$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: gGXZJDklbX0X+g/QxSenGgpdMpvHJ6J1LYkorC2XzWQ= Subject key identifier: CB:8F:B7:CA:56:8E:F7:49:94:DB:56:4D:CF:DF:52:FB:A6:43:07:12 Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 0971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 0959 Signing time: Fri 24 Oct 2025 20:56:06 +0000 Manifest this update: Fri 24 Oct 2025 20:56:05 +0000 Manifest next update: Fri 31 Oct 2025 20:56:05 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: KNb7PEYe11xYbOGzYP2kqP7C8f3+Zx5d9JAhAZk2iIQ=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 20:56:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2417 (0x971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Oct 24 20:56:05 2025 GMT Not After : Oct 31 20:56:05 2025 GMT Subject: CN=68fbe7e5-50ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:b7:8c:7e:fd:8e:3e:83:98:5c:41:44:c0: ba:3d:18:35:4f:48:02:75:7b:b3:9e:26:8a:7c:d2: ee:23:b6:95:33:0d:4b:61:ac:d1:95:2b:43:24:73: 6f:0f:16:0a:73:10:aa:0f:f0:99:01:49:f0:c2:6a: 0c:86:2c:0e:b0:70:e0:59:ab:25:e2:3f:33:1f:0f: af:66:5e:45:12:00:56:4b:81:99:5d:49:e2:2b:34: ca:c4:ec:31:4a:a7:13:96:4f:5c:67:17:0a:85:25: 40:6d:54:01:b6:65:02:06:48:db:83:23:88:16:e0: e2:e7:47:56:63:34:3a:66:00:f9:0e:48:e0:c6:89: 16:53:a6:fa:42:0b:ca:40:53:4a:67:c5:d0:cd:55: 15:3f:45:3c:99:76:33:48:b4:94:91:c8:f7:22:d4: 53:bf:45:5f:41:59:9f:24:7d:33:ca:2a:cb:7d:2a: 47:5e:39:dc:c6:a3:64:89:21:56:f5:1e:40:c5:bb: 10:6b:0f:79:8c:90:ef:63:cc:96:ad:1a:45:32:13: d0:43:f0:a2:db:f6:41:4a:63:e9:8e:9e:14:67:85: 2c:88:21:df:ee:78:73:c8:09:1d:2b:90:48:fb:fd: fd:41:6d:cc:61:84:7c:30:1b:e2:ee:2c:4e:0c:8e: c5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8F:B7:CA:56:8E:F7:49:94:DB:56:4D:CF:DF:52:FB:A6:43:07:12 X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d4:46:c0:2b:60:62:6c:57:02:56:f9:22:e7:73:08:18:08: 7c:12:d7:ea:ba:6c:a7:d0:bc:ea:78:16:5e:80:41:e1:16:53: 1f:41:c2:39:a0:f1:b9:95:4a:12:5e:65:72:aa:19:84:21:c5: 66:4a:87:ac:96:69:ab:82:55:25:7d:3b:1e:74:d8:18:da:98: c6:87:26:3a:5b:62:f6:71:0c:b8:91:36:6e:1f:fe:b8:ad:46: 4a:31:9d:44:f5:17:dc:12:51:da:0b:0a:91:78:47:f5:10:f5: ff:eb:be:74:75:c3:9d:2c:8a:42:d0:36:70:db:e2:48:26:aa: b0:85:0a:c8:83:7c:77:92:cc:51:00:48:9c:a4:11:c1:6c:2b: 5b:14:08:67:2e:e6:4a:5e:e0:c9:0a:de:92:86:2d:c3:f5:9e: d7:60:83:ed:36:ea:2f:e9:4c:21:79:8f:29:99:c0:9e:86:46: 10:a2:5c:a5:5f:0c:46:ae:b5:78:d9:8b:19:c9:1e:09:60:c9: 51:1c:73:84:0d:f9:ae:7f:7f:3f:3e:c2:57:c6:c9:6f:00:56: 8b:7d:e4:35:39:4c:f6:bd:7a:11:fa:63:fd:26:11:68:e5:99: 1f:28:00:19:58:ec:c3:7b:c6:7f:92:11:e7:85:07:90:92:94: 26:bf:1a:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUxMDI0MjA1NjA1WhcNMjUxMDMxMjA1NjA1WjAYMRYwFAYD VQQDEw02OGZiZTdlNS01MGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprO3jH79jj6DmFxBRMC6PRg1T0gCdXuzniaKfNLuI7aVMw1LYazRlStDJHNv DxYKcxCqD/CZAUnwwmoMhiwOsHDgWasl4j8zHw+vZl5FEgBWS4GZXUniKzTKxOwx SqcTlk9cZxcKhSVAbVQBtmUCBkjbgyOIFuDi50dWYzQ6ZgD5DkjgxokWU6b6QgvK QFNKZ8XQzVUVP0U8mXYzSLSUkcj3ItRTv0VfQVmfJH0zyirLfSpHXjncxqNkiSFW 9R5AxbsQaw95jJDvY8yWrRpFMhPQQ/Ci2/ZBSmPpjp4UZ4UsiCHf7nhzyAkdK5BI +/39QW3MYYR8MBvi7ixODI7F0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuPt8pW jvdJlNtWTc/fUvumQwcSMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa1EbAK2BibFcCVvki53MIGAh8Etfqumyn0LzqeBZegEHhFlMfQcI5 oPG5lUoSXmVyqhmEIcVmSoeslmmrglUlfTsedNgY2pjGhyY6W2L2cQy4kTZuH/64 rUZKMZ1E9RfcElHaCwqReEf1EPX/6750dcOdLIpC0DZw2+JIJqqwhQrIg3x3ksxR AEicpBHBbCtbFAhnLuZKXuDJCt6Shi3D9Z7XYIPtNuov6UwheY8pmcCehkYQolyl XwxGrrV42YsZyR4JYMlRHHOEDfmuf38/PsJXxslvAFaLfeQ1OUz2vXoR+mP9JhFo 5ZkfKAAZWOzDe8Z/khHnhQeQkpQmvxpG -----END CERTIFICATE-----Generated at Sun Oct 26 06:46:20 2025 by rpki-client