$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft File: T90ck6E8upG0-LfyxlGPSLoXC60.mft (raw, json) Hash identifier: 9LMXPZ88DBTVns5ygcUh179VMS+jPoNymI1NRKF3tGI= Subject key identifier: F4:39:42:8A:1B:17:54:23:51:CC:C5:71:2D:C8:D8:5C:DD:9D:13:8A Authority key identifier: 4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD Certificate issuer: /CN=A91BC6DD/serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Certificate serial: 0899 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft Manifest number: 088B Signing time: Sat 14 Jun 2025 20:24:46 +0000 Manifest this update: Sat 14 Jun 2025 20:24:46 +0000 Manifest next update: Sat 21 Jun 2025 20:24:46 +0000 Files and hashes: 1: T90ck6E8upG0-LfyxlGPSLoXC60.crl (hash: PDUAOnhb9fl2FEaYLy7vLrsUU+4T/uq/ee4TYP9bwLI=) 2: F61502A4C0F511EA854EE45FC4F9AE02.roa (hash: X7RAgT98H5oJW9AeQBUUPea1LvMkZ7ZMcojcd1ujO/c=) 3: DB175658E9D711EBA3549B09C4F9AE02.roa (hash: JF8OUqEZ4z+S+pWuRQJ1GwisWg+I2Q1w/kc9aPua3PU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2201 (0x899) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC6DD, serialNumber=4FDD1C93A13CBA91B4F8B7F2C6518F48BA170BAD Validity Not Before: Jun 14 20:24:46 2025 GMT Not After : Jun 21 20:24:46 2025 GMT Subject: CN=684dda8e-bc88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f2:ca:86:2b:12:69:24:4f:0d:e4:76:ee:1f: a9:5e:36:82:eb:2b:3f:d6:c3:c4:90:98:f6:ef:4e: 24:89:0b:e6:bd:4c:10:13:c2:9f:4d:ba:ed:21:1c: 4a:2d:1d:93:f4:3c:34:88:69:ff:b9:18:30:83:dc: 08:83:75:8c:7b:fd:a0:ca:e4:e8:10:d2:03:21:c3: c8:00:3e:30:4e:83:4c:d1:98:f9:ac:68:54:8d:e9: f0:a7:37:19:a0:15:bb:5e:7c:0c:a6:1c:15:a7:7c: 0a:e9:c3:ef:ef:c8:58:9f:98:46:d2:de:1d:df:8d: e0:52:a1:20:d0:6d:9f:94:93:68:57:4e:9d:67:ac: 08:87:66:bc:2e:b1:6d:8f:c1:56:b7:4d:2d:05:3c: 50:f6:be:0b:b2:e9:d9:d0:1a:ee:b8:92:2f:8d:df: 5f:f3:6b:c8:19:2b:e7:55:e3:06:20:ff:b5:9a:f6: 17:76:b0:e1:e5:03:9e:ee:74:22:30:90:b2:e3:b7: 39:0e:a7:12:76:f3:53:06:ff:9e:25:50:cc:16:ad: 3e:61:31:c9:bb:41:a7:7d:d2:92:ca:f8:87:86:c9: 90:42:8d:b8:23:d5:e0:7d:9f:be:e1:63:5d:73:5f: e7:ca:ce:28:cb:ec:7a:ee:2e:b6:5f:09:c6:67:fc: d2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:39:42:8A:1B:17:54:23:51:CC:C5:71:2D:C8:D8:5C:DD:9D:13:8A X509v3 Authority Key Identifier: keyid:4F:DD:1C:93:A1:3C:BA:91:B4:F8:B7:F2:C6:51:8F:48:BA:17:0B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T90ck6E8upG0-LfyxlGPSLoXC60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC6DD/F3FB9056C0F411EAB05DFC5EC4F9AE02/T90ck6E8upG0-LfyxlGPSLoXC60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:d2:0d:44:8a:0b:f5:b7:60:9c:1a:99:c7:ec:5f:bf:67: 