$ rpki-client -vvf rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft File: toWM6JkRXyxWHHZl74vgaIBoEJw.mft (raw, json) Hash identifier: anmRoXBcIKCz1X2ec6veStIl/wQxKSkIvMfVcfdU6RU= Subject key identifier: 40:94:D0:A6:68:8A:AD:00:A9:31:29:CD:65:EE:E4:A3:ED:FE:81:F9 Authority key identifier: B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C Certificate issuer: /CN=A91D120D/serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Certificate serial: 0951 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft Manifest number: 0939 Signing time: Fri 22 Aug 2025 20:21:56 +0000 Manifest this update: Fri 22 Aug 2025 20:21:55 +0000 Manifest next update: Fri 29 Aug 2025 20:21:55 +0000 Files and hashes: 1: toWM6JkRXyxWHHZl74vgaIBoEJw.crl (hash: q5g6Cj85uoi+vqMdDcJP1i+oRqzAQzYHMeJ5Dji1On8=) 2: 1A4ED0E8A71811EA80A77B1FC4F9AE02.roa (hash: o2ubabJQjRgkyeZ1KZmWpq8Ju1E6mRHeCYVqt6Eg9bc=) 3: 8C79CFC6A6FD11EAA1B00744C4F9AE02.roa (hash: ZhKJiPvJVpmKkzL+YkNpWQyHnorv+gyb0AmGgaJqcWs=) 4: 9C454274FB7711EDA78AAC1DC4F9AE02.roa (hash: ZvBB3zmKVUj3FoNo3LoHC19aHdg/tMgwEIpu4fehNZ4=) 5: 95DC9990D0A211EE9C97373FC4F9AE02.roa (hash: z6k7ctSWW62IFQe+RQT4sXA8JZqwDWiJbhhB0VFDnxM=) 6: 9D83F4E6FB7711EDA78AAC1DC4F9AE02.roa (hash: KelzcdHCtnxA0fy0V8HA1xyHStc3LVcSAxi6LwKWwLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:21:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2385 (0x951) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D120D, serialNumber=B6858CE899115F2C561C7665EF8BE0688068109C Validity Not Before: Aug 22 20:21:55 2025 GMT Not After : Aug 29 20:21:55 2025 GMT Subject: CN=68a8d164-5a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c5:fb:6d:8a:b7:42:a1:48:79:17:ed:62:9e: a9:8d:6e:3f:e9:fa:10:fc:21:b4:50:24:11:66:ae: 7c:04:f9:14:2b:9a:20:b5:7d:45:b5:e7:0e:56:3e: aa:eb:d9:41:06:3e:d4:fc:fc:47:e4:94:85:e6:c6: 17:e9:e4:7d:47:2b:4a:30:a4:d3:22:dc:ec:09:04: eb:04:b9:17:79:f0:96:e8:f9:34:07:fb:54:aa:52: a6:ff:d0:97:2d:21:79:21:43:44:fb:2b:eb:7c:80: 85:c3:87:0a:52:06:71:50:44:2a:77:08:23:17:29: 5f:4f:07:0c:e8:23:82:03:d7:0e:05:9c:dc:90:aa: 13:c1:3b:f0:1d:e3:71:8c:c6:ba:1e:91:aa:69:d1: 78:6f:e4:9d:dd:77:92:13:19:d6:69:3d:61:14:f1: b7:65:4e:23:b6:9b:8b:85:64:40:69:85:3b:4a:20: bd:69:c3:58:d9:1a:bb:9e:09:59:16:c1:fa:5f:9e: f9:fc:6e:8a:88:a4:f9:19:cb:89:ae:4c:67:b7:8f: bf:73:59:10:6c:10:d9:89:3b:00:ec:e0:7b:c4:1e: 6b:7b:5f:4d:1e:7c:fe:6b:ef:2a:93:07:d8:e3:8d: c0:3e:e3:f4:b9:7e:7a:32:ea:ba:4c:a3:2b:3a:a7: 69:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:94:D0:A6:68:8A:AD:00:A9:31:29:CD:65:EE:E4:A3:ED:FE:81:F9 X509v3 Authority Key Identifier: