$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: kvpJOV8/bSvWWIvXzqjyepzhuDveWv76gr/nZzjHpYo= Subject key identifier: A5:DF:36:20:87:47:D1:2F:EF:FD:76:D1:FA:38:A1:15:FC:30:F7:DA Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 0844 Signing time: Wed 20 May 2026 20:57:57 +0000 Manifest this update: Wed 20 May 2026 20:57:56 +0000 Manifest next update: Wed 27 May 2026 20:57:56 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: GsSWURwyg+ashp2Cx9plwlUr5w38TtOAJy7azZMgiK0=) 2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=) 3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: May 20 20:57:56 2026 GMT Not After : May 27 20:57:56 2026 GMT Subject: CN=6a0e2054-a88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:13:56:1a:65:75:d7:fc:18:c8:ec:cd:7e: 5b:d5:5b:8b:3a:08:8c:52:93:82:8a:f1:e8:70:71: b6:bf:89:f7:0a:7d:0f:ab:95:6a:d2:bf:21:57:22: 03:26:28:b6:8c:ab:ba:bf:7f:f4:0c:0a:91:ce:6f: 2d:f1:aa:a4:b0:1a:14:9e:67:b0:07:6a:11:a7:36: 4a:a4:11:03:a5:16:60:06:6d:6d:a9:ad:64:42:ae: f2:87:96:4f:e4:7f:46:00:65:30:0b:48:82:95:13: d8:d6:61:6d:47:78:dd:83:c0:81:9f:1f:d5:51:08: 34:b3:20:29:92:61:c8:9e:3c:43:37:cc:33:e9:80: 68:ee:26:65:d9:65:9f:e8:65:60:c5:04:4d:ff:e1: a9:4f:40:12:91:b1:12:82:a3:5a:6c:fd:84:fb:14: ee:ad:15:81:02:8c:09:8a:9e:7b:96:9c:d5:a9:13: 5c:63:12:1b:0b:6d:f0:28:bd:65:fc:a5:88:14:c9: c2:ae:7e:d2:72:53:c2:55:c9:f9:56:da:72:95:97: fb:b1:39:7c:b1:0a:1d:6e:a3:de:09:ec:61:c8:f3: 00:4d:c3:ef:2c:e9:8e:9d:4e:0a:0e:8b:ed:64:de: 98:aa:34:3c:e1:4d:47:96:e6:d9:bc:43:ff:8c:ac: 43:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DF:36:20:87:47:D1:2F:EF:FD:76:D1:FA:38:A1:15:FC:30:F7:DA X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:0a:58:bb:b5:77:01:28:39:b8:e2:15:0d:ca:8e:69:35:63: f5:c1:c3:15:9e:ac:3f:8f:0d:81:5f:7b:33:9c:9b:55:a6:d7: 04:f1:fa:91:a9:a0:7f:69:9a:a9:44:bc:16:a4:62:ee:e6:c2: 64:e9:84:c8:30:58:26:e1:cf:6f:62:27:1b:c0:ad:3e:b6:f6: d1:ee:97:b8:57:62:84:37:d8:7f:f9:74:3e:d9:2c:7e:7b:78: 1d:f6:b2:c7:b5:ee:07:54:47:59:a8:5a:e8:2c:17:a5:b5:f8: 54:ec:fb:09:a1:e8:a5:69:ad:e7:30:31:3a:3c:0a:7d:b7:08: 6b:ad:c2:07:95:32:d8:78:c7:ea:97:b2:87:1b:a3:ce:9b:79: 84:a6:10:58:c0:c4:3e:e1:5a:58:21:79:01:12:52:bd:6f:b8: ac:02:c3:44:21:d8:e4:5f:e1:45:89:6c:bc:f5:ae:c0:a9:c8: 39:ff:60:df:ef:30:dc:eb:5a:3f:36:fe:e1:78:90:1f:ed:99: 73:a2:b5:8b:06:54:9b:69:ed:10:4d:25:20:c1:d7:24:48:26: 4f:b0:3a:1a:33:d7:e8:1a:2d:ee:47:ee:02:8b:06:fd:83:84: 6e:bd:8c:c5:b4:6d:66:2a:ad:b2:a1:e7:f6:e9:f9:4a:6b:2d: aa:3a:66:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjYwNTIwMjA1NzU2WhcNMjYwNTI3MjA1NzU2WjAYMRYwFAYD VQQDEw02YTBlMjA1NC1hODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5twTVhplddf8GMjszX5b1VuLOgiMUpOCivHocHG2v4n3Cn0Pq5Vq0r8hVyID Jii2jKu6v3/0DAqRzm8t8aqksBoUnmewB2oRpzZKpBEDpRZgBm1tqa1kQq7yh5ZP 5H9GAGUwC0iClRPY1mFtR3jdg8CBnx/VUQg0syApkmHInjxDN8wz6YBo7iZl2WWf 6GVgxQRN/+GpT0ASkbESgqNabP2E+xTurRWBAowJip57lpzVqRNcYxIbC23wKL1l /KWIFMnCrn7SclPCVcn5VtpylZf7sTl8sQodbqPeCexhyPMATcPvLOmOnU4KDovt ZN6YqjQ84U1HlubZvEP/jKxDiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKXfNiCH R9Ev7/120fo4oRX8MPfaMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMgpYu7V3ASg5uOIVDcqOaTVj9cHDFZ6sP48NgV97M5ybVabXBPH6kamgf2ma qUS8FqRi7ubCZOmEyDBYJuHPb2InG8CtPrb20e6XuFdihDfYf/l0Ptksfnt4Hfay x7XuB1RHWaha6CwXpbX4VOz7CaHopWmt5zAxOjwKfbcIa63CB5Uy2HjH6peyhxuj zpt5hKYQWMDEPuFaWCF5ARJSvW+4rALDRCHY5F/hRYlsvPWuwKnIOf9g3+8w3Ota Pzb+4XiQH+2Zc6K1iwZUm2ntEE0lIMHXJEgmT7A6GjPX6Bot7kfuAosG/YOEbr2M xbRtZiqtsqHn9un5Smstqjpm2w== -----END CERTIFICATE-----Generated at Thu May 21 15:39:59 2026 by rpki-client