$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: 0AL1uYy673//GEA9EdIX7dryCQBvYzO1gVKiQbqR2XI= Subject key identifier: 24:AC:A4:4E:3B:8A:04:0B:46:4F:CB:7D:1F:E1:CD:19:14:D0:64:05 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 07A1 Signing time: Fri 18 Jul 2025 21:35:52 +0000 Manifest this update: Fri 18 Jul 2025 21:35:51 +0000 Manifest next update: Fri 25 Jul 2025 21:35:51 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: Y5fzkrnbX3ayGH94CjtSWRkG/Jj+vtxAsMOkCBwNW8I=) 2: 90C5BDF013F011EBA31BF948C4F9AE02.roa (hash: FhTvhFcDB/Ph+v5y3Equ71wPhAapTXjRpqoScSQoREg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Jul 18 21:35:51 2025 GMT Not After : Jul 25 21:35:51 2025 GMT Subject: CN=687abe37-0584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:05:cf:e9:eb:25:41:b0:53:7a:8e:8f:58:2f: cd:ed:09:ba:61:2f:74:5f:eb:e9:4c:6d:17:ea:00: 7e:b8:02:33:60:44:06:97:3d:4e:8c:e6:ce:78:89: ab:0b:42:40:1f:ae:d7:22:04:55:f7:4b:9e:37:97: eb:39:8e:4e:d9:06:3d:fb:b0:85:7f:2a:67:44:3a: 2b:82:a3:3b:5d:1a:07:1a:2a:2d:49:25:69:7b:02: 5f:c0:a4:22:d1:2f:b7:dc:99:e5:d1:ef:5a:86:2a: 06:a8:20:68:f3:fe:3f:90:50:83:ca:59:65:17:fb: 0b:fd:ae:1d:4f:cd:7d:97:b2:f0:5b:47:54:79:22: 8a:5f:1b:5d:dd:23:e9:a6:f7:61:79:d6:f0:44:f6: 60:42:dd:f8:fa:33:64:cf:c2:34:de:46:d5:e2:f6: d3:c8:7c:f9:3a:6d:4a:c9:75:13:eb:e1:f6:f9:9e: bd:fa:88:79:6c:ac:65:05:46:76:88:5b:1b:32:28: 73:80:1a:c0:9e:e9:4b:37:94:92:5c:09:d6:e0:e0: d0:c6:49:df:3e:da:29:73:41:78:2d:10:df:38:22: 8e:b4:48:6c:4b:9c:37:dd:2e:f1:2a:49:7e:5a:da: de:7f:06:7f:e0:5d:11:c1:fe:36:e5:74:5f:3d:6c: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:A4:4E:3B:8A:04:0B:46:4F:CB:7D:1F:E1:CD:19:14:D0:64:05 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:6d:66:cb:e5:cf:80:ea:d0:f2:39:d6:bd:7e:3b:4b:d9:c4: d7:3e:f1:5d:a2:a2:46:7e:a4:0b:ed:8b:62:98:41:dd:a8:e1: c6:89:1b:a0:75:d3:c6:2d:27:f9:25:45:63:69:91:bc:2a:59: 24:f2:8d:90:6d:75:b1:fc:68:d1:a3:51:bf:aa:41:a1:05:bf: 04:59:b2:8f:bd:6a:f4:eb:86:fc:bc:13:b1:ce:6c:54:c5:53: b2:49:45:63:cb:af:f4:d6:32:e3:d1:a2:30:50:b3:d3:1e:ac: a9:d4:df:26:53:ca:70:3f:86:86:1d:cc:26:ea:60:b0:ea:41: 52:f4:4c:a0:5e:6c:3a:fd:08:df:8e:5e:62:7d:38:cd:ac:55: e0:01:d0:8e:b8:a4:1e:cc:d4:4e:69:f3:93:e7:74:80:ef:50: 48:62:d3:c6:0b:84:78:49:cc:13:8b:05:34:ab:27:2e:b1:24: 41:08:f3:32:6d:2b:6b:4e:29:37:8a:13:10:0a:04:61:c6:e4: d3:18:59:ad:88:e2:4c:9b:25:1a:00:9c:a8:74:93:79:eb:61: 7b:1c:1f:ba:77:06:72:69:49:45:92:e5:59:de:ed:69:8c:8f: de:2a:c5:6b:fd:bd:64:1c:81:74:96:0f:cf:8a:cb:c9:66:66: 11:1e:4f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjUwNzE4MjEzNTUxWhcNMjUwNzI1MjEzNTUxWjAYMRYwFAYD VQQDEw02ODdhYmUzNy0wNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4wXP6eslQbBTeo6PWC/N7Qm6YS90X+vpTG0X6gB+uAIzYEQGlz1OjObOeImr C0JAH67XIgRV90ueN5frOY5O2QY9+7CFfypnRDorgqM7XRoHGiotSSVpewJfwKQi 0S+33Jnl0e9ahioGqCBo8/4/kFCDylllF/sL/a4dT819l7LwW0dUeSKKXxtd3SPp pvdhedbwRPZgQt34+jNkz8I03kbV4vbTyHz5Om1KyXUT6+H2+Z69+oh5bKxlBUZ2 iFsbMihzgBrAnulLN5SSXAnW4ODQxknfPtopc0F4LRDfOCKOtEhsS5w33S7xKkl+ WtrefwZ/4F0Rwf425XRfPWxGMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSspE47 igQLRk/LfR/hzRkU0GQFMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0bWbL5c+A6tDyOda9fjtL2cTXPvFdoqJGfqQL7YtimEHdqOHGiRug ddPGLSf5JUVjaZG8Klkk8o2QbXWx/GjRo1G/qkGhBb8EWbKPvWr064b8vBOxzmxU xVOySUVjy6/01jLj0aIwULPTHqyp1N8mU8pwP4aGHcwm6mCw6kFS9EygXmw6/Qjf jl5ifTjNrFXgAdCOuKQezNROafOT53SA71BIYtPGC4R4ScwTiwU0qycusSRBCPMy bStrTik3ihMQCgRhxuTTGFmtiOJMmyUaAJyodJN562F7HB+6dwZyaUlFkuVZ3u1p jI/eKsVr/b1kHIF0lg/PisvJZmYRHk+Y -----END CERTIFICATE-----Generated at Sun Jul 20 12:59:44 2025 by rpki-client