$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: PPlT4dTmqog5nDK6mqGxjNtWjGOSjuRmMQbpFUruGq8= Subject key identifier: 6C:6E:D5:A2:77:57:E2:6A:8F:C4:CB:BF:AD:87:31:22:25:2D:EF:0F Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 0937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 091F Signing time: Wed 02 Jul 2025 20:32:43 +0000 Manifest this update: Wed 02 Jul 2025 20:32:42 +0000 Manifest next update: Wed 09 Jul 2025 20:32:42 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: uHMFMojwcCQhtQ1Wo+10frvaexegeYBIXLqAsaZF6F4=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Jul 2 20:32:42 2025 GMT Not After : Jul 9 20:32:42 2025 GMT Subject: CN=6865976a-0e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8f:84:94:44:8f:29:a5:2a:a9:b1:a9:bf:8b: d1:24:c7:23:24:7b:fb:dc:ec:97:70:b6:b7:0d:f8: c0:60:51:4d:4f:b7:d6:f8:91:f3:99:b3:cd:e8:4f: f1:4b:b1:91:9a:25:53:06:2c:27:ea:5e:20:db:78: 90:ce:bc:a2:3c:22:fb:4b:2e:84:60:03:15:22:da: 6d:56:31:3a:02:00:d0:0f:0c:b8:ab:65:d9:58:64: c4:cd:ac:b3:1b:e3:e9:a8:01:75:70:98:1c:52:f1: 12:d4:34:8d:2f:dd:19:1a:de:6e:b0:f3:b0:2c:84: b7:96:5d:1b:9a:4b:73:ce:34:0e:b3:b3:7d:a8:42: 94:2b:71:6f:5d:ed:48:e4:f9:b9:dd:c4:77:eb:ad: ca:bf:aa:4b:ae:1c:15:e9:8c:ee:64:7a:af:bb:fd: 0c:3e:ec:a3:0a:ec:8a:06:52:79:ad:32:bc:28:09: bd:60:4b:bc:47:14:32:6f:64:7d:d0:4f:a4:93:f7: 86:df:1b:86:7c:13:26:e2:b3:b4:bf:7c:36:fa:f3: 6b:fd:a9:2b:f1:0c:2c:b0:18:c8:0c:df:c8:d2:57: 3c:92:02:e6:9b:c4:79:3c:da:01:bf:2f:2f:65:e8: 21:32:2c:ac:c8:17:3f:83:36:f9:c6:8c:d4:fe:e9: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6E:D5:A2:77:57:E2:6A:8F:C4:CB:BF:AD:87:31:22:25:2D:EF:0F X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:e8:43:67:58:96:d6:c9:82:92:55:a6:f8:6e:c7:80:34:d3: f7:55:6d:c8:70:90:8b:8e:8f:1e:b3:aa:7a:9b:c5:95:85:6a: 30:8f:a2:48:9e:31:f9:cc:6b:90:58:a2:7a:65:c2:a9:42:ea: bc:61:65:c5:68:89:ec:ae:c0:60:92:3a:d8:fb:d9:dd:fb:3e: a3:1d:bc:89:3a:ab:53:ae:ab:71:73:5a:d4:36:9b:b8:81:90: 1a:bc:4b:fe:9f:1f:e5:ff:86:7b:e1:9e:b4:1d:b9:d3:58:46: 09:ad:05:50:08:2a:72:0a:f4:be:90:d3:34:7e:76:d8:30:92: ce:7f:ae:e0:73:75:cb:57:28:37:e4:0f:e1:d6:19:16:86:2e: b2:c7:23:60:eb:fb:83:89:0d:a4:fb:7e:fe:2c:39:e1:62:1c: 32:34:00:c5:7d:6e:cc:20:5f:76:37:6f:ad:6d:51:f6:a2:db: 6e:b7:ef:64:b1:24:9b:33:14:ff:40:d5:10:ac:91:f3:51:d4: 80:b8:24:b6:7a:fa:27:c2:c9:45:ad:bb:d3:ac:1d:22:d6:c2: be:8d:49:ad:02:a3:12:01:0b:15:e4:14:44:00:40:0f:b2:41: cb:cf:ed:eb:3b:0d:16:77:28:fe:9e:9c:d0:4b:06:1a:5e:39: b5:f6:91:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUwNzAyMjAzMjQyWhcNMjUwNzA5MjAzMjQyWjAYMRYwFAYD VQQDEw02ODY1OTc2YS0wZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24+ElESPKaUqqbGpv4vRJMcjJHv73OyXcLa3DfjAYFFNT7fW+JHzmbPN6E/x S7GRmiVTBiwn6l4g23iQzryiPCL7Sy6EYAMVItptVjE6AgDQDwy4q2XZWGTEzayz G+PpqAF1cJgcUvES1DSNL90ZGt5usPOwLIS3ll0bmktzzjQOs7N9qEKUK3FvXe1I 5Pm53cR3663Kv6pLrhwV6YzuZHqvu/0MPuyjCuyKBlJ5rTK8KAm9YEu8RxQyb2R9 0E+kk/eG3xuGfBMm4rO0v3w2+vNr/akr8QwssBjIDN/I0lc8kgLmm8R5PNoBvy8v ZeghMiysyBc/gzb5xozU/ukmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxu1aJ3 V+Jqj8TLv62HMSIlLe8PMB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQ6ENnWJbWyYKSVab4bseANNP3VW3IcJCLjo8es6p6m8WVhWowj6JI njH5zGuQWKJ6ZcKpQuq8YWXFaInsrsBgkjrY+9nd+z6jHbyJOqtTrqtxc1rUNpu4 gZAavEv+nx/l/4Z74Z60HbnTWEYJrQVQCCpyCvS+kNM0fnbYMJLOf67gc3XLVyg3 5A/h1hkWhi6yxyNg6/uDiQ2k+37+LDnhYhwyNADFfW7MIF92N2+tbVH2ottut+9k sSSbMxT/QNUQrJHzUdSAuCS2evonwslFrbvTrB0i1sK+jUmtAqMSAQsV5BREAEAP skHLz+3rOw0Wdyj+npzQSwYaXjm19pGs -----END CERTIFICATE-----Generated at Thu Jul 3 03:08:28 2025 by rpki-client