$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: dWOyretamgNaR/PX9fog7S+Wo6pLi6c6ARGiL4JPb7M= Subject key identifier: 89:0B:2E:E1:7E:F4:1A:0D:98:20:79:78:D3:77:A0:9E:7E:04:61:B7 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 2190 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 2157 Signing time: Sat 31 May 2025 15:53:19 +0000 Manifest this update: Sat 31 May 2025 15:53:19 +0000 Manifest next update: Sat 07 Jun 2025 15:53:19 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: fIH3g8gKkagyI/S4/VciAb4BTSx2Tm+fRbAwnAcVk64=) 2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8592 (0x2190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: May 31 15:53:19 2025 GMT Not After : Jun 7 15:53:19 2025 GMT Subject: CN=683b25ef-c5d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:02:8a:7b:12:ae:b2:cb:a6:fc:2c:8f:38: 0d:1e:2d:f1:55:9f:fa:c0:88:27:ec:75:40:b1:d5: a5:11:ab:0b:62:6c:38:ad:f6:55:b9:01:b9:fb:b9: d9:08:0b:b1:d0:8f:83:7d:d4:45:3b:cf:aa:eb:6e: f2:d1:1b:3c:42:48:01:a8:9b:d7:49:10:87:39:23: 12:9b:6d:0c:ce:bd:7e:9a:68:8a:ed:bd:d8:3e:68: f6:02:b8:bc:80:a3:31:9a:b8:e7:8e:5c:b6:f6:e4: 2b:87:2e:cc:30:be:f3:7e:1c:0b:04:4a:29:1c:57: 7c:10:55:a4:e9:2f:22:ae:98:a0:32:f8:b2:88:5e: cc:4f:87:a7:b5:ab:82:b7:2d:2c:b6:72:f4:f7:9a: 9b:f4:2a:08:c9:5f:ba:ab:08:05:81:7b:8d:80:ac: 8b:ad:40:43:45:3d:b6:4f:d1:92:5e:98:7e:1e:cb: b6:19:8d:b2:5e:90:4d:c4:4d:7b:6d:c6:85:7c:09: 0a:8b:d8:83:70:0e:de:ad:4b:d1:83:5a:3a:8b:19: 64:ca:70:a9:c5:f5:ca:13:a6:05:97:6f:f2:e3:65: dc:c8:01:ef:ae:64:3d:60:59:55:a6:e3:26:4e:2c: 72:e0:64:e9:94:a5:b0:71:c0:cc:67:75:46:8b:26: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0B:2E:E1:7E:F4:1A:0D:98:20:79:78:D3:77:A0:9E:7E:04:61:B7 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:7d:f6:f3:24:41:7d:58:a7:f5:a3:86:9b:af:88:eb:08: 5f:b0:e7:7f:cb:a8:9c:c2:6c:66:57:4a:f8:76:f3:05:9e:1e: 97:64:02:71:06:3b:bb:59:b6:c3:25:a4:56:7e:c5:c7:07:05: 99:c9:ab:28:75:39:94:df:ac:dd:dd:4e:3b:de:f3:12:d8:be: 03:cc:7a:59:aa:3e:26:84:80:c6:7d:88:ca:c4:e5:72:6e:4b: cc:c9:b7:00:fe:ab:6d:3c:3e:74:9f:fa:ec:f8:ea:1d:eb:7d: 8f:2a:eb:d9:c9:54:bb:2a:41:ec:62:9c:a0:cd:ad:db:41:04: 64:3d:cc:b0:5a:6e:00:fb:88:5e:b4:57:d0:10:bf:b1:12:f4: 89:ac:73:32:34:07:84:a5:69:30:93:5b:af:29:fd:da:3c:24: 08:12:7b:5b:6e:bc:58:a1:5b:a2:18:dd:9d:86:c6:82:9c:93: 19:a7:1b:98:6a:73:ac:44:d4:6a:41:0f:ab:30:b4:34:a7:73: 09:ce:d8:65:f0:23:5e:19:fb:d5:b0:4e:d4:2d:59:3a:31:2d: bf:e9:41:6d:e8:b9:06:d8:da:a2:77:9c:84:de:c5:2f:01:ad: c9:b3:73:8a:ad:37:07:48:ca:e1:2f:e0:63:d5:31:a5:61:6a: 93:fb:b6:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUwNTMxMTU1MzE5WhcNMjUwNjA3MTU1MzE5WjAYMRYwFAYD VQQDEw02ODNiMjVlZi1jNWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4ECinsSrrLLpvwsjzgNHi3xVZ/6wIgn7HVAsdWlEasLYmw4rfZVuQG5+7nZ CAux0I+DfdRFO8+q627y0Rs8QkgBqJvXSRCHOSMSm20Mzr1+mmiK7b3YPmj2Ari8 gKMxmrjnjly29uQrhy7MML7zfhwLBEopHFd8EFWk6S8irpigMviyiF7MT4entauC ty0stnL095qb9CoIyV+6qwgFgXuNgKyLrUBDRT22T9GSXph+Hsu2GY2yXpBNxE17 bcaFfAkKi9iDcA7erUvRg1o6ixlkynCpxfXKE6YFl2/y42XcyAHvrmQ9YFlVpuMm Tixy4GTplKWwccDMZ3VGiyZK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIkLLuF+ 9BoNmCB5eNN3oJ5+BGG3MB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeK3328yRBfVin9aOGm6+I6whfsOd/y6icwmxmV0r4dvMFnh6XZAJx Bju7WbbDJaRWfsXHBwWZyasodTmU36zd3U473vMS2L4DzHpZqj4mhIDGfYjKxOVy bkvMybcA/qttPD50n/rs+Ood632PKuvZyVS7KkHsYpygza3bQQRkPcywWm4A+4he tFfQEL+xEvSJrHMyNAeEpWkwk1uvKf3aPCQIEntbbrxYoVuiGN2dhsaCnJMZpxuY anOsRNRqQQ+rMLQ0p3MJzthl8CNeGfvVsE7ULVk6MS2/6UFt6LkG2Nqid5yE3sUv Aa3Js3OKrTcHSMrhL+Bj1TGlYWqT+7ak -----END CERTIFICATE-----Generated at Sat May 31 17:34:24 2025 by rpki-client