$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json) Hash identifier: 4mOJVj8E9xkH51jLv4aQvy2KzFiUOYxO2alKiwOj83w= Subject key identifier: 83:D6:43:76:1B:D6:63:2B:ED:EA:1F:D0:69:8C:55:64:A9:7F:23:46 Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft Manifest number: 0875 Signing time: Mon 24 Aug 2026 20:45:59 +0000 Manifest this update: Mon 24 Aug 2026 20:45:58 +0000 Manifest next update: Mon 31 Aug 2026 20:45:58 +0000 Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: V+JPJWinf83bDZogP8tNfqVnJvZm08g3oGQCYlwmCts=) 2: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=) 3: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 20:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F Validity Not Before: Aug 24 20:45:58 2026 GMT Not After : Aug 31 20:45:58 2026 GMT Subject: CN=6a8cad87-ae3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:b5:09:ef:c9:33:aa:c6:92:f2:28:45:25: 63:be:d7:70:f1:2a:4e:aa:d0:a4:df:eb:33:43:26: 3d:af:5b:ee:ec:6e:e1:02:85:4d:ae:ed:0f:82:c5: c5:3f:55:2b:02:68:81:64:27:56:a8:14:e6:88:6d: 24:3f:08:52:0a:32:2a:e9:88:b6:88:ec:e5:6d:0a: ac:a8:c0:91:16:9c:e5:50:1f:7f:a4:98:42:52:60: 56:76:e3:44:f2:03:84:ec:6a:05:c0:a1:fb:69:0e: 80:13:89:c7:44:af:e6:8d:43:10:17:48:4d:63:16: ed:01:fa:e5:f6:ca:cd:66:2f:be:73:49:fa:be:09: ee:50:d0:f3:f3:b1:21:a2:16:6b:0b:8e:44:92:4e: 00:d8:5b:c3:46:37:92:2c:14:43:65:a7:da:f4:18: 1b:0b:ac:e6:9c:b3:98:43:df:11:04:32:ed:05:03: ba:64:69:da:26:71:18:c3:a0:35:ef:80:ca:19:f5: c1:88:d4:6a:37:9d:31:82:dd:df:6d:9a:0b:9d:a7: 34:e5:58:63:72:2e:22:8a:b5:f3:5c:b9:eb:7a:57: db:b5:34:82:58:96:01:58:d1:03:1e:72:a2:c5:97: 70:bd:84:cb:ec:12:ae:49:b5:02:17:03:c5:b3:f5: fa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D6:43:76:1B:D6:63:2B:ED:EA:1F:D0:69:8C:55:64:A9:7F:23:46 X509v3 Authority Key Identifier: keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d3:c3:06:31:5f:4c:10:49:ec:0f:2a:21:33:16:cf:16:4b: aa:aa:da:4c:55:79:95:69:69:9e:69:78:67:e2:9e:84:cb:12: 35:f1:22:a4:ae:68:8e:c5:fe:23:96:d2:d9:a6:f6:54:95:91: 87:57:ea:cf:3e:b9:94:8c:f5:2c:aa:6a:a9:69:95:77:e2:85: fb:27:22:8d:4a:db:79:9b:28:e9:ba:9c:a3:43:cb:28:51:f1: 82:c8:1c:b4:2e:ad:62:d5:27:ed:5b:7e:43:3b:43:3c:fe:f1: 1e:54:4a:7c:a5:00:f9:7c:09:e5:26:0a:34:82:7e:6e:15:54: d1:fa:0d:6d:7d:fd:c1:d1:84:10:18:5c:c3:73:5b:17:fc:b5: 41:4d:8e:3d:75:18:d2:97:85:38:73:aa:8e:21:c4:14:59:48: c2:29:3a:ec:9d:58:7a:3f:85:44:f0:ee:1a:f3:04:68:de:d1: cf:2a:1e:9a:a5:7e:f0:96:37:a3:75:13:1c:ba:a1:d8:47:51: a6:9a:91:fc:74:19:25:36:5e:f0:65:5d:d7:fe:d9:91:43:2c: 3b:8f:dd:51:99:91:bc:e5:b7:34:b4:1f:73:24:05:e6:15:70: 25:ea:8c:18:7f:37:54:ad:be:79:9f:c2:d0:e9:55:11:28:aa: 73:0d:88:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczMUExMTAvBgNVBAUTKDBEQjREM0Y5RDVFMjBEODVCRUI3RjlDQjFCMDdDMzE1 QUE0NjA5OUYwHhcNMjYwODI0MjA0NTU4WhcNMjYwODMxMjA0NTU4WjAYMRYwFAYD VQQDEw02YThjYWQ4Ny1hZTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApsO1Ce/JM6rGkvIoRSVjvtdw8SpOqtCk3+szQyY9r1vu7G7hAoVNru0PgsXF P1UrAmiBZCdWqBTmiG0kPwhSCjIq6Yi2iOzlbQqsqMCRFpzlUB9/pJhCUmBWduNE 8gOE7GoFwKH7aQ6AE4nHRK/mjUMQF0hNYxbtAfrl9srNZi++c0n6vgnuUNDz87Eh ohZrC45Ekk4A2FvDRjeSLBRDZafa9BgbC6zmnLOYQ98RBDLtBQO6ZGnaJnEYw6A1 74DKGfXBiNRqN50xgt3fbZoLnac05Vhjci4iirXzXLnrelfbtTSCWJYBWNEDHnKi xZdwvYTL7BKuSbUCFwPFs/X6iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPWQ3Yb 1mMr7eof0GmMVWSpfyNGMB8GA1UdIwQYMBaAFA200/nV4g2Fvrf5yxsHwxWqRgmf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzMxQS9DOUY4M0FFRTBF QzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZVy10X25MR3dmREZhcEdD WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RiVFQtZFhpRFlXLXRfbkxHd2ZERmFwR0NaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzMxQS9DOUY4M0FFRTBFQzMxMUVCQUM5NzkxMThDNEY5QUUwMi9EYlRULWRYaURZ Vy10X25MR3dmREZhcEdDWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGtPDBjFfTBBJ7A8qITMWzxZLqqraTFV5lWlpnml4Z+KehMsSNfEipK5ojsX+ I5bS2ab2VJWRh1fqzz65lIz1LKpqqWmVd+KF+ycijUrbeZso6bqco0PLKFHxgsgc tC6tYtUn7Vt+QztDPP7xHlRKfKUA+XwJ5SYKNIJ+bhVU0foNbX39wdGEEBhcw3Nb F/y1QU2OPXUY0peFOHOqjiHEFFlIwik67J1Yej+FRPDuGvMEaN7RzyoemqV+8JY3 o3UTHLqh2EdRppqR/HQZJTZe8GVd1/7ZkUMsO4/dUZmRvOW3NLQfcyQF5hVwJeqM GH83VK2+eZ/C0OlVESiqcw2Icg== -----END CERTIFICATE-----Generated at Wed Aug 26 16:09:33 2026 by rpki-client