$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: zeqdMnXgUkpWM7fYhwxg6DiHiKRRg3xz2co6tfNTYic= Subject key identifier: 06:0F:E8:00:14:2A:D8:17:D1:8C:89:A2:0F:95:0A:A1:F7:67:1E:EA Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 216F Signing time: Fri 18 Jul 2025 16:01:36 +0000 Manifest this update: Fri 18 Jul 2025 16:01:35 +0000 Manifest next update: Fri 25 Jul 2025 16:01:35 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: RyBPL6FfmCjZk1WP07D+krHp7ufeMZQ53bG9Cel51EQ=) 2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8616 (0x21a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jul 18 16:01:35 2025 GMT Not After : Jul 25 16:01:35 2025 GMT Subject: CN=687a6fdf-8734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:27:ce:c5:9e:19:32:ba:35:45:d7:6a:42:db: 55:2a:58:9b:06:9b:11:cc:f1:04:e4:26:1d:13:9c: 7b:f2:4f:79:4a:72:4b:9e:a0:1c:4a:91:49:d4:1b: f2:64:be:f9:1b:85:41:f9:e0:ce:f1:03:02:bc:19: f8:8d:85:58:65:a6:77:ca:92:d4:2d:71:48:77:e0: c5:30:03:ad:6e:6e:89:36:d3:55:a3:c8:86:c3:80: 24:17:cf:cc:0a:b1:5c:f4:33:b4:6e:e2:3b:92:51: a7:04:7b:2f:71:79:a4:40:5f:58:e3:9a:ee:8a:d1: 33:e4:bc:80:7d:e6:fc:88:56:aa:dc:92:bf:5d:01: 8f:4c:36:e4:83:db:f3:fa:f7:e3:a6:14:f8:cb:f2: 3a:c2:2a:d1:65:12:ea:51:49:cd:60:47:bb:59:e8: 26:93:40:a3:65:39:ba:dd:dc:78:75:30:55:60:eb: 2a:68:38:d5:2c:e5:2c:ef:0a:f7:0d:00:bb:7f:19: 92:a2:5c:e3:1c:10:c6:a8:79:14:74:a3:8c:95:a5: 61:2d:ae:0f:4f:1f:bc:57:34:13:df:31:81:07:07: a3:b4:ca:8b:18:39:fb:64:8b:8b:fa:89:9b:67:f6: 49:f3:32:db:ea:ef:16:56:aa:9f:59:b5:1b:e9:27: 28:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:E8:00:14:2A:D8:17:D1:8C:89:A2:0F:95:0A:A1:F7:67:1E:EA X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:ea:38:fe:7c:79:ba:32:0d:e1:5a:1d:98:ec:c5:71:cf:18: 62:49:9f:60:2f:ca:a9:df:f8:be:04:61:18:c2:08:c3:7d:2d: 2f:e3:61:de:4c:ac:79:07:a2:a4:14:4c:c2:10:0b:5f:6c:46: f5:50:be:b4:b4:6a:7f:6b:32:af:63:37:b9:43:6b:d0:4c:8b: ed:c1:94:a9:c4:f4:72:fa:8a:23:45:7e:e7:fc:48:d7:59:d7: c3:94:2d:2d:02:fc:f8:2a:16:87:88:6b:a6:b9:3f:b1:82:91: 15:95:40:73:2d:a8:91:ff:ca:62:7b:7f:00:89:c0:c1:8d:00: a5:31:b6:57:a0:80:b2:a6:d3:94:70:19:d3:13:9b:8e:32:9b: ae:e7:6f:a7:fd:5b:6f:44:e6:e5:b2:32:55:03:82:91:a8:74: 69:76:39:b2:03:3c:67:e9:3f:c5:b3:19:5a:4a:0f:f3:c0:aa: a2:4d:57:9b:68:27:87:ca:9a:17:1d:62:42:0c:26:1f:b7:68: fd:a0:95:8b:ab:bf:3d:d8:cb:f3:08:36:95:1b:52:c3:d4:20: 8b:23:6e:3a:ef:e6:f5:4a:39:a0:44:66:93:cb:28:73:f2:f0: 3d:1e:85:f4:56:db:72:16:8f:ec:0e:67:78:12:ff:8e:cf:49: dc:8b:fa:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUwNzE4MTYwMTM1WhcNMjUwNzI1MTYwMTM1WjAYMRYwFAYD VQQDEw02ODdhNmZkZi04NzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SfOxZ4ZMro1RddqQttVKlibBpsRzPEE5CYdE5x78k95SnJLnqAcSpFJ1Bvy ZL75G4VB+eDO8QMCvBn4jYVYZaZ3ypLULXFId+DFMAOtbm6JNtNVo8iGw4AkF8/M CrFc9DO0buI7klGnBHsvcXmkQF9Y45ruitEz5LyAfeb8iFaq3JK/XQGPTDbkg9vz +vfjphT4y/I6wirRZRLqUUnNYEe7Wegmk0CjZTm63dx4dTBVYOsqaDjVLOUs7wr3 DQC7fxmSolzjHBDGqHkUdKOMlaVhLa4PTx+8VzQT3zGBBwejtMqLGDn7ZIuL+omb Z/ZJ8zLb6u8WVqqfWbUb6Sco4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYP6AAU KtgX0YyJog+VCqH3Zx7qMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm6jj+fHm6Mg3hWh2Y7MVxzxhiSZ9gL8qp3/i+BGEYwgjDfS0v42He TKx5B6KkFEzCEAtfbEb1UL60tGp/azKvYze5Q2vQTIvtwZSpxPRy+oojRX7n/EjX WdfDlC0tAvz4KhaHiGumuT+xgpEVlUBzLaiR/8pie38AicDBjQClMbZXoICyptOU cBnTE5uOMpuu52+n/VtvROblsjJVA4KRqHRpdjmyAzxn6T/FsxlaSg/zwKqiTVeb aCeHypoXHWJCDCYft2j9oJWLq7892MvzCDaVG1LD1CCLI2467+b1SjmgRGaTyyhz 8vA9HoX0VttyFo/sDmd4Ev+Oz0nci/po -----END CERTIFICATE-----Generated at Sun Jul 20 10:23:42 2025 by rpki-client