$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: AbrRn8m8YQkqGqLE1ye6q8xvejzakTQHBJVzMSjiEwY= Subject key identifier: 1A:7A:9A:71:50:9F:B8:A7:BD:51:4B:14:6E:C5:E0:F8:D7:B1:83:B2 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 21A7 Signing time: Sun 02 Nov 2025 15:55:18 +0000 Manifest this update: Sun 02 Nov 2025 15:55:17 +0000 Manifest next update: Sun 09 Nov 2025 15:55:17 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: 4UeSAjtxAsLZ2HM88TNyT8s807doH+2SkojbrR2cpJU=) 2: FEDAEBD8932711F0B9305C4FC4F9AE02.roa (hash: VjkAptpMs60uk/FTlEzkOXSrZIct+SUWx7NuRhE5BeM=) 3: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 4: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 5: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 6: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 7: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8673 (0x21e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Nov 2 15:55:17 2025 GMT Not After : Nov 9 15:55:17 2025 GMT Subject: CN=69077ee5-1b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:31:af:d1:23:24:cc:1f:6c:0d:ab:43:5e: 1c:18:fb:ba:60:be:bd:fc:39:ad:65:75:f0:38:53: a2:3a:1e:2c:c5:e8:d4:f3:71:20:86:53:ac:33:00: 60:b1:a1:57:82:68:8d:70:32:ea:a8:af:7f:21:d6: ef:25:c6:4c:d5:8a:5e:ec:94:86:6b:0c:1b:39:db: 25:38:21:df:94:92:42:76:35:77:92:a4:cf:fd:d5: 92:34:76:79:5d:42:4d:8d:bc:20:5b:89:91:33:5b: 60:17:3d:46:fe:03:34:9a:80:09:ca:3d:a2:c0:57: 07:67:6b:cb:47:de:84:89:db:3e:81:ec:fe:19:d5: 8f:ce:4d:30:ca:a4:fc:3b:62:58:a9:6f:09:e8:33: 33:51:2c:fc:61:06:d9:69:95:b3:9d:ec:5b:af:ed: b4:13:4f:6f:6d:d6:44:62:82:98:59:25:dd:11:d9: 7d:dc:84:d6:d8:6a:0a:44:a5:d0:e2:60:c1:97:e6: e3:76:05:c0:de:3c:b6:5f:7c:17:58:45:1a:64:d6: 8b:9c:16:19:ab:75:07:f5:37:f6:1c:6b:5c:09:9f: 96:81:0c:1e:ef:84:76:47:cf:4f:73:16:0d:15:8a: 9f:a1:6d:80:a4:94:10:e7:7d:6c:81:82:ff:99:54: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7A:9A:71:50:9F:B8:A7:BD:51:4B:14:6E:C5:E0:F8:D7:B1:83:B2 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:42:23:97:15:03:4a:0d:51:98:3e:91:09:8b:af:67:e1:59: 59:da:36:c2:53:3f:71:60:1f:6f:26:09:c8:1a:ed:b6:1f:5f: 42:ed:0e:ae:46:21:e8:4d:d9:0f:32:1c:51:21:5f:57:6a:19: 42:82:39:62:e6:23:a8:ec:4b:e4:b7:40:35:a5:dc:94:2a:d5: ae:61:1c:47:7a:f9:d8:90:60:b9:eb:7c:af:9a:a9:1f:79:ed: e7:d8:1d:b1:da:da:d7:2c:5c:98:5d:1f:e4:1d:62:68:f8:46: e2:02:34:a0:df:b8:12:8f:2a:c0:cb:db:cd:e7:a7:f2:b1:ff: 54:99:43:57:cc:ea:c8:2a:15:68:6d:c0:99:f3:bb:de:0e:a8: a1:fd:16:e8:03:fa:64:1a:8a:99:f9:ca:50:39:b9:2d:66:ad: 9f:65:da:e3:65:98:5c:fa:f2:40:8c:98:52:a2:6b:74:b5:56: 9c:b3:99:8b:b2:a9:2c:bc:71:4a:2e:0c:b3:9c:e0:c6:6d:58: 0f:1e:73:92:db:d9:c4:47:2d:9b:91:8d:4b:73:cb:ff:fb:5b: 18:79:5b:8c:24:81:60:d4:16:f8:d3:c7:37:cc:82:50:ee:52: e0:fd:14:e4:d7:e7:58:d6:80:3a:70:26:d8:02:3e:6d:16:c8: 32:5e:1e:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUxMTAyMTU1NTE3WhcNMjUxMTA5MTU1NTE3WjAYMRYwFAYD VQQDEw02OTA3N2VlNS0xYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0foxr9EjJMwfbA2rQ14cGPu6YL69/DmtZXXwOFOiOh4sxejU83EghlOsMwBg saFXgmiNcDLqqK9/IdbvJcZM1Ype7JSGawwbOdslOCHflJJCdjV3kqTP/dWSNHZ5 XUJNjbwgW4mRM1tgFz1G/gM0moAJyj2iwFcHZ2vLR96Eids+gez+GdWPzk0wyqT8 O2JYqW8J6DMzUSz8YQbZaZWznexbr+20E09vbdZEYoKYWSXdEdl93ITW2GoKRKXQ 4mDBl+bjdgXA3jy2X3wXWEUaZNaLnBYZq3UH9Tf2HGtcCZ+WgQwe74R2R89PcxYN FYqfoW2ApJQQ531sgYL/mVRbbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp6mnFQ n7invVFLFG7F4PjXsYOyMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbQiOXFQNKDVGYPpEJi69n4VlZ2jbCUz9xYB9vJgnIGu22H19C7Q6u RiHoTdkPMhxRIV9XahlCgjli5iOo7Evkt0A1pdyUKtWuYRxHevnYkGC563yvmqkf ee3n2B2x2trXLFyYXR/kHWJo+EbiAjSg37gSjyrAy9vN56fysf9UmUNXzOrIKhVo bcCZ87veDqih/RboA/pkGoqZ+cpQObktZq2fZdrjZZhc+vJAjJhSomt0tVacs5mL sqksvHFKLgyznODGbVgPHnOS29nERy2bkY1Lc8v/+1sYeVuMJIFg1Bb408c3zIJQ 7lLg/RTk1+dY1oA6cCbYAj5tFsgyXh6/ -----END CERTIFICATE-----Generated at Mon Nov 3 10:17:47 2025 by rpki-client