$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: w/P68lMIHzE8WXLH6oMNv+/e7NzKsLd7wW2MkbiSD/0= Subject key identifier: 43:96:F5:B6:F7:41:04:56:B8:B1:9A:27:68:72:DA:87:F0:D0:66:DF Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 093F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 0927 Signing time: Fri 18 Jul 2025 20:30:32 +0000 Manifest this update: Fri 18 Jul 2025 20:30:32 +0000 Manifest next update: Fri 25 Jul 2025 20:30:32 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: zBaSYkym8OYGR3Fqt3wBz3CMb+lGYg659n8dbjIY84I=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2367 (0x93f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Jul 18 20:30:32 2025 GMT Not After : Jul 25 20:30:32 2025 GMT Subject: CN=687aaee8-76fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1c:3e:e9:a6:98:84:00:58:f1:36:71:04:6a: 99:54:62:06:b4:e6:26:d9:f7:a1:78:54:a0:ee:d7: 29:5f:1f:69:3b:a2:fb:43:34:28:31:3f:e1:2f:53: 7f:3a:8f:19:8d:36:6e:11:9d:70:21:0c:63:12:55: 79:58:c4:db:da:75:1b:1d:65:f2:79:a4:ad:16:49: 84:fa:7e:8b:f6:b4:2f:52:4a:1e:3e:04:e5:ab:f0: 21:74:8e:bf:14:72:92:9b:4c:e9:41:05:ce:13:69: bf:c8:19:6d:41:fc:17:a3:96:98:63:b2:0c:71:52: 7b:ec:82:ff:a1:88:76:67:d7:0a:62:60:79:3f:ac: b9:98:47:14:d2:a0:a4:e0:f1:1a:c6:d7:1f:42:6a: 1d:16:ef:89:a7:e7:d7:aa:d5:22:71:0a:f3:33:3f: ce:df:70:db:56:5b:65:fa:2c:6f:54:3a:74:f8:ab: e4:2e:b6:ad:e5:c8:db:fe:63:3f:ab:17:b3:02:4a: 26:13:74:30:62:f1:d0:99:bf:8f:74:c3:23:19:54: 3b:53:1a:1b:e8:73:fd:2f:dc:4a:b8:20:11:9d:fa: 6d:e8:6f:75:2f:15:80:ec:5a:55:55:ee:9f:3e:30: c5:26:49:94:66:2d:83:3f:dd:52:55:9a:60:d1:46: 45:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:F5:B6:F7:41:04:56:B8:B1:9A:27:68:72:DA:87:F0:D0:66:DF X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ff:06:8b:a2:c1:43:8e:9f:73:20:62:5d:1b:b7:e2:54:ec: 7e:ca:56:cf:3a:90:f2:bc:14:8d:50:70:aa:e5:8f:f3:49:45: 30:a4:a3:e1:35:2c:d6:61:70:3d:f0:c0:35:2f:e3:54:48:3b: 59:39:7d:a6:89:bf:fe:4f:9e:5a:35:9f:c8:b5:95:f5:a2:a8: 28:45:8a:87:3a:a1:01:da:57:57:4f:a9:51:18:ac:c5:0f:e4: 45:df:fa:5e:53:5d:7c:ee:2c:2f:c6:11:69:6c:a4:1f:20:0c: 19:34:bf:6f:20:0c:d7:d5:1f:28:4e:7f:dd:44:6d:6a:f5:15: a6:35:c1:44:fe:77:60:2f:b0:60:d5:e6:2c:31:28:f7:71:b0: 98:57:9a:68:6c:90:7a:2a:9f:48:f2:3e:e1:78:13:e9:6e:06: 15:22:57:4f:01:a5:cb:c7:e9:8e:92:57:ae:07:10:be:d2:6e: 62:44:a8:84:cc:b8:34:6c:df:23:05:27:f7:07:c6:9c:e5:8d: 11:36:cd:ea:af:20:51:82:f8:ca:f0:4f:66:cd:30:d6:15:17: a1:d5:4f:15:52:75:b4:8c:b2:d8:44:5a:49:e1:0c:8a:cd:eb: 6b:d7:e9:2a:df:d7:56:c8:31:a8:ce:01:49:22:e4:b6:a8:e2: 6c:69:8f:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUwNzE4MjAzMDMyWhcNMjUwNzI1MjAzMDMyWjAYMRYwFAYD VQQDEw02ODdhYWVlOC03NmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hw+6aaYhABY8TZxBGqZVGIGtOYm2feheFSg7tcpXx9pO6L7QzQoMT/hL1N/ Oo8ZjTZuEZ1wIQxjElV5WMTb2nUbHWXyeaStFkmE+n6L9rQvUkoePgTlq/AhdI6/ FHKSm0zpQQXOE2m/yBltQfwXo5aYY7IMcVJ77IL/oYh2Z9cKYmB5P6y5mEcU0qCk 4PEaxtcfQmodFu+Jp+fXqtUicQrzMz/O33DbVltl+ixvVDp0+KvkLrat5cjb/mM/ qxezAkomE3QwYvHQmb+PdMMjGVQ7Uxob6HP9L9xKuCARnfpt6G91LxWA7FpVVe6f PjDFJkmUZi2DP91SVZpg0UZFIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOW9bb3 QQRWuLGaJ2hy2ofw0GbfMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz/waLosFDjp9zIGJdG7fiVOx+ylbPOpDyvBSNUHCq5Y/zSUUwpKPh NSzWYXA98MA1L+NUSDtZOX2mib/+T55aNZ/ItZX1oqgoRYqHOqEB2ldXT6lRGKzF D+RF3/peU1187iwvxhFpbKQfIAwZNL9vIAzX1R8oTn/dRG1q9RWmNcFE/ndgL7Bg 1eYsMSj3cbCYV5pobJB6Kp9I8j7heBPpbgYVIldPAaXLx+mOkleuBxC+0m5iRKiE zLg0bN8jBSf3B8ac5Y0RNs3qryBRgvjK8E9mzTDWFReh1U8VUnW0jLLYRFpJ4QyK zetr1+kq39dWyDGozgFJIuS2qOJsaY8q -----END CERTIFICATE-----Generated at Sun Jul 20 07:56:44 2025 by rpki-client