$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: J1PaUP2ehza5K/uJ8G+buMTA2jNAQrVS5cXW36GIsuI= Subject key identifier: 6D:5A:61:80:69:D5:CC:3A:A7:66:3A:D3:E2:1C:E7:EA:36:F8:A6:B1 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 08AE Signing time: Fri 22 Aug 2025 20:39:29 +0000 Manifest this update: Fri 22 Aug 2025 20:39:28 +0000 Manifest next update: Fri 29 Aug 2025 20:39:28 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: K+K262KIfpyfzy1s46Nge6rKafkAzZ61VBrK2g34NIE=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2236 (0x8bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Aug 22 20:39:28 2025 GMT Not After : Aug 29 20:39:28 2025 GMT Subject: CN=68a8d581-9de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:fa:6e:2c:61:a8:e6:d0:53:20:58:ef:67: e5:a7:25:7d:20:32:31:40:70:8d:6b:93:56:16:6a: 77:b1:81:f2:44:d1:5f:88:45:58:47:5d:a2:c9:a6: df:ec:6e:12:d5:5e:62:d5:81:4b:73:0b:3b:c2:a0: 1b:7b:70:c0:df:2f:5b:4e:ec:51:d3:22:4c:8a:1a: 0d:cc:82:d7:b5:66:5d:f4:d1:45:ac:1f:d2:51:1b: 5f:da:38:a6:db:28:a3:04:95:a2:ff:64:1d:29:34: aa:36:6e:40:4b:bc:3a:5e:eb:96:2a:b7:2d:e7:b9: fb:a1:c5:89:6d:16:af:05:b4:0e:0c:f3:24:c5:fc: cf:e6:af:93:9d:54:ae:f6:f6:a6:e7:40:aa:a0:30: f0:e8:e8:65:33:25:4b:13:fb:79:8b:10:41:9f:78: 31:eb:15:49:eb:13:77:b2:cb:71:09:05:4b:c8:ec: f3:3f:7e:fa:6e:c0:8a:4c:5d:b6:ed:39:ab:e6:70: b3:8c:70:c5:60:51:e2:c5:75:d1:97:b6:95:e1:31: d9:ac:a4:3c:cf:30:b6:56:20:2a:b9:14:1a:a2:31: c8:4d:f6:5c:1f:24:6e:9a:5d:4a:aa:d0:d3:18:a1: 2e:28:9d:a0:ad:a2:87:7c:a1:aa:9f:0d:6d:33:c2: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5A:61:80:69:D5:CC:3A:A7:66:3A:D3:E2:1C:E7:EA:36:F8:A6:B1 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0d:18:89:7b:e0:24:e8:08:31:f8:80:c4:e0:e2:8a:6c:59: 25:e7:e1:2f:f7:37:a4:25:6a:fb:7b:42:8d:a7:16:c0:fa:c5: 79:24:b1:4b:39:6d:13:6d:22:25:a1:24:b8:82:30:a5:c1:33: 7b:94:a4:68:6f:03:7c:96:f3:e4:3e:1f:0b:2c:d6:7f:67:8c: cf:18:9e:c6:37:67:13:bf:21:24:c8:b7:58:ac:9b:d4:20:38: a9:1c:b7:5c:ac:e4:52:11:7f:97:17:76:22:a7:d0:65:d2:d3: 45:04:3a:01:40:85:c1:5c:cb:39:d4:2b:f9:30:c9:7c:97:e7: b2:a5:69:09:d0:09:68:19:f2:be:ae:07:1a:f7:6b:ab:47:13: 62:e3:bf:3d:67:a9:c6:dd:28:f3:9b:94:6e:44:cd:36:e1:2e: 0f:fc:d5:59:58:8f:21:bf:df:e9:d5:3c:33:c3:ff:5e:7d:10: e2:ff:38:96:0c:8e:a9:8d:5d:ca:c4:d5:69:18:60:3f:c4:01: 2b:25:94:94:6b:e5:9a:c0:45:20:dd:f0:fe:30:fb:7a:20:d9: a7:48:a6:1a:8b:c8:5d:ed:c6:46:98:6d:4a:ab:f1:91:da:08: 9b:4a:a2:b2:69:1b:46:1c:24:8c:a6:2d:82:2c:fe:37:d6:a6: 77:76:e4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwODIyMjAzOTI4WhcNMjUwODI5MjAzOTI4WjAYMRYwFAYD VQQDEw02OGE4ZDU4MS05ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJ/6bixhqObQUyBY72flpyV9IDIxQHCNa5NWFmp3sYHyRNFfiEVYR12iyabf 7G4S1V5i1YFLcws7wqAbe3DA3y9bTuxR0yJMihoNzILXtWZd9NFFrB/SURtf2jim 2yijBJWi/2QdKTSqNm5AS7w6XuuWKrct57n7ocWJbRavBbQODPMkxfzP5q+TnVSu 9vam50CqoDDw6OhlMyVLE/t5ixBBn3gx6xVJ6xN3sstxCQVLyOzzP376bsCKTF22 7Tmr5nCzjHDFYFHixXXRl7aV4THZrKQ8zzC2ViAquRQaojHITfZcHyRuml1KqtDT GKEuKJ2graKHfKGqnw1tM8JQnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1aYYBp 1cw6p2Y60+Ic5+o2+KaxMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXDRiJe+Ak6Agx+IDE4OKKbFkl5+Ev9zekJWr7e0KNpxbA+sV5JLFL OW0TbSIloSS4gjClwTN7lKRobwN8lvPkPh8LLNZ/Z4zPGJ7GN2cTvyEkyLdYrJvU IDipHLdcrORSEX+XF3Yip9Bl0tNFBDoBQIXBXMs51Cv5MMl8l+eypWkJ0AloGfK+ rgca92urRxNi4789Z6nG3Sjzm5RuRM024S4P/NVZWI8hv9/p1Twzw/9efRDi/ziW DI6pjV3KxNVpGGA/xAErJZSUa+WawEUg3fD+MPt6INmnSKYai8hd7cZGmG1Kq/GR 2gibSqKyaRtGHCSMpi2CLP431qZ3duSw -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:24 2025 by rpki-client