$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: fKf2F/VJwT+OY35k/4FwLFZcJtjC9S4uEmM5EztnSRA= Subject key identifier: F9:45:CB:0C:53:90:C9:C4:E0:B2:11:58:49:03:3E:59:16:8A:E0:91 Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04AF Signing time: Sat 31 May 2025 00:07:13 +0000 Manifest this update: Sat 31 May 2025 00:07:12 +0000 Manifest next update: Sat 07 Jun 2025 00:07:12 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: XQNEL1R+qj6t1I6J+8EsBMEEgoQXCpJYUckbZcqxJlo=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1210 (0x4ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: May 31 00:07:12 2025 GMT Not After : Jun 7 00:07:12 2025 GMT Subject: CN=683a4830-1e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1f:97:c9:c0:c4:5a:de:63:7e:cf:77:9a:1e: 3e:cb:10:69:69:23:f4:0a:33:95:14:b6:c0:50:8d: 77:cf:1d:7d:38:1b:bd:cc:88:bd:f2:51:c9:6b:42: ef:07:26:55:82:3e:53:10:02:7c:72:6c:79:7c:00: 09:7e:7a:ef:e2:3d:ec:b5:2f:7b:08:80:14:6a:29: bc:7c:fe:9e:e5:db:e1:f4:cd:db:b1:72:ca:c2:55: 77:b7:60:f5:55:04:43:a8:58:7f:09:16:e7:13:f7: dc:ba:53:d6:bf:90:d4:8f:98:0b:16:31:72:be:92: 78:85:31:c8:97:b2:51:c7:ac:02:b7:1b:48:96:89: fe:5e:88:cc:90:eb:e8:84:49:ff:99:37:de:3b:21: 20:8a:9e:85:9d:00:9b:31:55:fb:63:7c:3e:e1:e5: 7a:8d:84:95:09:31:76:ac:a1:57:d7:fc:99:17:85: 7b:eb:7b:98:a9:be:35:07:40:4a:31:79:ae:36:40: 66:d3:10:93:16:1f:7d:66:9a:ea:36:ea:53:a8:ad: 57:eb:4a:5d:cd:8f:88:71:5b:42:92:f0:1e:a5:fb: e7:8e:d1:57:70:55:25:3c:9b:d6:a3:9c:23:28:a6: 5d:9a:94:ff:b5:15:42:1c:35:5b:52:f8:ee:fb:6a: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:45:CB:0C:53:90:C9:C4:E0:B2:11:58:49:03:3E:59:16:8A:E0:91 X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:69:64:cd:72:35:d0:85:ba:d7:b8:57:4e:66:9a:1e:31:cb: b0:38:d9:57:d6:6e:98:79:a2:3d:e8:b0:52:f3:d1:b7:b0:48: 32:62:c0:12:bf:f2:a0:45:59:02:75:3c:4b:88:4d:8d:ca:35: 28:45:9d:4d:1c:99:fe:18:ea:21:f7:9e:64:fc:17:72:c7:48: 82:05:67:03:51:23:e8:2e:91:75:8c:b3:1e:1b:e2:80:02:29: c7:80:c9:6f:b8:58:49:5d:52:c7:ce:d9:6c:1c:d2:b1:32:49: 94:50:7a:b3:25:3a:fb:eb:a1:71:53:30:eb:21:3a:6e:6b:a5: a5:dc:e0:ba:2c:b5:6a:f0:1b:93:59:4b:3f:c9:ba:25:41:93: 01:0c:67:8e:cd:33:e0:30:b4:f6:d8:25:6e:69:ae:35:dc:9e: 15:d2:4b:0e:1f:e8:02:01:a7:2c:5f:da:58:33:cd:4a:ba:9b: c9:6d:a6:a2:d0:7c:1d:93:2c:d8:d7:36:4b:b2:e2:f1:3d:c3: 44:b6:77:46:2b:00:95:da:90:01:24:93:aa:d6:ff:6e:fe:d7: 6c:f3:bb:15:27:c8:b3:e0:1e:05:96:ae:2c:65:47:5b:9b:8f: d7:1b:d4:00:b5:75:e1:0a:23:e1:44:34:d0:16:fe:8c:bc:53: 01:6b:81:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNTMxMDAwNzEyWhcNMjUwNjA3MDAwNzEyWjAYMRYwFAYD VQQDEw02ODNhNDgzMC0xZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxR+XycDEWt5jfs93mh4+yxBpaSP0CjOVFLbAUI13zx19OBu9zIi98lHJa0Lv ByZVgj5TEAJ8cmx5fAAJfnrv4j3stS97CIAUaim8fP6e5dvh9M3bsXLKwlV3t2D1 VQRDqFh/CRbnE/fculPWv5DUj5gLFjFyvpJ4hTHIl7JRx6wCtxtIlon+XojMkOvo hEn/mTfeOyEgip6FnQCbMVX7Y3w+4eV6jYSVCTF2rKFX1/yZF4V763uYqb41B0BK MXmuNkBm0xCTFh99ZprqNupTqK1X60pdzY+IcVtCkvAepfvnjtFXcFUlPJvWo5wj KKZdmpT/tRVCHDVbUvju+2otIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPlFywxT kMnE4LIRWEkDPlkWiuCRMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtaWTNcjXQhbrXuFdOZpoeMcuwONlX1m6YeaI96LBS89G3sEgyYsAS v/KgRVkCdTxLiE2NyjUoRZ1NHJn+GOoh955k/Bdyx0iCBWcDUSPoLpF1jLMeG+KA AinHgMlvuFhJXVLHztlsHNKxMkmUUHqzJTr766FxUzDrITpua6Wl3OC6LLVq8BuT WUs/ybolQZMBDGeOzTPgMLT22CVuaa413J4V0ksOH+gCAacsX9pYM81KupvJbaai 0HwdkyzY1zZLsuLxPcNEtndGKwCV2pABJJOq1v9u/tds87sVJ8iz4B4Flq4sZUdb m4/XG9QAtXXhCiPhRDTQFv6MvFMBa4Ew -----END CERTIFICATE-----Generated at Sat May 31 16:45:48 2025 by rpki-client