSiMy7hgDlCnKsQPtwmB43gR+/t81YL7FrghPA=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Aug 22 21:25:21 2025 GMT Not After : Aug 29 21:25:21 2025 GMT Subject: CN=68a8e042-fd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:3f:ab:ba:15:4d:24:bf:3d:c5:87:7b:e5: c6:34:a4:50:1c:59:5b:54:09:8f:77:4c:12:e4:84: b9:58:d7:0f:1d:3d:0f:76:1b:c2:16:e0:8f:97:1f: 6d:5f:99:df:fd:c1:98:6d:05:60:f3:68:8c:dc:63: 66:89:7e:dd:d7:cf:12:ea:db:ac:00:7c:8a:b8:59: 49:8b:d3:e9:f8:77:4c:80:bd:e1:48:02:cb:3c:bb: 1f:a3:95:05:50:d1:73:0b:f2:20:a0:31:c2:95:68: 3c:1a:65:af:5c:b4:02:cf:63:9c:8c:44:62:4c:ec: 52:3f:61:5c:20:ef:aa:6b:55:73:b6:4b:48:2a:47: 97:82:c9:f0:20:91:74:1b:ec:97:ce:05:60:65:9a: 6a:b5:89:00:ed:0a:9b:f4:5d:21:a0:f2:18:fe:13: 20:15:00:c0:1b:24:21:38:ac:c1:89:c3:a3:02:c0: 21:c2:5f:a1:ce:42:4c:ab:cd:58:3a:e4:9a:58:a8: fb:70:cf:55:7c:70:04:c5:19:3b:18:df:a5:57:b0: c2:b3:0a:b4:e4:27:9d:00:58:26:64:04:b8:a1:1b: 55:2f:94:d4:b5:56:e1:05:56:f7:b9:cc:60:b5:90: 46:df:ec:78:aa:7d:9e:e7:21:f3:05:f9:36:c5:7a: 5e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:70:A4:08:DF:49:09:70:E7:7E:1C:F2:19:2B:28:8A:56:4B:19:27 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0c:ef:68:a2:fa:99:6b:7c:1e:88:21:e6:37:9e:bf:69:2a: cd:12:3f:38:dd:84:2d:00:2a:f6:4e:23:a0:91:23:dd:44:64: 24:23:66:7a:70:66:a1:54:1e:17:10:7a:78:8a:c3:33:ad:07: 9f:7b:e6:64:9f:9f:b2:a2:5f:ca:8c:16:94:2d:ae:7d:6e:92: 9a:58:73:f8:9b:09:02:53:fd:2a:13:96:43:b0:57:a7:3e:90: b3:5a:25:1f:c3:bd:ef:30:52:69:91:b5:83:8e:33:6b:45:8b: c3:1b:cb:b6:a8:8f:9e:3b:3e:08:73:e3:40:8a:4e:d8:82:aa: 79:87:e0:db:d0:e8:bc:5b:6e:47:bc:89:ae:48:d0:90:cc:b8: f7:01:eb:00:8f:92:17:ef:95:72:10:82:8b:b8:1f:13:82:b6: 2b:12:56:c5:6e:48:22:6a:99:0e:13:9e:ba:f3:b9:86:49:84: a2:1c:cd:9e:06:cb:c1:37:7e:15:80:69:81:56:8c:0c:0d:0d: 3b:4f:bd:eb:a4:9d:34:6d:6a:2d:7f:a1:65:79:f3:78:ae:90: 1e:2c:aa:4c:7f:54:60:35:72:bb:e2:e6:d5:e0:56:41:fd:cd: 2b:d6:57:0e:50:e3:ca:ba:02:2a:dd:83:4f:3c:28:89:d4:de: 5c:56:13:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwODIyMjEyNTIxWhcNMjUwODI5MjEyNTIxWjAYMRYwFAYD VQQDEw02OGE4ZTA0Mi1mZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9s/q7oVTSS/PcWHe+XGNKRQHFlbVAmPd0wS5IS5WNcPHT0PdhvCFuCPlx9t X5nf/cGYbQVg82iM3GNmiX7d188S6tusAHyKuFlJi9Pp+HdMgL3hSALLPLsfo5UF UNFzC/IgoDHClWg8GmWvXLQCz2OcjERiTOxSP2FcIO+qa1VztktIKkeXgsnwIJF0 G+yXzgVgZZpqtYkA7Qqb9F0hoPIY/hMgFQDAGyQhOKzBicOjAsAhwl+hzkJMq81Y OuSaWKj7cM9VfHAExRk7GN+lV7DCswq05CedAFgmZAS4oRtVL5TUtVbhBVb3ucxg tZBG3+x4qn2e5yHzBfk2xXpecwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxwpAjf SQlw534c8hkrKIpWSxknMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAADO9oovqZa3weiCHmN56/aSrNEj843YQtACr2TiOgkSPdRGQkI2Z6 cGahVB4XEHp4isMzrQefe+Zkn5+yol/KjBaULa59bpKaWHP4mwkCU/0qE5ZDsFen PpCzWiUfw73vMFJpkbWDjjNrRYvDG8u2qI+eOz4Ic+NAik7Ygqp5h+Db0Oi8W25H vImuSNCQzLj3AesAj5IX75VyEIKLuB8TgrYrElbFbkgiapkOE56687mGSYSiHM2e BsvBN34VgGmBVowMDQ07T73rpJ00bWotf6FlefN4rpAeLKpMf1RgNXK74ubV4FZB /c0r1lcOUOPKugIq3YNPPCiJ1N5cVhMo -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:00 2025 by rpki-client