$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: /0dLHJW5yDK8ZfKTVci06nTQiskpYj/u+Ovdd0viQIk= Subject key identifier: D9:D7:4D:77:62:11:DC:63:D0:17:4F:8B:6A:E6:20:79:E9:9D:B5:C1 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04C9 Signing time: Mon 21 Jul 2025 00:02:54 +0000 Manifest this update: Mon 21 Jul 2025 00:02:53 +0000 Manifest next update: Mon 28 Jul 2025 00:02:53 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: gFy2W8y4SZtsDnWa9q0cZJnrKa96x0lZRoemViCbSm4=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1236 (0x4d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Jul 21 00:02:53 2025 GMT Not After : Jul 28 00:02:53 2025 GMT Subject: CN=687d83ad-16fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:41:27:15:83:ce:0e:0e:68:05:6d:17:94: be:fe:69:f2:19:f5:c9:58:41:83:01:99:2d:14:87: 1b:10:57:19:78:bb:81:e7:3f:a6:c8:d5:b2:4a:23: 23:92:80:79:d1:0d:c0:57:a6:1f:cc:77:6f:1a:0d: 71:e2:63:6a:ff:83:f2:81:76:91:6c:78:8c:75:80: b4:27:1a:46:7f:ef:27:1c:4e:21:04:1b:86:6e:64: 1e:80:83:11:f2:52:38:08:53:90:e5:18:ee:b6:38: ef:37:81:89:e8:1d:22:34:07:a7:17:82:fb:2b:41: 02:be:b5:e8:83:31:73:83:28:7f:af:9e:88:f8:0f: ce:d0:82:e3:be:1c:ae:8a:37:4f:15:03:9e:16:f3: 09:3c:60:19:92:89:a4:ce:3a:50:37:3a:2a:ec:5b: d0:ec:cc:1e:97:87:26:3f:4d:ce:32:80:6b:92:20: c2:80:f1:17:70:31:89:92:f4:1e:ab:cf:b6:93:3f: 8f:a3:41:9a:ab:ad:35:03:3e:cb:c8:0d:62:4d:17: 72:fa:e0:c4:5c:57:85:de:c8:15:17:b7:8e:31:28: ce:04:b9:d9:b6:48:9f:b2:8a:01:a7:aa:28:48:dd: 5d:a9:a2:45:5a:32:6f:54:4e:7d:0b:c1:6e:83:50: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:4D:77:62:11:DC:63:D0:17:4F:8B:6A:E6:20:79:E9:9D:B5:C1 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:b1:65:91:04:e3:09:43:12:ca:5a:37:31:4b:76:af:e4: 03:c3:3d:cd:a6:1b:7b:f8:35:b8:7c:16:c0:85:01:94:7f:00: de:98:ae:c2:45:c9:da:a7:34:5f:31:6f:8f:2d:7c:6d:a7:3c: 68:9a:53:1f:4c:e3:1c:13:2b:6c:3a:92:b9:d7:c6:4c:42:09: 24:50:b8:1c:b4:f8:25:11:06:62:91:11:51:46:b3:37:cd:27: ce:99:64:8a:1b:c5:a3:f3:4a:97:f1:6f:15:2b:01:6a:ca:cc: 7d:96:00:53:78:be:62:9d:49:f2:13:51:e1:44:d3:7c:d8:70: 2a:0a:f9:5b:43:eb:2b:19:e9:bc:dc:f3:8b:8c:92:f2:59:ea: 13:07:85:f6:90:22:6f:d0:2b:28:12:28:1a:9e:76:f6:e7:ab: 48:23:ac:32:4b:f1:34:4e:ee:1d:29:3f:a1:0a:1e:64:2e:6c: 95:43:7a:d8:3a:0d:b6:09:30:a5:02:02:3c:cf:0a:35:68:9a: 3d:00:79:9b:bb:0d:24:e6:a7:e4:cb:32:c1:6e:0b:c6:0d:25: 19:54:17:08:ab:81:31:d9:10:1f:df:35:39:48:6a:e7:5e:a0: d1:84:be:3f:88:17:f5:2f:70:b4:82:ea:af:f6:d6:95:93:72: f4:24:c2:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNzIxMDAwMjUzWhcNMjUwNzI4MDAwMjUzWjAYMRYwFAYD VQQDEw02ODdkODNhZC0xNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyVBJxWDzg4OaAVtF5S+/mnyGfXJWEGDAZktFIcbEFcZeLuB5z+myNWySiMj koB50Q3AV6YfzHdvGg1x4mNq/4PygXaRbHiMdYC0JxpGf+8nHE4hBBuGbmQegIMR 8lI4CFOQ5RjutjjvN4GJ6B0iNAenF4L7K0ECvrXogzFzgyh/r56I+A/O0ILjvhyu ijdPFQOeFvMJPGAZkomkzjpQNzoq7FvQ7Mwel4cmP03OMoBrkiDCgPEXcDGJkvQe q8+2kz+Po0Gaq601Az7LyA1iTRdy+uDEXFeF3sgVF7eOMSjOBLnZtkifsooBp6oo SN1dqaJFWjJvVE59C8Fug1C1XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnXTXdi Edxj0BdPi2rmIHnpnbXBMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfWLFlkQTjCUMSylo3MUt2r+QDwz3Npht7+DW4fBbAhQGUfwDemK7C RcnapzRfMW+PLXxtpzxomlMfTOMcEytsOpK518ZMQgkkULgctPglEQZikRFRRrM3 zSfOmWSKG8Wj80qX8W8VKwFqysx9lgBTeL5inUnyE1HhRNN82HAqCvlbQ+srGem8 3POLjJLyWeoTB4X2kCJv0CsoEigannb256tII6wyS/E0Tu4dKT+hCh5kLmyVQ3rY Og22CTClAgI8zwo1aJo9AHmbuw0k5qfkyzLBbgvGDSUZVBcIq4Ex2RAf3zU5SGrn XqDRhL4/iBf1L3C0guqv9taVk3L0JMIZ -----END CERTIFICATE-----Generated at Mon Jul 21 12:32:06 2025 by rpki-client