keyid:B6:85:8C:E8:99:11:5F:2C:56:1C:76:65:EF:8B:E0:68:80:68:10:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/toWM6JkRXyxWHHZl74vgaIBoEJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D120D/51E80E98A6E111EA8042416AC4F9AE02/toWM6JkRXyxWHHZl74vgaIBoEJw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:79:26:8b:58:1b:d1:96:99:8e:cb:58:13:6c:4f:9f:c6:34: 26:9b:e9:58:01:fd:5e:3f:1b:b3:f6:9c:77:b8:2c:a1:04:fa: 52:22:5b:33:1e:cc:71:52:66:b5:c4:a3:c4:34:61:4a:1b:23: 55:3c:ab:ba:7c:05:81:df:ee:99:e0:c9:bf:28:fa:17:95:82: d0:b3:a6:b8:34:83:b4:0f:4e:36:f1:f3:bc:68:f0:13:96:94: 19:2d:74:0a:97:82:f3:40:c2:71:53:b0:81:b3:4d:3b:80:a5: 92:90:69:5c:c4:42:08:4b:53:2e:58:37:7b:9b:b7:a3:78:ad: 2b:82:70:d2:7f:45:ed:02:70:e1:dc:0f:0f:3f:d0:8c:36:ed: 45:9d:d4:25:18:af:6c:ba:0d:92:cd:06:94:f9:7b:91:4b:53: 0e:a6:8a:9f:31:bd:ab:d7:2e:a5:98:0c:a7:b2:a8:b2:2f:71: 9f:17:2c:4d:18:fb:67:92:a4:1f:e4:27:b9:a8:aa:e3:3f:a0: 8e:56:19:79:d3:7f:42:ab:4b:f5:14:3b:80:09:df:be:0a:ec: ec:c6:23:ac:03:f5:e8:3b:0a:58:40:08:5f:48:88:a6:bf:d0: a4:ec:ef:8a:13:d3:0f:5d:3c:9c:c5:34:d2:27:0d:44:99:f9: a4:4e:03:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMEQxMTAvBgNVBAUTKEI2ODU4Q0U4OTkxMTVGMkM1NjFDNzY2NUVGOEJFMDY4 ODA2ODEwOUMwHhcNMjUwODIyMjAyMTU1WhcNMjUwODI5MjAyMTU1WjAYMRYwFAYD VQQDEw02OGE4ZDE2NC01YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysX7bYq3QqFIeRftYp6pjW4/6foQ/CG0UCQRZq58BPkUK5ogtX1FtecOVj6q 69lBBj7U/PxH5JSF5sYX6eR9RytKMKTTItzsCQTrBLkXefCW6Pk0B/tUqlKm/9CX LSF5IUNE+yvrfICFw4cKUgZxUEQqdwgjFylfTwcM6COCA9cOBZzckKoTwTvwHeNx jMa6HpGqadF4b+Sd3XeSExnWaT1hFPG3ZU4jtpuLhWRAaYU7SiC9acNY2Rq7nglZ FsH6X575/G6KiKT5GcuJrkxnt4+/c1kQbBDZiTsA7OB7xB5re19NHnz+a+8qkwfY 443APuP0uX56Muq6TKMrOqdpKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECU0KZo iq0AqTEpzWXu5KPt/oH5MB8GA1UdIwQYMBaAFLaFjOiZEV8sVhx2Ze+L4GiAaBCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIwRC81MUU4MEU5OEE2 RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5eFdISFpsNzR2Z2FJQm9F SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RvV002SmtSWHl4V0hIWmw3NHZnYUlCb0VKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIwRC81MUU4MEU5OEE2RTExMUVBODA0MjQxNkFDNEY5QUUwMi90b1dNNkprUlh5 eFdISFpsNzR2Z2FJQm9FSncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMeSaLWBvRlpmOy1gTbE+fxjQmm+lYAf1ePxuz9px3uCyhBPpSIlsz HsxxUma1xKPENGFKGyNVPKu6fAWB3+6Z4Mm/KPoXlYLQs6a4NIO0D0428fO8aPAT lpQZLXQKl4LzQMJxU7CBs007gKWSkGlcxEIIS1MuWDd7m7ejeK0rgnDSf0XtAnDh 3A8PP9CMNu1FndQlGK9sug2SzQaU+XuRS1MOpoqfMb2r1y6lmAynsqiyL3GfFyxN GPtnkqQf5Ce5qKrjP6COVhl5039Cq0v1FDuACd++CuzsxiOsA/XoOwpYQAhfSIim v9Ck7O+KE9MPXTycxTTSJw1EmfmkTgM1 -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:54 2025 by rpki-client