$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: CTyUfjnkHcI6NXRh1xZ12g7vBC+ubbo+tzakN0DkQto= Subject key identifier: 88:45:C1:53:F3:6E:3D:1F:70:72:04:36:CB:86:2E:17:15:81:5B:03 Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 036E Signing time: Mon 11 Aug 2025 01:09:58 +0000 Manifest this update: Mon 11 Aug 2025 01:09:57 +0000 Manifest next update: Mon 18 Aug 2025 01:09:57 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: N+idKMms9w43V/m7fOXELb1sQeGB6pzC7/GoGCKqBJk=) 2: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: UBiYNqcmtBfIzuh2rKChQRqBKv4o6kiL3PCKwJHHiWM=) 3: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: 5vOwA9yYve8Rd0veqkKYknGLc6ONCvBt3X45gfOUijw=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: SPcUKAYBAtziUJsb1+HLmMDC9dz+I+2POCJimexdaR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 903 (0x387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Aug 11 01:09:57 2025 GMT Not After : Aug 18 01:09:57 2025 GMT Subject: CN=689942e6-dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:b8:ea:cc:4f:8e:f2:fe:e5:2b:14:b0:93: 4a:90:5f:4d:6e:3f:4d:8f:12:d8:39:dc:78:ca:b8: 5d:b1:ec:3c:80:5f:5e:58:1c:3b:2f:78:1a:6d:f8: be:2d:3a:0d:43:57:b1:15:33:3f:ce:01:70:0f:ec: 76:02:3f:ba:a5:f1:89:ff:b3:17:94:e4:83:46:3f: 3f:bc:96:73:78:9b:ea:9a:83:cc:f7:2a:3e:95:38: 12:39:a8:3b:f0:15:55:08:cc:25:a3:b2:b2:86:46: 0c:1f:33:ef:91:4c:55:d3:e0:c9:9c:10:19:4a:4d: 9c:90:d4:02:5c:96:b1:9d:95:3d:09:bc:0b:10:e7: cb:49:2e:c7:fd:32:f2:fd:02:f0:5c:8c:db:d8:f4: 4c:e8:b9:ca:08:81:08:a0:18:b7:4c:bb:c7:39:87: 40:b9:c1:cd:60:3f:59:93:8d:a6:10:51:2b:33:20: 02:cb:2e:98:a5:30:b4:e5:12:c7:41:ba:83:e8:97: 41:6f:5f:ea:26:d0:8e:8c:9b:ed:ea:65:bd:b2:43: 4f:9c:80:76:b3:d0:72:d3:29:5d:fa:09:df:cb:76: 86:30:82:57:79:a8:f9:9c:c7:dc:52:c1:a3:33:ec: d9:d6:d8:bf:9f:85:55:07:bf:43:13:78:7c:4c:85: 6d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:45:C1:53:F3:6E:3D:1F:70:72:04:36:CB:86:2E:17:15:81:5B:03 X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:07:68:c9:61:6b:09:02:9f:74:99:cf:09:7b:8a:eb:5e:9d: 42:49:16:44:e7:02:0e:e2:45:2d:34:da:6b:26:74:95:5b:37: 25:4c:58:3d:60:86:ca:24:cf:bb:15:52:0e:fb:b0:48:c4:7b: dd:75:03:8d:3c:d4:fd:2a:63:8f:8b:eb:54:45:11:ea:e5:d1: 0f:b1:05:8f:b0:a7:3f:fd:c6:6d:07:04:b7:45:1c:15:43:e1: 2d:40:f2:39:bf:41:64:9a:69:59:ea:4c:c4:02:14:da:c8:38: d1:f7:d6:b6:f6:d4:0d:d6:3a:0c:92:2f:47:b8:3b:d9:cc:13: 7a:72:58:b3:c7:94:c8:e2:48:4c:a6:c0:68:c3:be:5e:94:44: 3e:e6:92:b4:d6:0b:4c:73:21:8f:75:97:dc:1e:c2:11:e3:fe: dd:c4:95:4e:59:96:cb:04:3f:e4:60:cf:7a:ec:87:fe:be:8d: 4d:1b:18:c6:e7:cb:1f:38:d3:1e:9c:dc:9f:e0:de:1c:11:8d: 6d:7a:32:84:ed:35:1e:6b:32:43:6c:3d:a2:05:3d:64:b6:b1: 58:ca:14:f6:df:1b:b8:38:d4:be:31:89:1c:2e:cc:f5:b6:53: 82:48:fb:a4:b3:e0:8f:e5:14:28:2b:02:fe:d4:f1:0b:ec:86: 7b:bc:71:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjUwODExMDEwOTU3WhcNMjUwODE4MDEwOTU3WjAYMRYwFAYD VQQDEw02ODk5NDJlNi1kY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Im46sxPjvL+5SsUsJNKkF9Nbj9NjxLYOdx4yrhdsew8gF9eWBw7L3gabfi+ LToNQ1exFTM/zgFwD+x2Aj+6pfGJ/7MXlOSDRj8/vJZzeJvqmoPM9yo+lTgSOag7 8BVVCMwlo7KyhkYMHzPvkUxV0+DJnBAZSk2ckNQCXJaxnZU9CbwLEOfLSS7H/TLy /QLwXIzb2PRM6LnKCIEIoBi3TLvHOYdAucHNYD9Zk42mEFErMyACyy6YpTC05RLH QbqD6JdBb1/qJtCOjJvt6mW9skNPnIB2s9By0yld+gnfy3aGMIJXeaj5nMfcUsGj M+zZ1ti/n4VVB79DE3h8TIVt8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhFwVPz bj0fcHIENsuGLhcVgVsDMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIB2jJYWsJAp90mc8Je4rrXp1CSRZE5wIO4kUtNNprJnSVWzclTFg9 YIbKJM+7FVIO+7BIxHvddQONPNT9KmOPi+tURRHq5dEPsQWPsKc//cZtBwS3RRwV Q+EtQPI5v0FkmmlZ6kzEAhTayDjR99a29tQN1joMki9HuDvZzBN6clizx5TI4khM psBow75elEQ+5pK01gtMcyGPdZfcHsIR4/7dxJVOWZbLBD/kYM967If+vo1NGxjG 58sfONMenNyf4N4cEY1tejKE7TUeazJDbD2iBT1ktrFYyhT23xu4ONS+MYkcLsz1 tlOCSPuks+CP5RQoKwL+1PEL7IZ7vHHH -----END CERTIFICATE-----Generated at Mon Aug 11 04:37:37 2025 by rpki-client