04:ee:41:dd:09:d4:e8:3c:9d:77:f7:f9:cc:85:50:66:25:ea: 2a:60:7e:bf:b3:5e:ad:43:7e:32:dc:65:25:89:d9:f9:82:e2: b4:38:db:36:a1:c0:29:b4:bb:92:27:a7:8e:c0:e3:e0:bc:a3: 0f:a6:9e:d2:99:36:45:fd:47:dc:f2:71:07:ad:ab:15:44:ca: 7a:09:7a:2d:72:72:2c:ac:99:24:de:1b:f3:c1:73:d3:e6:15: 1f:3e:b7:fa:cb:22:66:91:11:14:33:82:25:23:39:13:92:25: 48:36:b9:e4:d5:38:ef:25:46:c4:3f:53:fc:80:95:49:04:9c: 21:b7:23:1f:37:23:8e:dd:5f:2f:3f:9d:da:ac:3f:bf:36:56: ea:10:0f:d6:1c:90:1b:9f:0a:e6:a8:1f:bf:63:39:cc:58:81: b8:2d:5e:f7:96:a1:9a:87:89:28:3a:09:de:41:1f:b7:38:f8: b5:31:0c:8d:2c:8f:d3:fc:b0:e9:7c:0f:38:b5:a7:8b:b9:0d: a6:36:ca:c9:0d:22:30:54:b8:48:bb:9b:3b:bd:f8:d7:82:53: 76:00:b0:4c:81:a4:62:de:06:6e:14:f1:1c:2b:f8:c0:73:8e: 30:4c:fc:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM2REQxMTAvBgNVBAUTKDRGREQxQzkzQTEzQ0JBOTFCNEY4QjdGMkM2NTE4RjQ4 QkExNzBCQUQwHhcNMjUwNjE0MjAyNDQ2WhcNMjUwNjIxMjAyNDQ2WjAYMRYwFAYD VQQDEw02ODRkZGE4ZS1iYzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vLKhisSaSRPDeR27h+pXjaC6ys/1sPEkJj2704kiQvmvUwQE8KfTbrtIRxK LR2T9Dw0iGn/uRgwg9wIg3WMe/2gyuToENIDIcPIAD4wToNM0Zj5rGhUjenwpzcZ oBW7XnwMphwVp3wK6cPv78hYn5hG0t4d343gUqEg0G2flJNoV06dZ6wIh2a8LrFt j8FWt00tBTxQ9r4LsunZ0BruuJIvjd9f82vIGSvnVeMGIP+1mvYXdrDh5QOe7nQi MJCy47c5DqcSdvNTBv+eJVDMFq0+YTHJu0GnfdKSyviHhsmQQo24I9XgfZ++4WNd c1/nys4oy+x67i62XwnGZ/zS7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQ5Qoob F1QjUczFcS3I2FzdnROKMB8GA1UdIwQYMBaAFE/dHJOhPLqRtPi38sZRj0i6Fwut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzZERC9GM0ZCOTA1NkMw RjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVwRzAtTGZ5eGxHUFNMb1hD NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Q5MGNrNkU4dXBHMC1MZnl4bEdQU0xvWEM2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzZERC9GM0ZCOTA1NkMwRjQxMUVBQjA1REZDNUVDNEY5QUUwMi9UOTBjazZFOHVw RzAtTGZ5eGxHUFNMb1hDNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrNINRIoL9bdgnBqZx+xfv2cE7kHdCdToPJ139/nMhVBmJeoqYH6/ s16tQ34y3GUlidn5guK0ONs2ocAptLuSJ6eOwOPgvKMPpp7SmTZF/Ufc8nEHrasV RMp6CXotcnIsrJkk3hvzwXPT5hUfPrf6yyJmkREUM4IlIzkTkiVINrnk1TjvJUbE P1P8gJVJBJwhtyMfNyOO3V8vP53arD+/NlbqEA/WHJAbnwrmqB+/YznMWIG4LV73 lqGah4koOgneQR+3OPi1MQyNLI/T/LDpfA84taeLuQ2mNsrJDSIwVLhIu5s7vfjX glN2ALBMgaRi3gZuFPEcK/jAc44wTPxO -----END CERTIFICATE-----Generated at Sun Jun 15 09:54:29 2025 by rpki-client