$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: 6CeIgt4ZSgCe8Zx/PD8NEMdhpWFecQAPYVmtb/cJnD8= Subject key identifier: 52:9D:C0:55:C8:DB:DA:B1:B1:5C:4E:30:20:38:8C:F8:23:91:47:6C Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 21A8 Signing time: Tue 04 Nov 2025 16:00:17 +0000 Manifest this update: Tue 04 Nov 2025 16:00:16 +0000 Manifest next update: Tue 11 Nov 2025 16:00:16 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: 20GisVQ4PW/F0Qa8uWxQDa1UXaDA0tmU1NNM2GiH75U=) 2: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: VjkAptpMs60uk/FTlEzkOXSrZIct+SUWx7NuRhE5BeM=) 3: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 4: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 5: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 6: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 7: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8674 (0x21e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Nov 4 16:00:16 2025 GMT Not After : Nov 11 16:00:16 2025 GMT Subject: CN=690a2311-d43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7c:fa:e1:c8:58:5e:3b:34:21:4b:0c:eb:62: c3:82:50:42:48:1a:3c:fa:ac:e0:2a:d8:02:b8:ed: c9:f9:f2:0b:d2:a6:86:c9:4d:c6:4b:30:c7:5c:16: e6:e9:cf:11:5b:1f:c5:3e:dd:20:99:d0:b3:3b:f0: 4e:1a:de:6c:45:eb:b7:9c:fe:a4:46:5b:ac:7e:b7: a2:d8:c5:38:f5:9f:58:9f:db:6f:f6:45:43:b7:13: 81:a4:aa:b1:3c:a3:8c:51:71:c9:34:4a:83:bd:75: c4:fe:ef:08:07:45:3e:5c:dd:4f:4b:7a:d6:87:00: 1f:04:18:ee:ff:15:ec:fe:57:12:28:b4:6f:4d:1a: 6a:44:cf:93:4c:05:b2:9a:2e:b6:0a:53:ca:1f:56: 56:24:c2:d4:75:76:fe:b6:22:2d:72:0c:2f:f1:74: 4d:28:5e:a4:1d:c5:ea:a4:3a:f4:5c:e7:85:eb:79: 52:06:d2:b3:87:e1:ec:99:73:12:a9:3c:fc:38:36: 51:b3:fa:a1:c3:5a:e4:de:17:92:81:42:dc:6c:9c: c6:46:cc:60:02:72:43:db:a7:04:27:9f:dd:02:c5: da:aa:51:97:cf:0c:2a:8e:6a:18:cd:71:06:7f:2e: a3:57:3b:81:11:0d:fe:ae:8a:e4:d5:74:76:1b:8a: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9D:C0:55:C8:DB:DA:B1:B1:5C:4E:30:20:38:8C:F8:23:91:47:6C X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ba:2b:d0:12:e2:70:4d:a2:ae:b3:4c:d5:77:31:20:87:f2: bb:53:63:3c:28:95:9e:2d:15:c3:94:a9:4c:79:c9:59:23:22: 73:60:1d:b3:20:73:1c:68:72:58:cc:74:32:d9:3e:17:50:64: c5:9a:a1:a5:12:25:ce:40:06:43:8a:a8:6b:00:d0:bf:2a:e2: 2c:d6:db:4e:54:15:10:ee:92:b0:2b:c5:03:5e:03:da:da:08: 0d:e9:4f:aa:6e:7e:73:da:1e:06:15:f5:7d:0c:14:31:c5:e6: 76:20:8a:0a:c5:a2:e5:8e:c4:2a:aa:fb:d0:0a:96:35:76:92: 87:c6:fc:b6:3a:5e:45:5e:62:46:e4:5d:e6:f0:6e:ba:db:c5: bd:fe:d2:9c:48:62:51:20:94:75:37:86:f2:77:a1:68:38:90: 2e:c2:55:bb:5c:a7:c4:cf:49:cf:6f:d3:4b:6b:69:15:c1:b1: 72:e7:71:2d:48:e5:ec:bf:aa:2e:6f:c7:c6:f8:cf:89:43:9f: eb:50:59:61:31:79:bb:c6:28:df:82:d6:ff:17:53:8c:a0:99: 79:0d:ce:ff:e0:d6:52:1b:5b:44:df:5c:f3:78:1b:ff:bc:ca: 83:ab:d2:3f:81:7a:a0:1b:03:c7:11:2f:10:47:84:9b:6d:4d: 9d:3d:47:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMTA0MTYwMDE2WhcNMjUxMTExMTYwMDE2WjAYMRYwFAYD VQQDEw02OTBhMjMxMS1kNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHz64chYXjs0IUsM62LDglBCSBo8+qzgKtgCuO3J+fIL0qaGyU3GSzDHXBbm 6c8RWx/FPt0gmdCzO/BOGt5sReu3nP6kRlusfrei2MU49Z9Yn9tv9kVDtxOBpKqx PKOMUXHJNEqDvXXE/u8IB0U+XN1PS3rWhwAfBBju/xXs/lcSKLRvTRpqRM+TTAWy mi62ClPKH1ZWJMLUdXb+tiItcgwv8XRNKF6kHcXqpDr0XOeF63lSBtKzh+HsmXMS qTz8ODZRs/qhw1rk3heSgULcbJzGRsxgAnJD26cEJ5/dAsXaqlGXzwwqjmoYzXEG fy6jVzuBEQ3+rork1XR2G4qrRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKdwFXI 29qxsVxOMCA4jPgjkUdsMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEuivQEuJwTaKus0zVdzEgh/K7U2M8KJWeLRXDlKlMeclZIyJzYB2z IHMcaHJYzHQy2T4XUGTFmqGlEiXOQAZDiqhrANC/KuIs1ttOVBUQ7pKwK8UDXgPa 2ggN6U+qbn5z2h4GFfV9DBQxxeZ2IIoKxaLljsQqqvvQCpY1dpKHxvy2Ol5FXmJG 5F3m8G6628W9/tKcSGJRIJR1N4byd6FoOJAuwlW7XKfEz0nPb9NLa2kVwbFy53Et SOXsv6oub8fG+M+JQ5/rUFlhMXm7xijfgtb/F1OMoJl5Dc7/4NZSG1tE31zzeBv/ vMqDq9I/gXqgGwPHES8QR4SbbU2dPUdt -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:34 2025 by rpki-client