$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: jcTSeQE/UAI81tfT69XqQmaxkKWrh/52ESvpIuvQtbo= Subject key identifier: 7A:F8:E3:E4:FD:88:34:3F:3A:3B:E1:B5:94:A0:A7:94:D9:F7:CD:18 Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 0960 Signing time: Tue 28 Jul 2026 20:29:04 +0000 Manifest this update: Tue 28 Jul 2026 20:29:04 +0000 Manifest next update: Tue 04 Aug 2026 20:29:04 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: D4WefpVj1UtS3LeZWGmaqn0Qn5X9TlJDjwj6NAqGDOg=) 2: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: 3bV0TzjiZh3KuPq0SqliImca0k0LkcZjFA0YvIEuGRg=) 3: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: l+f+4/9n0vpB3extgQLx1sn5WvnqyOODvFogGPzHRvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jul 28 20:29:04 2026 GMT Not After : Aug 4 20:29:04 2026 GMT Subject: CN=6a691110-8015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e6:74:29:d1:07:1e:60:cc:4b:8a:d4:56:9f: 43:82:8a:ad:4a:1c:c6:ee:c0:a3:c7:d7:b4:5c:13: 89:d2:cb:94:7c:3a:68:c5:db:dc:ef:d2:24:54:32: 7f:a7:68:44:c7:43:ec:64:59:7b:67:d6:45:00:d9: 60:6e:b6:cf:b1:de:33:71:1b:c9:b1:0b:91:a0:32: 82:0a:dd:b8:60:fe:9f:cb:c2:b6:4e:3e:78:db:a4: 27:d9:35:4d:80:31:66:0d:69:c8:6b:03:b3:f6:73: fb:13:8d:20:4b:c9:78:c6:85:85:ac:ce:d4:c8:75: 56:27:4a:13:f3:04:90:94:75:43:ef:90:09:07:54: 40:80:77:d6:13:dd:7f:7d:76:95:ce:c1:8c:0d:47: c1:56:9e:28:c7:e4:a3:d5:47:0a:df:b7:4d:a9:bb: fb:06:b6:93:46:b3:97:ae:b2:80:ca:a2:2f:a3:0b: 0e:c9:1f:b5:47:4d:89:81:99:52:75:d9:42:85:f7: 1a:79:3a:86:f2:03:a8:33:71:dd:f7:27:74:8f:71: dc:ad:7a:c0:7e:04:c3:28:80:50:14:4a:e8:96:ca: c8:df:ff:2b:e3:b4:43:da:f6:be:d8:93:89:2e:22: d1:08:35:90:e3:7c:01:90:87:40:12:e6:46:2b:d2: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F8:E3:E4:FD:88:34:3F:3A:3B:E1:B5:94:A0:A7:94:D9:F7:CD:18 X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:94:9d:a4:ea:07:69:87:42:5c:0c:6a:34:e4:1a:d1:f0:4c: b9:b9:10:fc:89:01:25:7f:9f:2a:e0:15:70:47:0c:1e:31:a2: d5:ea:bd:4d:8d:d3:3f:a3:c5:b5:2a:26:da:9e:8a:b2:30:78: 96:03:4f:f5:cf:9d:dc:16:cf:22:dc:37:1d:3d:ce:41:ff:ac: e2:cc:49:95:c3:90:43:c1:be:6a:58:ea:54:9d:d1:4f:ea:9d: 60:31:06:5e:aa:9d:58:0c:af:00:71:76:4c:56:c2:8b:a9:70: 5d:85:fe:f0:19:4a:80:56:af:ce:d7:ba:ab:63:eb:be:95:9c: af:ff:7e:9c:e8:2b:e9:df:3c:e0:0f:3c:a5:f4:a9:bf:a9:b6: 0b:62:54:0d:06:f9:c1:bb:06:c3:fa:37:32:a4:2d:ea:ba:6f: bc:f5:7d:de:2a:33:c2:56:7a:ad:9b:eb:a8:86:5a:09:3f:cc: 8b:42:87:e4:af:bf:a3:a5:b5:4f:d8:f8:4e:cf:03:e3:35:66: c5:ed:60:84:5f:ff:63:88:2e:c7:39:f8:27:1b:79:e2:6b:04: d5:c0:e3:ec:19:e0:29:21:15:e3:66:2d:b3:59:0a:52:60:81: 36:46:26:94:f5:7a:64:1c:55:5f:c2:a5:1b:bd:07:40:67:91: 62:2c:17:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjYwNzI4MjAyOTA0WhcNMjYwODA0MjAyOTA0WjAYMRYwFAYD VQQDEw02YTY5MTExMC04MDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuZ0KdEHHmDMS4rUVp9DgoqtShzG7sCjx9e0XBOJ0suUfDpoxdvc79IkVDJ/ p2hEx0PsZFl7Z9ZFANlgbrbPsd4zcRvJsQuRoDKCCt24YP6fy8K2Tj5426Qn2TVN gDFmDWnIawOz9nP7E40gS8l4xoWFrM7UyHVWJ0oT8wSQlHVD75AJB1RAgHfWE91/ fXaVzsGMDUfBVp4ox+Sj1UcK37dNqbv7BraTRrOXrrKAyqIvowsOyR+1R02JgZlS ddlChfcaeTqG8gOoM3Hd9yd0j3HcrXrAfgTDKIBQFErolsrI3/8r47RD2va+2JOJ LiLRCDWQ43wBkIdAEuZGK9JKywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHr44+T9 iDQ/OjvhtZSgp5TZ980YMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWJSdpOoHaYdCXAxqNOQa0fBMubkQ/IkBJX+fKuAVcEcMHjGi1eq9TY3TP6PF tSom2p6KsjB4lgNP9c+d3BbPItw3HT3OQf+s4sxJlcOQQ8G+aljqVJ3RT+qdYDEG XqqdWAyvAHF2TFbCi6lwXYX+8BlKgFavzte6q2PrvpWcr/9+nOgr6d884A88pfSp v6m2C2JUDQb5wbsGw/o3MqQt6rpvvPV93iozwlZ6rZvrqIZaCT/Mi0KH5K+/o6W1 T9j4Ts8D4zVmxe1ghF//Y4guxzn4Jxt54msE1cDj7BngKSEV42Yts1kKUmCBNkYm lPV6ZBxVX8KlG70HQGeRYiwXOA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:45 2026 by rpki-client