$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: F0JXW9aTFz5UtW761z3bnXWrtmBD5w8uQWMA0cm4K/8= Subject key identifier: 8F:1D:10:55:7C:46:3A:64:B1:80:80:6E:68:55:74:EA:AB:6E:57:7E Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 0926 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 090E Signing time: Fri 30 May 2025 20:33:50 +0000 Manifest this update: Fri 30 May 2025 20:33:49 +0000 Manifest next update: Fri 06 Jun 2025 20:33:49 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: LBERh4RlV7UlwpEX2hMmAM10lWqNpygJVvVNwgvSQmw=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2342 (0x926) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: May 30 20:33:49 2025 GMT Not After : Jun 6 20:33:49 2025 GMT Subject: CN=683a162e-2508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:44:64:97:ff:8b:d2:a3:fd:8e:b2:4b:1d: 13:3c:00:d3:a4:52:3f:48:3c:2c:2f:93:22:d1:bf: 8b:b6:c7:5d:41:51:da:c7:66:01:8f:fb:be:dd:ad: 7a:a8:b4:95:f8:e9:c4:4f:b9:71:cd:33:d6:bc:3c: dc:72:32:6e:7b:a9:e3:7b:4f:f5:1b:ec:05:c7:5a: 16:ca:53:7a:a5:a6:12:2e:5d:1f:1a:e0:45:21:47: 08:80:8b:03:e6:14:c9:f2:00:08:f0:aa:9f:a7:1d: 49:80:51:2a:99:fe:0e:e6:54:e0:de:91:47:ec:67: ea:41:5a:58:f1:bd:04:d1:5c:cb:27:f8:f3:b3:e4: 0a:43:7a:f5:85:1f:1c:26:4e:37:a9:10:25:f9:7d: f0:cd:70:6f:03:8f:0b:8b:a3:3d:89:5f:4e:01:e7: 04:35:0c:90:c3:f2:64:0c:4e:33:01:54:ff:ae:02: 09:0c:65:6a:60:38:77:4c:82:e3:b7:eb:a3:94:3a: 56:20:37:d2:a9:90:32:75:63:7b:d8:bb:32:a6:d2: 49:e4:0f:7b:98:f6:d2:e8:9a:a7:37:5c:b9:8e:82: 29:b6:24:3a:7a:2f:8b:03:47:8b:a4:b8:0c:98:63: 57:fc:88:39:9d:a2:6c:6b:c3:26:71:85:a2:a1:de: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:10:55:7C:46:3A:64:B1:80:80:6E:68:55:74:EA:AB:6E:57:7E X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:59:70:23:9d:0e:3b:39:6a:2b:be:62:90:2c:9a:78:1f:8c: 7b:5d:75:84:51:b8:98:9b:7c:21:b4:d1:49:a3:5f:10:ee:d8: 3d:67:c4:18:64:9b:6e:db:06:c3:4e:b7:17:de:88:54:bb:e6: 40:2b:b1:16:88:86:18:7e:e3:c8:3f:a0:f5:60:8f:b4:0b:db: 79:5e:66:b9:54:53:cf:5a:81:14:46:82:8e:6c:20:4f:d8:72: 59:84:83:f5:50:07:a4:b4:35:96:e3:c1:49:b0:bf:24:0b:ff: 0b:f3:27:3e:3f:de:cb:45:fa:02:65:60:a4:ad:80:59:42:67: be:d1:42:a6:a5:e3:43:7c:87:59:5c:24:8b:bb:cc:b1:3d:07: 30:01:a9:fa:e1:b5:02:2e:57:8d:e8:fa:a7:a6:96:c1:24:e6: 65:a2:0f:9a:84:d1:4b:35:fb:2b:ca:e1:2a:ed:b4:38:bd:b6: 14:e4:ea:67:70:3c:84:3d:35:24:be:76:99:ae:21:4f:9b:ce: 71:f0:94:f5:df:82:92:d2:8a:86:9f:a6:d9:eb:99:b3:eb:d5: 6b:5c:e4:26:79:c7:0b:0c:94:da:8d:cb:d6:c5:a6:3a:0b:4f: d8:9f:3c:87:b3:2d:b5:00:a7:86:a8:4e:bc:2c:a1:05:5b:4b: 3e:e4:a6:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUwNTMwMjAzMzQ5WhcNMjUwNjA2MjAzMzQ5WjAYMRYwFAYD VQQDEw02ODNhMTYyZS0yNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslpEZJf/i9Kj/Y6ySx0TPADTpFI/SDwsL5Mi0b+LtsddQVHax2YBj/u+3a16 qLSV+OnET7lxzTPWvDzccjJue6nje0/1G+wFx1oWylN6paYSLl0fGuBFIUcIgIsD 5hTJ8gAI8Kqfpx1JgFEqmf4O5lTg3pFH7GfqQVpY8b0E0VzLJ/jzs+QKQ3r1hR8c Jk43qRAl+X3wzXBvA48Li6M9iV9OAecENQyQw/JkDE4zAVT/rgIJDGVqYDh3TILj t+ujlDpWIDfSqZAydWN72LsyptJJ5A97mPbS6JqnN1y5joIptiQ6ei+LA0eLpLgM mGNX/Ig5naJsa8MmcYWiod5lZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI8dEFV8 RjpksYCAbmhVdOqrbld+MB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeWXAjnQ47OWorvmKQLJp4H4x7XXWEUbiYm3whtNFJo18Q7tg9Z8QY ZJtu2wbDTrcX3ohUu+ZAK7EWiIYYfuPIP6D1YI+0C9t5Xma5VFPPWoEURoKObCBP 2HJZhIP1UAektDWW48FJsL8kC/8L8yc+P97LRfoCZWCkrYBZQme+0UKmpeNDfIdZ XCSLu8yxPQcwAan64bUCLleN6PqnppbBJOZlog+ahNFLNfsryuEq7bQ4vbYU5Opn cDyEPTUkvnaZriFPm85x8JT134KS0oqGn6bZ65mz69VrXOQmeccLDJTajcvWxaY6 C0/YnzyHsy21AKeGqE68LKEFW0s+5Kb0 -----END CERTIFICATE-----Generated at Sat May 31 17:39:16 2025 by rpki-client