$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: n8GoZteYdDshf10yVaJ4CzlUyHGECzwmCgw11POZo1o= Subject key identifier: 92:88:1E:AB:C4:68:87:2C:68:E5:5E:CB:AD:0E:07:F7:73:31:A1:8E Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 049E Signing time: Thu 24 Apr 2025 23:44:48 +0000 Manifest this update: Thu 24 Apr 2025 23:44:48 +0000 Manifest next update: Thu 01 May 2025 23:44:48 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: rAy+KtKzvqvZrCqrJXkuxxF4zcU915q8dbZf6db2MzQ=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1193 (0x4a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Apr 24 23:44:48 2025 GMT Not After : May 1 23:44:48 2025 GMT Subject: CN=680accf0-14c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:49:aa:ca:24:7a:3b:f9:48:f1:b5:8e:d6:17: 49:8b:5b:e7:15:98:b3:f1:c5:0a:a4:5a:90:db:33: 29:ee:00:7c:9a:4a:0e:f3:5b:bf:32:bd:22:ff:fd: 21:6b:de:08:ef:28:09:60:05:c0:b6:3d:d8:bf:b9: cd:76:9f:48:01:c7:2a:3a:02:79:4a:c5:06:74:b8: 59:b6:de:cb:aa:20:8c:b9:62:2a:b8:a9:f4:77:25: a9:e9:e4:8a:3a:5e:b0:76:61:70:8d:c9:d0:3c:7a: 1e:7b:08:ab:16:0a:b9:50:1b:70:49:41:45:58:c7: 54:c1:93:89:69:be:7a:9f:fe:cf:03:32:65:d4:b1: 89:81:e1:14:7b:3f:8f:24:ce:16:58:d9:15:85:ab: 62:ce:b3:9c:06:b9:e8:f5:ca:c5:a5:55:61:ed:24: c5:0c:00:b1:ec:cd:97:50:c4:53:2e:30:69:b2:37: 35:e7:13:12:46:ee:2d:f2:f6:f4:f6:82:24:46:8d: 3a:77:be:6a:60:d1:2f:a3:cd:ac:03:fb:f7:62:99: 70:46:87:77:2a:44:f1:b5:76:b9:13:49:87:7a:3e: 2e:b5:90:24:7b:ca:5d:0b:2b:b4:3e:88:fd:e2:30: c7:47:fc:b4:d6:5a:53:7f:83:5a:77:22:94:6d:f6: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:1E:AB:C4:68:87:2C:68:E5:5E:CB:AD:0E:07:F7:73:31:A1:8E X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:75:6c:e8:ac:68:b7:45:50:ff:9b:54:ea:7a:dd:cd:3c:c4: 01:c0:2d:a9:1f:8f:86:d5:c6:fc:e8:05:00:53:94:bb:39:7e: 15:56:3f:84:00:2c:08:fd:45:30:29:7c:ff:f9:0a:71:b4:98: d6:23:20:88:61:5c:47:9f:16:a6:ba:f8:4a:c2:29:e4:87:ec: 54:08:7f:e9:46:11:16:07:47:51:5f:17:d3:29:a7:a6:d3:ef: 8d:58:ff:dd:10:ca:f7:19:f1:28:c8:ff:af:a0:90:6c:04:17: ee:18:20:f7:87:0f:a4:ea:f5:42:ae:10:4d:db:4e:4c:2c:b0: 10:f7:a1:c0:0a:59:57:82:d3:7d:4c:6e:7c:86:ac:ca:91:72: ad:24:e9:66:0b:c6:c8:76:01:e8:88:0e:6e:00:3f:bb:8f:e8: 47:9b:fa:14:0e:04:c7:57:90:47:95:b9:9c:a5:54:67:ce:ca: ef:bc:4c:14:de:f9:33:4e:77:9d:fe:1c:81:06:f5:69:6b:05: 1c:e2:5d:01:30:d7:8e:85:0c:a9:d0:ba:79:d9:95:f3:df:e4: 47:0c:fb:5a:7d:72:2c:0a:c8:82:f2:c4:3e:b3:13:ea:cd:8b: fc:d7:17:aa:a1:a4:61:5a:35:8f:0b:61:95:37:c9:cc:48:e2: b9:fc:15:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNDI0MjM0NDQ4WhcNMjUwNTAxMjM0NDQ4WjAYMRYwFAYD VQQDEw02ODBhY2NmMC0xNGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0mqyiR6O/lI8bWO1hdJi1vnFZiz8cUKpFqQ2zMp7gB8mkoO81u/Mr0i//0h a94I7ygJYAXAtj3Yv7nNdp9IAccqOgJ5SsUGdLhZtt7LqiCMuWIquKn0dyWp6eSK Ol6wdmFwjcnQPHoeewirFgq5UBtwSUFFWMdUwZOJab56n/7PAzJl1LGJgeEUez+P JM4WWNkVhatizrOcBrno9crFpVVh7STFDACx7M2XUMRTLjBpsjc15xMSRu4t8vb0 9oIkRo06d75qYNEvo82sA/v3YplwRod3KkTxtXa5E0mHej4utZAke8pdCyu0Poj9 4jDHR/y01lpTf4NadyKUbfbEaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKIHqvE aIcsaOVey60OB/dzMaGOMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXdWzorGi3RVD/m1Tqet3NPMQBwC2pH4+G1cb86AUAU5S7OX4VVj+E ACwI/UUwKXz/+QpxtJjWIyCIYVxHnxamuvhKwinkh+xUCH/pRhEWB0dRXxfTKaem 0++NWP/dEMr3GfEoyP+voJBsBBfuGCD3hw+k6vVCrhBN205MLLAQ96HACllXgtN9 TG58hqzKkXKtJOlmC8bIdgHoiA5uAD+7j+hHm/oUDgTHV5BHlbmcpVRnzsrvvEwU 3vkzTned/hyBBvVpawUc4l0BMNeOhQyp0Lp52ZXz3+RHDPtafXIsCsiC8sQ+sxPq zYv81xeqoaRhWjWPC2GVN8nMSOK5/BVp -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:42 2025 by rpki-client