$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: zFsK/IN3nRGGMziMDp2bffh+WBHV1aRMfgHuq4ZuEnw= Subject key identifier: 82:41:F8:FA:D3:96:3A:C1:94:E5:A1:58:AE:9F:20:1B:63:AF:57:62 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 0894 Signing time: Wed 02 Jul 2025 20:51:44 +0000 Manifest this update: Wed 02 Jul 2025 20:51:43 +0000 Manifest next update: Wed 09 Jul 2025 20:51:43 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: RcQYrTjOa2IEdDyRAphGY2NztZaqdFkkq6Eg+7vCC28=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jul 2 20:51:43 2025 GMT Not After : Jul 9 20:51:43 2025 GMT Subject: CN=68659be0-d783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:14:32:f6:ed:31:0f:5d:2d:0a:26:b4:da: 28:1c:06:c4:dd:b1:c9:09:5a:10:6f:2b:69:77:11: ae:bd:5d:57:72:b4:66:a1:c2:78:19:dd:43:3e:fa: 05:18:30:7e:82:36:11:67:4c:75:3b:a9:0b:96:6d: 32:77:08:6c:23:9a:12:8b:ca:3d:ef:16:d5:ed:06: 5a:b8:b0:33:5a:79:89:65:da:bf:de:a2:f7:e7:25: a8:28:c4:d4:44:dd:88:e5:a3:48:ad:8e:04:00:3e: 1e:83:e6:ed:b1:c7:e6:fa:99:a6:c8:d2:91:55:bf: 9e:fd:15:c3:d0:50:23:dc:c0:e7:12:41:70:38:cc: 6b:c1:8e:dc:82:81:bd:19:ea:ba:01:e8:5e:bb:d9: 1b:d1:c5:e9:11:18:00:b6:53:4c:1d:65:2e:d0:58: 6b:00:0d:a3:af:ed:70:a8:58:81:e8:3f:ab:13:a3: 81:1c:cb:4b:22:36:5a:98:ff:ca:98:55:23:8d:01: 04:b4:fb:e0:62:d2:49:75:e4:26:ef:24:79:ef:3a: 02:2b:dd:90:9d:91:88:ba:c4:52:a4:5c:11:0c:c4: f7:8d:ea:28:2f:06:37:4c:84:9c:7e:72:58:9b:03: a9:9e:b3:66:28:12:3c:55:f3:d4:d2:be:ed:73:13: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:F8:FA:D3:96:3A:C1:94:E5:A1:58:AE:9F:20:1B:63:AF:57:62 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:27:e9:e1:26:21:b9:e7:59:fd:0b:6d:bc:e5:ac:ea:5e:e2: b9:78:01:ed:be:d7:e4:5e:d3:1d:a2:66:b2:05:22:8e:1a:d4: e4:83:f7:75:a8:82:85:f3:29:01:cd:43:9c:14:2b:cc:7c:64: a2:10:78:48:5f:6d:b6:8e:6f:29:67:9b:17:9b:e1:8a:1c:a5: 0c:97:86:9f:28:fb:ab:1e:58:bf:62:86:03:80:4b:0a:f2:aa: 8a:30:3e:c6:37:c0:49:f5:31:b1:9d:99:b5:0f:02:7a:20:05: d8:c2:9c:16:7f:22:1b:e3:5b:99:18:1b:f1:46:b5:a5:c2:48: 6d:64:14:7d:87:1e:27:6e:b2:ea:93:05:9d:8e:c0:b2:05:42: 11:69:63:a8:ca:3e:b3:d5:7c:2e:ea:a9:bd:8b:83:39:c6:e9: 22:02:c5:b7:6d:18:93:29:78:8d:9e:1f:37:45:98:88:52:07: ff:20:41:f6:82:46:e7:46:41:99:17:7a:bd:e7:42:16:1a:eb: 45:c1:ab:e2:74:ce:ee:8f:12:80:c0:3b:55:57:fe:08:20:c7: f3:46:d7:61:6c:db:67:be:17:5a:4c:9d:10:8f:06:cd:d5:6c: 5f:8c:4e:74:22:1c:b1:f0:6d:f4:85:68:d5:5d:03:45:eb:a9: e6:86:6a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNzAyMjA1MTQzWhcNMjUwNzA5MjA1MTQzWjAYMRYwFAYD VQQDEw02ODY1OWJlMC1kNzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofQUMvbtMQ9dLQomtNooHAbE3bHJCVoQbytpdxGuvV1XcrRmocJ4Gd1DPvoF GDB+gjYRZ0x1O6kLlm0ydwhsI5oSi8o97xbV7QZauLAzWnmJZdq/3qL35yWoKMTU RN2I5aNIrY4EAD4eg+btscfm+pmmyNKRVb+e/RXD0FAj3MDnEkFwOMxrwY7cgoG9 Geq6Aeheu9kb0cXpERgAtlNMHWUu0FhrAA2jr+1wqFiB6D+rE6OBHMtLIjZamP/K mFUjjQEEtPvgYtJJdeQm7yR57zoCK92QnZGIusRSpFwRDMT3jeooLwY3TIScfnJY mwOpnrNmKBI8VfPU0r7tcxP3FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJB+PrT ljrBlOWhWK6fIBtjr1diMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJJ+nhJiG551n9C2285azqXuK5eAHtvtfkXtMdomayBSKOGtTkg/d1 qIKF8ykBzUOcFCvMfGSiEHhIX222jm8pZ5sXm+GKHKUMl4afKPurHli/YoYDgEsK 8qqKMD7GN8BJ9TGxnZm1DwJ6IAXYwpwWfyIb41uZGBvxRrWlwkhtZBR9hx4nbrLq kwWdjsCyBUIRaWOoyj6z1Xwu6qm9i4M5xukiAsW3bRiTKXiNnh83RZiIUgf/IEH2 gkbnRkGZF3q950IWGutFwavidM7ujxKAwDtVV/4IIMfzRtdhbNtnvhdaTJ0QjwbN 1WxfjE50Ihyx8G30hWjVXQNF66nmhmoo -----END CERTIFICATE-----Generated at Thu Jul 3 06:02:54 2025 by rpki-client