$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: XVq2PR7bfc1/YZAoSacmEo8c6E9StzD4ZRC6jB9eMSI= Subject key identifier: A7:EA:E9:52:30:C6:77:11:D3:09:14:C4:B4:FC:15:0A:F2:1B:51:11 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 0871 Signing time: Sat 26 Apr 2025 20:25:01 +0000 Manifest this update: Sat 26 Apr 2025 20:25:00 +0000 Manifest next update: Sat 03 May 2025 20:25:00 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: TVAwyjKPdqbUp4/5DoQAJYs4L7GTPKrUZZZ42HORDKM=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: OVL2vodt/AeNcQ/VG7TDRoihubsFrVHE/91iyWU1qa8=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: j3P/lzXkhbJvg4pbwgOopu5SVTceOFM8ziHzhXEdZVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Apr 26 20:25:00 2025 GMT Not After : May 3 20:25:00 2025 GMT Subject: CN=680d411d-1700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:9b:5a:1b:c6:d5:45:8d:53:19:d5:13:8d: dc:12:79:5c:f9:d8:3c:78:72:ce:43:b6:99:26:41: ec:d2:ae:b5:88:d1:1a:60:0c:fd:ae:b6:31:8e:4a: 78:d8:e9:20:62:fa:6d:57:d0:74:7d:ef:0e:9e:a1: b9:29:7c:6e:92:8b:bb:cf:63:11:22:44:5b:ac:33: 65:2d:8c:40:35:4c:4a:08:b1:88:fa:6d:66:3b:f5: 66:91:7c:b3:90:13:6a:a6:c4:2f:0c:6c:03:29:87: ab:b5:16:99:21:58:14:2d:6c:f0:9b:e6:f5:3c:86: d2:b6:95:6e:6f:3e:9f:fb:1e:4b:3b:e8:ce:1c:11: e3:b0:0b:b7:4c:a7:5b:33:1f:ff:0b:e6:f8:13:91: 4c:2e:b5:b8:46:03:d7:72:c1:ca:b9:ce:94:21:bc: 14:88:bd:7d:a3:15:78:e8:20:ee:1b:94:89:67:97: 35:33:58:f9:d9:df:32:94:9d:7c:ad:62:17:ca:0f: a9:73:62:df:77:2b:03:17:a0:77:75:32:1e:56:5a: ad:e9:b5:3a:6e:63:0b:b9:ef:c7:b8:c9:d0:91:9c: ea:5d:84:24:52:5c:16:1b:87:cb:94:8f:51:e9:5e: 75:8d:6d:de:66:92:3e:7b:b1:83:09:be:c5:75:be: 85:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EA:E9:52:30:C6:77:11:D3:09:14:C4:B4:FC:15:0A:F2:1B:51:11 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:b6:43:5e:17:b4:63:53:4d:06:20:45:5b:d7:74:70:77:3c: 74:21:8c:de:a7:50:5c:55:0e:78:ab:e9:23:69:43:c8:23:0e: 1f:18:c0:88:f6:a9:a5:64:bc:37:e5:f8:b8:e1:9f:0f:68:51: 0a:54:3e:92:42:f6:96:77:43:c3:b3:b5:03:bc:51:be:8b:99: 23:b7:4c:07:9b:8d:51:83:70:ba:04:1e:23:da:f8:00:2c:af: df:ed:bf:77:cf:b2:fd:73:8a:6f:7f:95:4f:5f:9a:8e:18:fe: aa:44:0f:19:9d:ed:74:32:80:c5:ad:ca:c9:75:f3:14:7c:96: af:1f:f1:22:17:ed:56:f2:81:01:ec:c2:5a:d5:44:24:03:e9: 8e:26:d9:ad:1b:71:26:26:5d:55:47:2f:f1:ca:b0:71:7c:d9: 4b:ca:2a:3c:30:9f:54:2b:8e:51:c2:ab:b4:8e:a0:fe:a7:92: bd:e4:3e:ff:30:82:ee:0b:20:57:c9:14:4b:91:5a:82:62:db: 4f:dc:de:cc:b3:45:f1:36:98:1b:94:c6:94:af:6e:78:86:f4: 8a:07:4f:81:8d:45:c6:9a:c3:07:47:42:f9:19:c3:d3:7a:91: a2:e9:d7:b7:58:ab:4a:17:29:a1:ab:88:06:da:5f:10:99:a5: 4a:f2:d0:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNDI2MjAyNTAwWhcNMjUwNTAzMjAyNTAwWjAYMRYwFAYD VQQDEw02ODBkNDExZC0xNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjSbWhvG1UWNUxnVE43cEnlc+dg8eHLOQ7aZJkHs0q61iNEaYAz9rrYxjkp4 2OkgYvptV9B0fe8OnqG5KXxukou7z2MRIkRbrDNlLYxANUxKCLGI+m1mO/VmkXyz kBNqpsQvDGwDKYertRaZIVgULWzwm+b1PIbStpVubz6f+x5LO+jOHBHjsAu3TKdb Mx//C+b4E5FMLrW4RgPXcsHKuc6UIbwUiL19oxV46CDuG5SJZ5c1M1j52d8ylJ18 rWIXyg+pc2LfdysDF6B3dTIeVlqt6bU6bmMLue/HuMnQkZzqXYQkUlwWG4fLlI9R 6V51jW3eZpI+e7GDCb7Fdb6FbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfq6VIw xncR0wkUxLT8FQryG1ERMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvtkNeF7RjU00GIEVb13Rwdzx0IYzep1BcVQ54q+kjaUPIIw4fGMCI 9qmlZLw35fi44Z8PaFEKVD6SQvaWd0PDs7UDvFG+i5kjt0wHm41Rg3C6BB4j2vgA LK/f7b93z7L9c4pvf5VPX5qOGP6qRA8Zne10MoDFrcrJdfMUfJavH/EiF+1W8oEB 7MJa1UQkA+mOJtmtG3EmJl1VRy/xyrBxfNlLyio8MJ9UK45Rwqu0jqD+p5K95D7/ MILuCyBXyRRLkVqCYttP3N7Ms0XxNpgblMaUr254hvSKB0+BjUXGmsMHR0L5GcPT epGi6de3WKtKFymhq4gG2l8QmaVK8tCB -----END CERTIFICATE-----Generated at Sun Apr 27 05:25:02 2025 by rpki-client