$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: LVVtyCk7+PpsDftDWMuCfo4/RvP17h1NXeRtPtL0QjQ= Subject key identifier: 5F:9C:C4:AB:DA:EB:13:77:CB:81:24:EF:B9:E0:24:BC:5D:30:8A:EF Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 0883 Signing time: Fri 30 May 2025 20:50:29 +0000 Manifest this update: Fri 30 May 2025 20:50:29 +0000 Manifest next update: Fri 06 Jun 2025 20:50:29 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: lJYbWZgoQ9zZJ8k+XClNVvX8nsm2krZTNag9MgMh7Ms=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: May 30 20:50:29 2025 GMT Not After : Jun 6 20:50:29 2025 GMT Subject: CN=683a1a15-634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:2e:00:dc:e6:a4:6b:25:ae:a8:80:c8:13: 26:50:97:7b:89:1c:1d:82:75:ad:bc:bd:7e:e5:6f: bd:35:0b:4a:4e:99:b1:d6:99:71:87:ad:eb:70:6d: 3a:59:e8:5b:61:be:cc:47:8d:40:69:e0:ad:de:dd: 00:0e:7a:f2:55:2e:66:5e:86:3d:58:7b:43:13:2d: eb:70:c4:16:01:e4:6c:fa:48:ee:e9:57:15:70:d9: 14:69:5a:1e:93:e0:d3:d1:f0:9c:47:63:dc:dd:b6: d6:fc:9d:4e:e8:1d:e1:86:30:df:69:47:a1:74:e2: 3c:ea:e8:df:5a:8d:04:d4:c0:f4:d5:90:39:e2:cc: 1a:5e:0a:00:01:27:40:c4:1a:6c:cf:49:c9:ac:ce: 1f:2c:a0:1d:f9:5e:aa:8d:a8:41:50:8e:f3:11:c4: 7e:2d:83:20:2f:63:b9:aa:f2:aa:82:66:f9:3d:ef: 2e:43:d5:d9:fb:67:e9:27:06:b6:36:46:7e:7d:ff: de:53:8e:20:ac:33:01:6d:1c:34:13:96:c5:67:01: 21:00:11:de:dd:1c:b7:0e:5c:ab:45:8a:fd:5a:f9: ad:14:e8:ab:74:2d:1f:3b:6f:85:fd:2b:23:15:2d: c3:4b:fd:54:e9:04:85:d4:a5:d9:f3:53:e0:50:18: 6a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9C:C4:AB:DA:EB:13:77:CB:81:24:EF:B9:E0:24:BC:5D:30:8A:EF X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cb:f6:a6:6d:c4:8e:1a:91:2a:0d:25:84:fe:b2:45:cd:3c: 9d:c7:50:43:74:48:05:aa:ed:04:78:21:da:72:db:29:05:c7: db:81:80:43:f7:d1:10:27:41:b0:84:e5:5f:29:db:00:73:90: 5d:6c:10:25:08:c9:75:15:9e:b5:9d:17:ac:de:a6:ae:a8:05: e1:3f:62:ac:54:4a:22:56:67:93:df:f2:59:82:42:1c:2a:2e: 02:7a:72:b5:79:32:67:97:03:50:db:ab:3a:b8:e5:5f:94:0e: 75:f6:b6:59:3c:89:98:7b:c4:c6:67:41:39:d0:da:0c:ab:49: 75:ab:09:22:c1:a8:99:cd:69:9a:d6:48:26:b2:20:87:e9:9a: 71:40:4c:8f:40:db:96:9a:13:b6:01:eb:3f:98:93:bd:3f:91: 66:b4:8c:80:d2:e5:0e:36:7d:fe:ac:89:79:60:59:4f:e8:c3: a2:ce:59:62:8d:46:28:34:28:cf:0e:9f:f8:92:df:56:14:44: 19:17:d3:6b:96:65:0a:24:69:be:7b:cf:73:ca:af:82:35:14: 0c:98:54:4e:3b:d9:2d:bb:87:2e:84:33:6d:7c:5a:d5:3f:da: 79:4d:3a:e9:85:f6:c6:1e:1f:7c:2d:33:83:fd:51:fd:3e:00: e2:bf:7a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNTMwMjA1MDI5WhcNMjUwNjA2MjA1MDI5WjAYMRYwFAYD VQQDEw02ODNhMWExNS02MzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO8uANzmpGslrqiAyBMmUJd7iRwdgnWtvL1+5W+9NQtKTpmx1plxh63rcG06 WehbYb7MR41AaeCt3t0ADnryVS5mXoY9WHtDEy3rcMQWAeRs+kju6VcVcNkUaVoe k+DT0fCcR2Pc3bbW/J1O6B3hhjDfaUehdOI86ujfWo0E1MD01ZA54swaXgoAASdA xBpsz0nJrM4fLKAd+V6qjahBUI7zEcR+LYMgL2O5qvKqgmb5Pe8uQ9XZ+2fpJwa2 NkZ+ff/eU44grDMBbRw0E5bFZwEhABHe3Ry3DlyrRYr9WvmtFOirdC0fO2+F/Ssj FS3DS/1U6QSF1KXZ81PgUBhqqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+cxKva 6xN3y4Ek77ngJLxdMIrvMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2y/ambcSOGpEqDSWE/rJFzTydx1BDdEgFqu0EeCHactspBcfbgYBD 99EQJ0GwhOVfKdsAc5BdbBAlCMl1FZ61nRes3qauqAXhP2KsVEoiVmeT3/JZgkIc Ki4CenK1eTJnlwNQ26s6uOVflA519rZZPImYe8TGZ0E50NoMq0l1qwkiwaiZzWma 1kgmsiCH6ZpxQEyPQNuWmhO2Aes/mJO9P5FmtIyA0uUONn3+rIl5YFlP6MOizlli jUYoNCjPDp/4kt9WFEQZF9NrlmUKJGm+e89zyq+CNRQMmFROO9ktu4cuhDNtfFrV P9p5TTrphfbGHh98LTOD/VH9PgDiv3qS -----END CERTIFICATE-----Generated at Sat May 31 17:26:12 2025 by rpki-client