$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: 6wLje3SCcbae9J/FS+0js9ftPuQoRMJUucutSZEEXnY= Subject key identifier: 77:CA:C4:6B:04:F4:1E:4D:95:66:E4:87:5A:EC:E5:EA:81:B2:63:FD Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 08BC Signing time: Thu 18 Sep 2025 20:44:20 +0000 Manifest this update: Thu 18 Sep 2025 20:44:20 +0000 Manifest next update: Thu 25 Sep 2025 20:44:20 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: FleeSaCeMqpUrmdvYZt6VVy0RKnU0C5g/EJ1Y7TPMGM=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Sep 18 20:44:20 2025 GMT Not After : Sep 25 20:44:20 2025 GMT Subject: CN=68cc6f24-df6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d2:42:19:2b:51:07:31:ec:3d:f1:02:81:d0: 8e:e4:6d:16:55:89:ce:f2:f1:34:2e:91:50:15:04: 8b:f2:33:f0:3f:4a:bd:ca:73:f7:2c:2a:b5:69:e6: 1f:4b:c7:f1:16:da:b1:f5:41:7c:87:e5:be:56:6b: 26:be:32:2e:b1:45:26:e8:b8:94:d2:a1:1f:72:33: 0b:02:62:d8:a9:9e:ce:42:d3:36:da:52:15:58:07: 97:20:c7:80:7d:2a:7c:9d:4c:89:4c:69:72:39:03: 0f:10:49:42:26:63:8b:4c:d8:05:bd:06:5d:30:ad: 6a:29:bf:66:6f:ed:e9:54:68:d1:31:02:f8:32:3d: 3e:fc:3f:e8:cd:7f:7f:6d:80:06:4a:4c:d2:fc:7c: 68:2e:00:2d:a6:5f:5f:cc:8f:3a:06:a9:fa:3e:29: 45:fb:b2:48:9e:ba:ab:e5:e8:bf:2c:22:c5:7d:c5: bc:5e:96:f4:e2:b9:75:2e:f2:86:d0:f8:2b:c8:b4: 5e:d1:d2:d6:dd:3c:dd:af:91:47:15:c2:8f:a7:d5: 60:de:47:f1:f9:ad:85:22:5d:3f:23:6a:64:5d:01: 39:4b:ee:42:72:37:2a:ed:99:c5:99:6a:41:d2:18: ea:47:3d:7f:d5:16:b7:1d:63:76:e2:c0:3e:75:3b: b2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CA:C4:6B:04:F4:1E:4D:95:66:E4:87:5A:EC:E5:EA:81:B2:63:FD X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:e3:d9:f9:0f:40:1e:e9:70:22:fd:55:25:85:55:da:71: 1f:27:5b:ce:af:fa:f9:05:6d:70:ff:6f:7b:2e:a6:13:2b:85: a7:3e:cc:55:67:b8:55:a7:56:11:c9:c3:a9:6a:e9:5d:99:e1: 1f:83:0c:87:28:74:4f:e3:91:c9:ef:0f:23:78:f0:d7:e9:a6: 84:33:20:72:58:af:f1:90:33:a8:77:ba:9c:d8:96:07:c1:17: f0:bf:91:49:9c:82:10:09:a5:b0:09:60:dd:74:b0:fa:43:39: 09:f1:c4:68:1a:6e:96:27:bd:19:eb:dd:b9:7d:71:ec:84:87: 52:6c:dd:9a:a5:a0:0d:00:aa:51:f7:89:e5:de:1c:a1:62:13: 7e:a9:6f:7e:bb:03:e1:1c:ae:55:33:06:fd:95:93:96:c8:06: 8c:de:58:0b:5b:a8:44:5b:f8:92:08:92:17:fa:64:09:57:95: 55:1c:42:a7:63:2c:dc:cd:1c:e2:1a:f3:a2:d0:93:8d:b2:c8: 08:1c:d5:88:9d:93:4a:c4:35:82:e0:24:0e:2c:51:a1:37:25: bf:fe:f3:9a:7e:7d:a4:bc:89:16:ba:0f:d2:c0:63:4e:26:f0: 5e:51:03:da:ca:73:ed:77:2b:81:cc:35:4d:a8:7e:89:03:ca: cb:19:71:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwOTE4MjA0NDIwWhcNMjUwOTI1MjA0NDIwWjAYMRYwFAYD VQQDEw02OGNjNmYyNC1kZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNJCGStRBzHsPfECgdCO5G0WVYnO8vE0LpFQFQSL8jPwP0q9ynP3LCq1aeYf S8fxFtqx9UF8h+W+VmsmvjIusUUm6LiU0qEfcjMLAmLYqZ7OQtM22lIVWAeXIMeA fSp8nUyJTGlyOQMPEElCJmOLTNgFvQZdMK1qKb9mb+3pVGjRMQL4Mj0+/D/ozX9/ bYAGSkzS/HxoLgAtpl9fzI86Bqn6PilF+7JInrqr5ei/LCLFfcW8Xpb04rl1LvKG 0PgryLRe0dLW3Tzdr5FHFcKPp9Vg3kfx+a2FIl0/I2pkXQE5S+5Ccjcq7ZnFmWpB 0hjqRz1/1Ra3HWN24sA+dTuyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfKxGsE 9B5NlWbkh1rs5eqBsmP9MB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5tePZ+Q9AHulwIv1VJYVV2nEfJ1vOr/r5BW1w/297LqYTK4WnPsxV Z7hVp1YRycOpauldmeEfgwyHKHRP45HJ7w8jePDX6aaEMyByWK/xkDOod7qc2JYH wRfwv5FJnIIQCaWwCWDddLD6QzkJ8cRoGm6WJ70Z6925fXHshIdSbN2apaANAKpR 94nl3hyhYhN+qW9+uwPhHK5VMwb9lZOWyAaM3lgLW6hEW/iSCJIX+mQJV5VVHEKn YyzczRziGvOi0JONssgIHNWInZNKxDWC4CQOLFGhNyW//vOafn2kvIkWug/SwGNO JvBeUQPaynPtdyuBzDVNqH6JA8rLGXHV -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:40 2025 by rpki-client