$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: bfu8qblUjHPMudwFl7LKkW7XJ5qs218JLmpD1kP2sEU= Subject key identifier: EE:6B:76:3A:C2:56:8D:26:CA:E9:E1:F2:36:47:D8:00:83:60:BF:DF Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 096E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 0956 Signing time: Sat 18 Oct 2025 21:14:33 +0000 Manifest this update: Sat 18 Oct 2025 21:14:32 +0000 Manifest next update: Sat 25 Oct 2025 21:14:32 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: tZcJ18UuZSnQpXjMJB0K3K3SP8tt+AU6Kn15touqGiQ=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2414 (0x96e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Oct 18 21:14:32 2025 GMT Not After : Oct 25 21:14:32 2025 GMT Subject: CN=68f40339-b9a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:e8:6f:fc:72:45:33:38:0e:3c:86:ac:bd: fb:9c:c3:6a:63:70:57:d5:cd:41:75:cb:86:b4:e6: fb:de:0b:c8:5c:f8:c2:76:ce:d2:12:81:c3:dc:df: 2b:04:9c:52:cc:c3:de:94:4c:7b:fa:77:22:fd:10: fb:23:0e:32:32:24:e2:90:55:76:a2:5b:6f:2e:52: ac:7b:fd:99:db:31:8b:19:db:8c:bc:8e:e3:6a:1e: 97:ef:84:56:0e:b8:60:ad:b8:a1:b2:1a:41:16:e7: 74:05:22:3e:47:0f:7f:a3:af:74:85:cd:c3:0d:8a: f5:af:91:30:82:96:dc:41:d6:c3:27:5c:9c:b0:d6: fa:d1:8a:f4:b3:28:f4:e2:0e:29:76:ed:6a:cc:03: 31:4b:b3:b2:57:1c:35:16:3c:8e:e9:4e:c5:f4:47: 18:b9:0a:4a:c5:b7:b3:6f:15:f7:9e:70:3c:a4:b6: 1d:b4:ce:27:27:e3:42:1e:e5:45:a1:51:8a:88:ed: be:24:0b:57:1a:eb:e5:42:ee:af:e0:bc:c3:ad:66: c2:90:a9:b2:ab:a7:5e:d7:4f:f3:34:c5:db:fa:e2: 78:0f:44:b0:9c:95:25:14:1b:d0:69:84:18:11:91: 95:25:3e:ba:3b:a6:31:8f:f9:64:72:f9:bb:e3:ab: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6B:76:3A:C2:56:8D:26:CA:E9:E1:F2:36:47:D8:00:83:60:BF:DF X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9e:08:d3:33:3f:21:81:ab:33:8c:d7:ca:2c:35:0b:4b:f7: 04:c4:22:38:73:1b:d7:33:0d:d9:eb:41:2e:fb:47:13:3b:72: 5f:72:16:cc:e0:f9:fe:13:c5:5a:02:b7:0b:24:1c:39:81:aa: 8b:73:ed:e2:4b:e0:eb:75:ac:02:da:01:84:85:25:48:5b:ef: 2d:aa:a8:ec:bb:71:5b:d4:9a:f9:ad:24:c3:44:19:0c:c0:cc: 9b:32:40:cf:3d:6e:5e:6f:3b:6f:dd:88:17:d5:bc:0c:e4:fd: 70:bf:5a:73:98:4d:a9:47:ca:b9:70:dc:75:5a:aa:55:43:0a: 63:9d:16:6b:09:95:ae:0e:bd:18:89:75:02:b3:d2:84:69:72: fa:d9:ea:59:47:1d:10:a7:7a:7c:d1:13:bd:06:74:b8:d8:9f: 33:19:8d:54:27:da:09:6a:33:6c:d5:af:ad:fb:0b:32:fb:eb: b4:ca:9a:87:4c:14:2f:ba:1c:4b:a6:72:a4:11:21:dd:40:87: f1:b7:33:1b:80:10:a5:8b:ac:56:54:92:ed:fb:88:3d:3c:98: 13:5f:72:7c:85:0d:c1:08:c7:ee:f3:12:a0:6d:7e:82:ac:15: cd:b9:e2:80:17:41:7b:77:a5:3f:01:12:4f:5c:08:a0:df:55: f0:20:e2:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUxMDE4MjExNDMyWhcNMjUxMDI1MjExNDMyWjAYMRYwFAYD VQQDEw02OGY0MDMzOS1iOWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLXob/xyRTM4DjyGrL37nMNqY3BX1c1BdcuGtOb73gvIXPjCds7SEoHD3N8r BJxSzMPelEx7+nci/RD7Iw4yMiTikFV2oltvLlKse/2Z2zGLGduMvI7jah6X74RW DrhgrbihshpBFud0BSI+Rw9/o690hc3DDYr1r5EwgpbcQdbDJ1ycsNb60Yr0syj0 4g4pdu1qzAMxS7OyVxw1FjyO6U7F9EcYuQpKxbezbxX3nnA8pLYdtM4nJ+NCHuVF oVGKiO2+JAtXGuvlQu6v4LzDrWbCkKmyq6de10/zNMXb+uJ4D0SwnJUlFBvQaYQY EZGVJT66O6Yxj/lkcvm746uKrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5rdjrC Vo0myunh8jZH2ACDYL/fMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAangjTMz8hgaszjNfKLDULS/cExCI4cxvXMw3Z60Eu+0cTO3JfchbM 4Pn+E8VaArcLJBw5gaqLc+3iS+DrdawC2gGEhSVIW+8tqqjsu3Fb1Jr5rSTDRBkM wMybMkDPPW5ebztv3YgX1bwM5P1wv1pzmE2pR8q5cNx1WqpVQwpjnRZrCZWuDr0Y iXUCs9KEaXL62epZRx0Qp3p80RO9BnS42J8zGY1UJ9oJajNs1a+t+wsy++u0ypqH TBQvuhxLpnKkESHdQIfxtzMbgBCli6xWVJLt+4g9PJgTX3J8hQ3BCMfu8xKgbX6C rBXNueKAF0F7d6U/ARJPXAig31XwIOIZ -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:06 2025 by rpki-client