$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: 9JWBokkjywUJgbIqXsvFOhZR5GMxom8daJ3LmxzDWnw= Subject key identifier: 54:E3:5B:29:F1:C2:AB:55:F0:AF:39:5E:23:28:7C:E3:49:43:3F:F8 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 079E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 0798 Signing time: Mon 30 Jun 2025 21:34:29 +0000 Manifest this update: Mon 30 Jun 2025 21:34:28 +0000 Manifest next update: Mon 07 Jul 2025 21:34:28 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: c2hJeDeQ5fO6QBrMdF3q3FIgxYxgcJUkQD1pLViszI8=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1950 (0x79e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Jun 30 21:34:28 2025 GMT Not After : Jul 7 21:34:28 2025 GMT Subject: CN=686302e4-ab03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:26:fd:5e:7f:0c:db:5e:00:f2:44:f7:99: 67:d6:72:17:62:5f:97:5e:3d:25:8e:d6:4c:9e:b3: 9d:e8:85:86:8b:4c:e7:bf:81:19:2b:c8:31:20:80: 4e:33:64:df:7d:3b:e4:d2:23:83:80:14:bf:da:68: 04:55:bb:76:14:ab:17:ec:bb:29:40:44:33:2b:76: 10:77:58:e8:7c:b0:9a:d9:36:44:96:17:19:6b:74: a6:79:c0:00:87:d9:33:7a:ea:9b:94:d1:6e:f1:d1: 24:75:91:e0:69:1a:46:8b:c5:37:3f:ec:d3:0f:86: a5:74:1a:01:35:1c:01:84:5c:c8:eb:95:06:bb:48: 4b:11:9e:5c:37:18:a3:cb:a3:cd:f9:40:56:65:9d: a3:9f:ee:9d:c3:42:3a:34:b3:08:75:fe:43:47:50: 45:6b:93:1d:a6:c8:2c:86:66:a1:21:3e:45:c3:51: 23:de:e1:77:f7:30:29:14:0e:2a:8f:31:4a:e7:08: 9a:03:75:8a:91:61:6b:68:9f:22:84:69:61:c4:9b: 28:fc:a1:b6:d4:99:cb:3b:df:26:8c:45:77:88:51: 75:f6:50:b5:c1:0d:01:03:c3:93:82:08:53:3d:7b: 15:f0:81:24:01:54:2a:b4:1e:a8:fc:d8:ff:92:e5: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E3:5B:29:F1:C2:AB:55:F0:AF:39:5E:23:28:7C:E3:49:43:3F:F8 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e4:80:71:ce:a9:17:df:f6:a1:da:69:af:b3:96:9a:ae:67: 37:b5:9e:8c:b2:04:a0:ab:32:fe:26:be:ba:a5:55:41:0d:1b: db:a4:9c:4a:2f:d2:d9:3b:e6:cf:86:f7:4b:bf:73:7c:b0:77: 22:58:df:35:22:31:15:90:f9:ef:2a:e5:6e:32:64:7c:32:5f: 1a:fe:d4:a0:04:2d:9b:33:ff:d1:36:c9:ef:c5:72:c8:a3:6f: ed:05:1b:65:2d:51:d1:97:6f:66:f6:e8:72:3a:da:9b:f3:4f: cd:92:24:10:c0:c8:fb:23:ca:be:3c:ba:2b:9e:e2:85:59:7d: 88:54:af:8b:50:15:2a:69:b8:dc:3c:4a:cf:32:64:e8:db:3e: e0:c3:51:ed:ce:7d:01:37:46:25:e1:63:7e:b8:15:57:17:79: 48:05:dc:18:0f:ff:65:3c:6a:45:6c:5c:3b:33:36:33:02:5e: b1:d9:e8:9d:ab:b3:83:a6:62:d1:e6:ea:9f:f0:4a:a4:30:d7: 03:05:5a:e0:64:e7:30:91:d7:3e:8e:11:e6:3f:7e:c4:29:ff: c4:73:45:cb:68:0b:32:b4:88:de:34:67:02:d0:44:9f:95:2e: da:fe:ba:1f:ab:b2:b7:74:9c:a9:8f:72:b0:2c:89:b0:dc:aa: 18:61:07:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwNjMwMjEzNDI4WhcNMjUwNzA3MjEzNDI4WjAYMRYwFAYD VQQDEw02ODYzMDJlNC1hYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqwm/V5/DNteAPJE95ln1nIXYl+XXj0ljtZMnrOd6IWGi0znv4EZK8gxIIBO M2TffTvk0iODgBS/2mgEVbt2FKsX7LspQEQzK3YQd1jofLCa2TZElhcZa3SmecAA h9kzeuqblNFu8dEkdZHgaRpGi8U3P+zTD4aldBoBNRwBhFzI65UGu0hLEZ5cNxij y6PN+UBWZZ2jn+6dw0I6NLMIdf5DR1BFa5MdpsgshmahIT5Fw1Ej3uF39zApFA4q jzFK5wiaA3WKkWFraJ8ihGlhxJso/KG21JnLO98mjEV3iFF19lC1wQ0BA8OTgghT PXsV8IEkAVQqtB6o/Nj/kuUmaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTjWynx wqtV8K85XiMofONJQz/4MB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF5IBxzqkX3/ah2mmvs5aarmc3tZ6MsgSgqzL+Jr66pVVBDRvbpJxK L9LZO+bPhvdLv3N8sHciWN81IjEVkPnvKuVuMmR8Ml8a/tSgBC2bM//RNsnvxXLI o2/tBRtlLVHRl29m9uhyOtqb80/NkiQQwMj7I8q+PLornuKFWX2IVK+LUBUqabjc PErPMmTo2z7gw1Htzn0BN0Yl4WN+uBVXF3lIBdwYD/9lPGpFbFw7MzYzAl6x2eid q7ODpmLR5uqf8EqkMNcDBVrgZOcwkdc+jhHmP37EKf/Ec0XLaAsytIjeNGcC0ESf lS7a/rofq7K3dJypj3KwLImw3KoYYQf9 -----END CERTIFICATE-----Generated at Tue Jul 1 11:55:49 2025 by rpki-client