$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: GxyP1ShMc177m/D2jLlNpNTC0hQRteFKUjP0vZkzICI= Subject key identifier: 06:12:01:6D:CD:B7:23:5F:0A:41:6E:20:46:EA:58:16:32:F0:E6:0E Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 077F Signing time: Sat 10 May 2025 21:05:19 +0000 Manifest this update: Sat 10 May 2025 21:05:19 +0000 Manifest next update: Sat 17 May 2025 21:05:19 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: 2bN55+BFmY14cfpZkKplz0+lE6pSTvGLdRKzOLLJ2QY=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: May 10 21:05:19 2025 GMT Not After : May 17 21:05:19 2025 GMT Subject: CN=681fbf8f-a23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:0d:af:1a:4e:e5:ee:83:57:ca:ae:fb:ff:66: 15:10:c8:4f:59:1e:ee:13:7c:92:94:af:92:c8:d1: d4:19:f8:5b:5b:3b:22:76:22:2b:db:0e:67:8b:61: 51:9b:1d:4f:75:c5:a8:c5:f6:4f:a9:d4:39:9b:6a: 4f:76:32:90:0c:e9:65:9a:b3:1e:41:55:4d:e3:67: a3:40:c2:e1:90:3b:e1:1d:fc:f4:7c:02:45:36:27: ad:d3:ee:26:41:37:24:14:0d:37:b9:a2:5c:dc:bc: 21:b7:ad:93:71:f2:8e:51:9e:f1:ac:08:97:7c:55: 1f:da:5c:0a:cc:bd:d7:10:e7:98:13:26:62:53:d5: 35:d5:59:f2:25:c3:e3:03:e3:f7:98:0c:1d:b8:cf: 31:03:97:4a:b4:d3:c8:38:a1:9e:65:96:68:59:a5: 4f:2a:74:14:50:2e:4f:2f:b2:ca:c8:20:0c:58:29: da:fd:b1:2f:25:f1:be:42:0a:19:33:a2:2c:6b:47: ef:89:33:32:86:4c:d0:19:50:df:95:9c:1b:66:a6: f7:1b:00:4c:ec:cd:9c:2e:6b:dc:fa:3a:b0:54:d4: 36:21:ac:03:ad:47:18:8c:25:06:d9:b4:51:1c:6c: 0b:ff:4a:fa:73:22:b5:87:61:62:15:d5:ab:e3:1f: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:12:01:6D:CD:B7:23:5F:0A:41:6E:20:46:EA:58:16:32:F0:E6:0E X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:88:0c:96:f9:b8:79:7d:17:92:28:a6:e4:fd:d6:eb:0c:87: 04:05:ab:a4:04:0c:df:4e:06:7d:93:fa:aa:ac:5f:ee:a7:57: d6:cf:24:a0:24:c1:35:6d:b1:bc:ec:04:2f:8a:27:4d:e0:49: 63:7d:e7:ad:24:68:1d:b5:10:c5:94:d1:63:c2:60:cf:24:50: b7:8f:70:d9:17:a4:39:97:86:dd:56:a8:ae:b5:22:16:28:19: ae:84:ac:cb:ed:6c:06:3d:38:e4:ae:c1:f4:0a:16:28:50:e0: cb:2a:a8:c2:7a:50:ab:5f:95:fd:d9:1c:f3:a3:dd:af:83:12: 81:d4:c6:1e:6a:30:53:59:b5:99:7d:e1:74:3c:40:a5:b7:69: 2f:4d:40:2f:f4:c4:79:de:12:3d:43:ee:98:22:a7:32:c0:8f: 4b:a2:ba:67:a0:12:c9:ff:1a:ff:ec:63:3b:d6:26:c4:74:25: d7:4b:68:b4:7b:15:20:25:10:e0:50:47:0c:01:23:c6:dd:ce: b0:af:e8:d8:d1:fc:c7:e9:18:91:1c:2b:69:81:1f:36:85:a1: 1b:b0:07:b7:93:08:3a:7a:a8:77:2e:47:57:ba:60:58:79:46: 90:01:db:a9:25:70:32:5f:86:7f:fd:1f:21:53:1b:48:2e:00: ad:d5:7d:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwNTEwMjEwNTE5WhcNMjUwNTE3MjEwNTE5WjAYMRYwFAYD VQQDEw02ODFmYmY4Zi1hMjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7g2vGk7l7oNXyq77/2YVEMhPWR7uE3ySlK+SyNHUGfhbWzsidiIr2w5ni2FR mx1PdcWoxfZPqdQ5m2pPdjKQDOllmrMeQVVN42ejQMLhkDvhHfz0fAJFNiet0+4m QTckFA03uaJc3Lwht62TcfKOUZ7xrAiXfFUf2lwKzL3XEOeYEyZiU9U11VnyJcPj A+P3mAwduM8xA5dKtNPIOKGeZZZoWaVPKnQUUC5PL7LKyCAMWCna/bEvJfG+QgoZ M6Isa0fviTMyhkzQGVDflZwbZqb3GwBM7M2cLmvc+jqwVNQ2IawDrUcYjCUG2bRR HGwL/0r6cyK1h2FiFdWr4x8CzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYSAW3N tyNfCkFuIEbqWBYy8OYOMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHiAyW+bh5fReSKKbk/dbrDIcEBaukBAzfTgZ9k/qqrF/up1fWzySg JME1bbG87AQviidN4EljfeetJGgdtRDFlNFjwmDPJFC3j3DZF6Q5l4bdVqiutSIW KBmuhKzL7WwGPTjkrsH0ChYoUODLKqjCelCrX5X92Rzzo92vgxKB1MYeajBTWbWZ feF0PEClt2kvTUAv9MR53hI9Q+6YIqcywI9LorpnoBLJ/xr/7GM71ibEdCXXS2i0 exUgJRDgUEcMASPG3c6wr+jY0fzH6RiRHCtpgR82haEbsAe3kwg6eqh3LkdXumBY eUaQAdupJXAyX4Z//R8hUxtILgCt1X32 -----END CERTIFICATE-----Generated at Sat May 10 23:28:54 2025 by rpki-client