$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: L19mq9VkQL+r0k752XbfLpW3WZtSaFU8Vc4HlHzdX+Y= Subject key identifier: 71:04:2F:25:57:51:A7:45:1A:E4:71:B9:C9:4D:93:45:A5:8A:00:23 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 089E Signing time: Tue 22 Jul 2025 20:48:15 +0000 Manifest this update: Tue 22 Jul 2025 20:48:14 +0000 Manifest next update: Tue 29 Jul 2025 20:48:14 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: OEdQZLlQLx8rVnhw9dYsEEkXRHOmU612/Al/Tt9+Vcg=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 20:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jul 22 20:48:14 2025 GMT Not After : Jul 29 20:48:14 2025 GMT Subject: CN=687ff90e-c9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f2:7c:9e:b4:0c:93:e3:21:bf:11:98:03:25: e0:55:1b:5c:a8:e9:59:f0:13:22:ee:d0:7a:25:18: 3e:c8:34:50:85:46:ee:d6:43:78:c0:6e:7f:55:16: 05:3b:8a:61:1b:e7:e1:58:d0:c0:2f:40:4e:81:8d: ed:66:04:2c:36:74:bb:f6:5e:71:c6:b2:92:97:09: 12:54:d2:ec:0f:7f:b6:9c:e6:b2:9b:29:0c:fe:54: 11:d5:2e:7b:e9:7e:55:5f:72:e6:12:cc:f5:7c:64: b1:29:67:d8:85:9c:6a:e3:6d:39:df:96:92:de:53: 39:46:e0:8f:1c:55:05:4e:4d:99:ad:11:83:af:c6: 77:c5:c0:ef:39:2e:ea:e3:ad:63:c4:55:ac:e8:2f: 90:a6:0f:2a:16:7e:03:3e:f0:00:3e:b8:b5:ab:a1: dd:fd:6a:f1:91:ed:14:36:53:ea:d0:98:7e:46:d8: 7e:93:2e:15:fc:4a:2e:f1:0a:c3:68:6b:1e:b4:4c: 34:6f:af:9c:93:fd:f9:4c:70:84:bd:e0:ac:61:5b: eb:cc:53:c5:7b:8f:af:f7:42:8e:89:91:e2:98:85: 11:bf:ab:2a:0c:21:22:a3:98:62:be:b4:06:e3:23: 88:22:27:cb:3a:a4:88:05:3b:bf:eb:4d:a4:53:23: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:04:2F:25:57:51:A7:45:1A:E4:71:B9:C9:4D:93:45:A5:8A:00:23 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:6e:c9:f6:4b:db:19:6e:8d:b6:8e:d4:5a:fd:94:b1:73:7a: c5:05:1b:32:6f:72:c4:2d:5a:93:4a:2e:38:93:db:15:ae:41: 76:f0:a2:aa:75:20:4b:e7:4d:ab:b6:63:c7:b2:c7:c7:44:7d: 46:3d:a7:03:ca:51:44:51:cf:ca:4f:f9:23:ab:18:5d:1f:a8: 3b:5b:d1:3e:54:1b:65:e6:de:00:cf:b7:94:8e:5a:e5:aa:9c: e2:aa:d2:57:b8:84:58:be:13:8c:59:ef:c1:87:9b:47:e2:c1: 8c:9d:c6:a7:48:80:88:01:50:02:21:83:90:d7:72:ab:cc:c5: 2a:b6:c4:13:61:f0:f9:6d:14:50:78:e2:4f:d8:05:47:50:23: e0:af:a7:22:f0:4d:fc:a3:5a:cc:4c:92:4f:b9:96:26:b9:91: 9d:ba:59:16:6d:be:7d:52:a5:a7:f8:c6:52:3b:1f:ac:a8:6c: cd:aa:17:05:d8:c4:ca:6f:25:d1:77:96:7c:0f:26:e3:96:6e: 13:ed:8b:a1:5a:7b:39:aa:02:63:8d:b9:e5:42:21:63:84:6b: 6d:6c:63:01:11:b4:26:48:d2:1e:62:96:9e:81:b6:97:5c:ef: 07:19:19:20:ef:b8:ed:50:98:de:74:76:03:61:67:c7:40:48: a3:d7:90:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNzIyMjA0ODE0WhcNMjUwNzI5MjA0ODE0WjAYMRYwFAYD VQQDEw02ODdmZjkwZS1jOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/J8nrQMk+MhvxGYAyXgVRtcqOlZ8BMi7tB6JRg+yDRQhUbu1kN4wG5/VRYF O4phG+fhWNDAL0BOgY3tZgQsNnS79l5xxrKSlwkSVNLsD3+2nOaymykM/lQR1S57 6X5VX3LmEsz1fGSxKWfYhZxq420535aS3lM5RuCPHFUFTk2ZrRGDr8Z3xcDvOS7q 461jxFWs6C+Qpg8qFn4DPvAAPri1q6Hd/Wrxke0UNlPq0Jh+Rth+ky4V/Eou8QrD aGsetEw0b6+ck/35THCEveCsYVvrzFPFe4+v90KOiZHimIURv6sqDCEio5hivrQG 4yOIIifLOqSIBTu/602kUyPDCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEELyVX UadFGuRxuclNk0WligAjMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEbsn2S9sZbo22jtRa/ZSxc3rFBRsyb3LELVqTSi44k9sVrkF28KKq dSBL502rtmPHssfHRH1GPacDylFEUc/KT/kjqxhdH6g7W9E+VBtl5t4Az7eUjlrl qpziqtJXuIRYvhOMWe/Bh5tH4sGMncanSICIAVACIYOQ13KrzMUqtsQTYfD5bRRQ eOJP2AVHUCPgr6ci8E38o1rMTJJPuZYmuZGdulkWbb59UqWn+MZSOx+sqGzNqhcF 2MTKbyXRd5Z8Dybjlm4T7YuhWns5qgJjjbnlQiFjhGttbGMBEbQmSNIeYpaegbaX XO8HGRkg77jtUJjedHYDYWfHQEij15CW -----END CERTIFICATE-----Generated at Wed Jul 23 02:30:51 2025 by rpki-client