$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: Kq0lQXR5bGNWrTzshtlaL1udrlfP1pX3Vq6Bv+3ouN4= Subject key identifier: 6E:B7:89:49:C0:A6:7E:7E:63:2C:63:6C:42:C2:A6:2F:58:FB:57:D6 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04B9 Signing time: Wed 18 Jun 2025 23:43:31 +0000 Manifest this update: Wed 18 Jun 2025 23:43:30 +0000 Manifest next update: Wed 25 Jun 2025 23:43:30 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: eWBl4cFFwGNg5rVRcVaO3XJFrzgkekqxrzLaItgcRJI=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 23:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Jun 18 23:43:30 2025 GMT Not After : Jun 25 23:43:30 2025 GMT Subject: CN=68534f22-5cf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:72:1c:a0:ca:0f:ce:7b:02:27:6f:e0:d1: d6:8c:bf:92:55:cf:cb:53:26:02:82:bd:d0:80:55: 2a:7f:c4:48:8e:e4:09:d5:22:b8:be:06:e6:c7:d6: e5:66:16:81:e3:4c:ff:a6:14:b8:40:29:82:b6:16: d0:93:20:d5:5c:6b:70:4d:da:2a:79:68:25:92:d8: 30:90:7d:b9:85:e9:41:c7:ef:36:7a:03:f9:18:10: c2:d7:ef:45:ab:5c:c7:b9:1e:f4:64:83:68:d5:7e: ae:62:5e:8b:18:c2:19:92:6c:e4:46:61:8d:b9:7f: cc:05:34:54:b5:c5:3c:9a:5a:01:f5:70:f5:90:dd: 04:00:0d:4c:cc:ed:24:1e:5c:03:e2:b4:b3:7b:9a: 8f:59:25:94:6d:b8:33:77:2b:c8:a8:c8:aa:91:52: 0f:bb:74:94:dd:f0:4a:d7:ec:e6:8d:88:08:ef:2e: 15:c6:c7:3d:ee:b0:0a:36:f3:dd:1c:d2:90:02:d6: 83:dc:d9:e9:e6:5d:f3:73:35:e1:a2:3f:ad:22:c6: 34:4d:84:c8:74:d2:16:5a:a5:1d:bb:ce:38:b9:fd: f3:dc:71:a2:74:f7:49:da:42:aa:53:e9:b3:3f:64: 20:0a:29:84:65:33:4c:5f:28:48:ab:94:6e:95:10: 84:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:89:49:C0:A6:7E:7E:63:2C:63:6C:42:C2:A6:2F:58:FB:57:D6 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:de:32:25:67:cc:34:91:51:53:b8:da:85:2f:db:59:90:f4: 13:d9:68:1c:04:20:fe:16:8b:59:d0:32:44:1e:78:bb:72:9c: 45:cb:4b:de:01:92:45:c6:07:cb:7e:2f:cb:81:7c:8f:81:48: 67:19:d2:3b:ce:87:56:58:d6:b6:4d:58:f7:6b:b7:34:63:c3: 48:b1:56:f3:62:c0:b3:9d:81:2a:df:cb:56:93:e0:ac:6f:b5: e3:33:fd:1f:2b:76:f7:7f:7b:50:d9:8c:bc:04:f6:79:b8:cb: ec:6b:7f:a1:e0:c9:68:10:82:4a:42:fe:75:11:dd:87:1f:e0: 56:75:7d:9f:e1:b7:6f:32:ca:14:5f:e6:94:f5:16:f8:3c:a4: e0:52:01:30:0b:8d:eb:95:44:f1:aa:55:41:8e:b6:88:1e:8c: 44:c9:ae:e7:fc:a4:be:ce:b3:ba:24:01:06:38:d5:a4:72:b5: 27:c0:33:60:93:b2:e7:e5:5b:08:4d:c1:43:64:33:4e:7b:d9: a6:8a:06:57:f2:d8:24:76:1f:ef:e0:37:1a:fe:62:eb:52:55: 6b:9a:6e:da:dd:a4:1b:e0:4d:3d:f4:0a:9e:2a:0d:17:90:07: 71:7c:55:f9:86:44:50:da:23:26:5e:21:16:77:61:10:5a:54: 55:d5:4c:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNjE4MjM0MzMwWhcNMjUwNjI1MjM0MzMwWjAYMRYwFAYD VQQDEw02ODUzNGYyMi01Y2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQhyHKDKD857Aidv4NHWjL+SVc/LUyYCgr3QgFUqf8RIjuQJ1SK4vgbmx9bl ZhaB40z/phS4QCmCthbQkyDVXGtwTdoqeWglktgwkH25helBx+82egP5GBDC1+9F q1zHuR70ZINo1X6uYl6LGMIZkmzkRmGNuX/MBTRUtcU8mloB9XD1kN0EAA1MzO0k HlwD4rSze5qPWSWUbbgzdyvIqMiqkVIPu3SU3fBK1+zmjYgI7y4Vxsc97rAKNvPd HNKQAtaD3Nnp5l3zczXhoj+tIsY0TYTIdNIWWqUdu844uf3z3HGidPdJ2kKqU+mz P2QgCimEZTNMXyhIq5RulRCEowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG63iUnA pn5+YyxjbELCpi9Y+1fWMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi3jIlZ8w0kVFTuNqFL9tZkPQT2WgcBCD+FotZ0DJEHni7cpxFy0ve AZJFxgfLfi/LgXyPgUhnGdI7zodWWNa2TVj3a7c0Y8NIsVbzYsCznYEq38tWk+Cs b7XjM/0fK3b3f3tQ2Yy8BPZ5uMvsa3+h4MloEIJKQv51Ed2HH+BWdX2f4bdvMsoU X+aU9Rb4PKTgUgEwC43rlUTxqlVBjraIHoxEya7n/KS+zrO6JAEGONWkcrUnwDNg k7Ln5VsITcFDZDNOe9mmigZX8tgkdh/v4Dca/mLrUlVrmm7a3aQb4E099AqeKg0X kAdxfFX5hkRQ2iMmXiEWd2EQWlRV1Uww -----END CERTIFICATE-----Generated at Fri Jun 20 10:35:37 2025 by rpki-client