$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: 2IoxYND2wbo0LANyeMS/r9R6vV9MaQecC3oWFCmmiRw= Subject key identifier: BC:C4:16:C3:EA:86:B7:A7:94:67:17:BB:DB:64:82:5A:B7:56:7E:7C Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 08E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 08D3 Signing time: Sun 02 Nov 2025 20:23:00 +0000 Manifest this update: Sun 02 Nov 2025 20:22:59 +0000 Manifest next update: Sun 09 Nov 2025 20:22:59 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: 7PrG8TbIMVXKVQ2e5e119JLwxz4dg1VCpfSQFORy2tk=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2273 (0x8e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Nov 2 20:22:59 2025 GMT Not After : Nov 9 20:22:59 2025 GMT Subject: CN=6907bda3-5205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:00:3d:e1:67:6e:c2:ac:fd:d9:56:00:07: 4f:eb:f0:03:fb:fd:b3:d4:8a:bd:d2:b2:02:fb:f5: dc:f7:e3:69:fd:78:47:ee:73:20:64:53:74:be:f7: b1:eb:f0:24:fc:78:bd:98:08:38:0d:3c:ca:d0:81: 63:2f:dd:34:c5:e8:95:c3:55:ce:2a:7b:4b:d1:dd: 4e:3e:4c:a8:7f:07:50:41:b6:d2:14:8a:de:09:ae: 00:0a:cb:cc:b9:d8:45:76:ec:01:2d:88:01:98:77: b2:bd:52:6a:32:af:25:da:6b:93:49:9d:67:b5:02: d6:06:ce:94:3d:5b:d6:0e:df:5b:19:50:95:43:96: 41:0e:a5:e1:c7:4d:27:4d:d6:44:63:10:19:db:96: be:97:0f:23:08:5a:a3:99:95:49:2b:30:2f:d3:57: b0:63:8f:3c:df:65:55:2e:5c:75:8c:93:5f:e5:8c: f3:a0:01:42:ca:f4:dd:c0:1a:f0:7e:ce:6e:d2:c4: 81:d4:88:a7:0c:ac:8f:d0:17:52:91:ec:b8:31:78: 67:e0:ac:d2:6a:8e:3b:2a:1d:5d:92:70:1f:c0:8c: a6:34:1f:ba:28:0e:35:67:cd:df:e3:c6:1c:1e:cb: ab:d5:0d:d0:8e:e5:0f:b1:44:2f:c7:49:1f:0d:9f: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C4:16:C3:EA:86:B7:A7:94:67:17:BB:DB:64:82:5A:B7:56:7E:7C X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a7:66:9d:45:fe:3e:c5:3d:62:55:9a:8a:7d:cf:4c:e9:f9: 5a:86:41:b4:5f:2c:f5:74:e1:8f:76:82:ea:5a:36:e4:90:45: 20:b9:a3:ce:f3:6b:42:ce:95:b1:ff:48:75:a0:33:54:18:18: 4e:fc:34:f5:07:fa:da:36:3d:f7:fe:af:f2:7d:13:c1:51:3c: 57:df:cf:d6:ed:85:4f:f4:93:ae:eb:11:98:71:21:ad:4f:71: 76:1a:6b:37:ee:3e:aa:42:31:4e:94:de:17:31:d8:b3:30:60: a7:1d:8e:3b:dc:0c:b6:6f:a0:b1:0d:ff:68:ec:e0:59:cd:18: 64:17:b3:6c:fc:4f:89:e3:e6:ed:d3:1f:43:3d:6f:f0:89:a1: 2c:9c:8c:23:62:e7:ba:74:6c:54:2c:53:72:98:bf:04:77:2d: 54:33:35:78:a1:26:dc:df:80:1a:43:f0:19:05:59:ca:23:8d: 73:e6:a5:10:01:1c:67:e2:f1:ee:89:96:e7:cb:f6:30:5f:4b: 05:34:dd:d6:c2:70:c7:e5:d9:d8:d2:e2:25:76:83:22:e6:37: ac:bc:44:76:f5:ed:a0:2b:a1:f7:39:7c:89:5b:de:a9:1f:11: e8:94:fe:96:4e:85:11:10:19:b5:1b:b2:fd:51:8a:d1:e6:a8: 31:46:38:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUxMTAyMjAyMjU5WhcNMjUxMTA5MjAyMjU5WjAYMRYwFAYD VQQDEw02OTA3YmRhMy01MjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6h0APeFnbsKs/dlWAAdP6/AD+/2z1Iq90rIC+/Xc9+Np/XhH7nMgZFN0vvex 6/Ak/Hi9mAg4DTzK0IFjL900xeiVw1XOKntL0d1OPkyofwdQQbbSFIreCa4ACsvM udhFduwBLYgBmHeyvVJqMq8l2muTSZ1ntQLWBs6UPVvWDt9bGVCVQ5ZBDqXhx00n TdZEYxAZ25a+lw8jCFqjmZVJKzAv01ewY48832VVLlx1jJNf5YzzoAFCyvTdwBrw fs5u0sSB1IinDKyP0BdSkey4MXhn4KzSao47Kh1dknAfwIymNB+6KA41Z83f48Yc Hsur1Q3QjuUPsUQvx0kfDZ/UpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzEFsPq hrenlGcXu9tkglq3Vn58MB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrp2adRf4+xT1iVZqKfc9M6flahkG0Xyz1dOGPdoLqWjbkkEUguaPO 82tCzpWx/0h1oDNUGBhO/DT1B/raNj33/q/yfRPBUTxX38/W7YVP9JOu6xGYcSGt T3F2Gms37j6qQjFOlN4XMdizMGCnHY473Ay2b6CxDf9o7OBZzRhkF7Ns/E+J4+bt 0x9DPW/wiaEsnIwjYue6dGxULFNymL8Edy1UMzV4oSbc34AaQ/AZBVnKI41z5qUQ ARxn4vHuiZbny/YwX0sFNN3WwnDH5dnY0uIldoMi5jesvER29e2gK6H3OXyJW96p HxHolP6WToUREBm1G7L9UYrR5qgxRjhU -----END CERTIFICATE-----Generated at Tue Nov 4 12:34:46 2025 by rpki-client