$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: p0WI0eGTjozypm/rZoMNK1xhlbA3f5sQBCEzBAH+YZ4= Subject key identifier: CF:FB:0F:04:21:53:44:05:52:4B:EB:47:59:57:2E:44:6D:75:FE:2A Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 087B Signing time: Mon 12 May 2025 21:18:20 +0000 Manifest this update: Mon 12 May 2025 21:18:19 +0000 Manifest next update: Mon 19 May 2025 21:18:19 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: gURx2WWbKqpSScx57q6hCDTEe2bcT/I8aUkv9myamws=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: May 12 21:18:19 2025 GMT Not After : May 19 21:18:19 2025 GMT Subject: CN=6822659c-976e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:71:9c:57:6b:7c:de:9c:d5:a7:e7:f1:83:c2: 37:5b:2d:f3:51:28:b2:a8:6d:71:fc:1b:68:f3:76: dd:8c:5c:44:22:73:80:af:d5:8e:d4:31:9f:f9:e0: cd:f4:e5:d6:cb:e8:77:f6:42:e2:15:d7:42:70:24: b3:0f:a8:8e:ef:0c:40:23:2b:a4:d4:81:f1:45:bf: 2f:b3:24:bb:11:3d:2b:ef:bf:30:21:41:d8:53:08: b5:74:b0:c0:e2:70:8b:28:fb:a8:34:a5:0e:2d:e3: 5e:2a:b9:69:30:f4:2b:44:39:7e:19:37:7a:bb:9a: 04:75:f4:a7:0b:a2:15:cd:a3:f1:bc:a7:ce:9d:bf: 1c:60:b4:78:00:0a:18:81:08:d5:d2:58:a1:76:34: 39:35:57:3e:cd:c0:5b:c5:c0:10:45:e1:8c:cb:73: aa:6d:a0:54:51:30:c7:30:41:5e:a2:6c:17:4f:ec: 3d:92:e9:24:a7:c3:42:d5:e2:1d:a5:4c:eb:11:35: 39:32:a7:63:01:b9:92:3f:98:f4:0f:66:40:34:4b: 89:c7:bf:ed:43:4f:ff:e1:f1:cb:93:b7:7c:ce:71: 5a:a5:85:c7:e4:ac:16:6a:db:66:01:f8:f8:07:50: 2d:4f:6b:22:65:6f:9c:42:6b:98:d1:79:eb:35:60: 5d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FB:0F:04:21:53:44:05:52:4B:EB:47:59:57:2E:44:6D:75:FE:2A X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:fd:96:04:e8:f2:8c:56:ca:e8:80:d8:93:0d:c0:58:d4:7f: db:57:06:4c:8c:a4:a2:6e:e3:4e:2d:b1:97:c7:04:08:60:cf: 18:ba:f6:6a:68:a7:39:5e:ab:51:da:b2:3a:16:1c:ee:bf:5a: 2d:b0:14:cd:16:4b:68:3c:68:16:2c:cd:5e:93:ca:94:3f:fc: d1:67:96:cb:0c:23:0d:4a:83:0b:31:3d:c1:db:ed:96:19:5a: ac:8f:1e:63:b8:07:97:68:7b:cc:90:dc:1b:74:2f:78:56:93: c5:e6:3a:fb:89:bb:0e:14:50:80:0b:8a:bb:bf:68:a9:d2:be: df:d6:f8:29:1b:60:dc:68:f3:16:fb:a1:b4:5c:c9:9b:ae:c1: c4:f1:17:c7:ec:03:61:5d:21:4e:bb:69:13:df:ba:63:cd:c3: 8d:21:71:d3:13:de:64:39:26:12:3d:6a:05:a7:e5:e9:1f:fc: bb:a9:47:06:85:47:3d:86:1f:0f:39:ad:41:3a:e2:7b:3e:04: 56:8f:c0:3b:53:95:6b:99:c6:ff:a4:26:39:c4:85:af:08:85: ac:0b:72:19:88:52:0f:26:81:da:33:b7:c4:54:9c:d0:80:8e: 27:1d:a1:f9:38:30:55:fa:9a:ab:c7:21:5e:08:73:f2:d3:ee: c5:c9:ba:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNTEyMjExODE5WhcNMjUwNTE5MjExODE5WjAYMRYwFAYD VQQDEw02ODIyNjU5Yy05NzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4HGcV2t83pzVp+fxg8I3Wy3zUSiyqG1x/Bto83bdjFxEInOAr9WO1DGf+eDN 9OXWy+h39kLiFddCcCSzD6iO7wxAIyuk1IHxRb8vsyS7ET0r778wIUHYUwi1dLDA 4nCLKPuoNKUOLeNeKrlpMPQrRDl+GTd6u5oEdfSnC6IVzaPxvKfOnb8cYLR4AAoY gQjV0lihdjQ5NVc+zcBbxcAQReGMy3OqbaBUUTDHMEFeomwXT+w9kukkp8NC1eId pUzrETU5MqdjAbmSP5j0D2ZANEuJx7/tQ0//4fHLk7d8znFapYXH5KwWattmAfj4 B1AtT2siZW+cQmuY0XnrNWBdKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/7DwQh U0QFUkvrR1lXLkRtdf4qMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV/ZYE6PKMVsrogNiTDcBY1H/bVwZMjKSibuNOLbGXxwQIYM8YuvZq aKc5XqtR2rI6Fhzuv1otsBTNFktoPGgWLM1ek8qUP/zRZ5bLDCMNSoMLMT3B2+2W GVqsjx5juAeXaHvMkNwbdC94VpPF5jr7ibsOFFCAC4q7v2ip0r7f1vgpG2DcaPMW +6G0XMmbrsHE8RfH7ANhXSFOu2kT37pjzcONIXHTE95kOSYSPWoFp+XpH/y7qUcG hUc9hh8POa1BOuJ7PgRWj8A7U5Vrmcb/pCY5xIWvCIWsC3IZiFIPJoHaM7fEVJzQ gI4nHaH5ODBV+pqrxyFeCHPy0+7Fybqe -----END CERTIFICATE-----Generated at Wed May 14 17:40:58 2025 by rpki-client