$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: q2lM0xKzzJMm/3ZCEPAYxGP4kN8qTk2yzqU1Oiul3ow= Subject key identifier: 7E:4D:CD:92:F1:3C:97:BD:14:F4:34:11:CC:2E:5E:5D:42:15:57:BE Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04C0 Signing time: Thu 03 Jul 2025 00:12:16 +0000 Manifest this update: Thu 03 Jul 2025 00:12:15 +0000 Manifest next update: Thu 10 Jul 2025 00:12:15 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: pLbPEiwAeSWfNHk75nk0s+rjNmgJFqaYrBQx1C+/dwk=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Jul 3 00:12:15 2025 GMT Not After : Jul 10 00:12:15 2025 GMT Subject: CN=6865cadf-227a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:88:80:e3:f3:0f:41:30:fb:a3:b5:a5:f7: 83:fa:7f:e1:d7:cd:6f:e2:e8:17:10:fd:aa:e0:6b: f0:32:51:eb:e6:88:2c:0b:0b:ee:fa:91:ce:06:12: 55:76:37:45:5a:61:d4:e9:bb:ca:a6:ec:50:66:ec: 0d:ee:69:58:89:16:11:5c:71:29:c9:c3:aa:a5:f2: 4c:69:f9:24:ca:2b:e0:90:31:b7:35:34:15:dd:a8: 72:cc:7a:d4:22:55:f9:dd:a5:85:2b:c7:41:a1:a3: 83:48:79:97:27:aa:e6:0b:13:64:2f:4d:ec:aa:28: 41:98:45:ab:b6:fe:4c:56:67:d7:b0:81:83:ea:21: fc:f1:98:16:02:f7:ac:44:e0:7d:dc:6a:fd:85:f6: 59:bb:33:25:73:4f:29:c4:c8:3c:32:a8:1d:02:30: 38:e1:4c:5a:6d:d7:0d:dc:78:7f:28:f0:66:db:6b: 53:b5:ea:76:4f:d9:f2:93:5f:eb:ee:e4:18:5a:b7: 61:30:a2:61:e1:67:9a:5f:fa:4e:b6:e1:de:4d:0f: 30:c3:6e:ea:9e:c4:03:e6:e4:74:be:0b:06:cc:87: aa:d5:90:4e:9f:66:4f:c9:c5:4a:c6:fd:02:b0:9f: fc:45:5d:c6:54:1a:bb:de:12:cb:92:4b:7a:59:35: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:CD:92:F1:3C:97:BD:14:F4:34:11:CC:2E:5E:5D:42:15:57:BE X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b5:99:dc:1b:04:7d:4c:95:45:b7:a7:63:39:6f:d6:47:0f: 5e:b0:1d:5b:29:77:05:87:53:9b:24:2c:9f:13:d1:ac:d1:6c: ba:01:12:1c:f3:ef:b9:55:75:04:20:a6:cc:f5:51:09:88:fc: de:a0:b5:cd:d1:e4:67:85:61:0c:04:de:3b:33:08:29:b2:3a: 92:0a:93:1e:9f:b8:64:3d:e3:85:3a:22:93:4a:d3:40:f0:2d: 23:de:9d:ff:82:bd:98:db:25:e6:a8:7a:2c:69:5c:ca:b7:64: 5b:67:7a:6e:5f:3c:50:e0:91:c7:07:82:a8:bd:e3:14:f9:07: e1:0c:03:8a:3a:ce:42:0b:93:d9:e8:36:33:f5:64:28:60:9b: 1f:c0:dd:33:8e:92:64:1f:99:0f:f2:cb:c7:f8:ec:19:8d:7c: c7:29:d7:9c:91:54:45:e9:7d:97:9c:c6:bd:f7:13:19:06:8d: 1e:d2:b6:33:5d:34:59:b7:42:8c:47:4a:63:b5:78:38:0e:50: f3:1c:08:c8:8b:f6:d0:6d:be:45:91:a5:13:aa:5b:3a:78:64: 78:91:32:42:1f:a9:d5:e0:8c:f2:43:a2:35:03:77:34:09:44: a3:99:49:b1:ad:00:e4:4c:c0:ec:de:d5:f1:f7:cc:a7:c3:e7: a7:14:4f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNzAzMDAxMjE1WhcNMjUwNzEwMDAxMjE1WjAYMRYwFAYD VQQDEw02ODY1Y2FkZi0yMjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4CIgOPzD0Ew+6O1pfeD+n/h181v4ugXEP2q4GvwMlHr5ogsCwvu+pHOBhJV djdFWmHU6bvKpuxQZuwN7mlYiRYRXHEpycOqpfJMafkkyivgkDG3NTQV3ahyzHrU IlX53aWFK8dBoaODSHmXJ6rmCxNkL03sqihBmEWrtv5MVmfXsIGD6iH88ZgWAves ROB93Gr9hfZZuzMlc08pxMg8MqgdAjA44UxabdcN3Hh/KPBm22tTtep2T9nyk1/r 7uQYWrdhMKJh4WeaX/pOtuHeTQ8ww27qnsQD5uR0vgsGzIeq1ZBOn2ZPycVKxv0C sJ/8RV3GVBq73hLLkkt6WTUQwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5NzZLx PJe9FPQ0EcwuXl1CFVe+MB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdtZncGwR9TJVFt6djOW/WRw9esB1bKXcFh1ObJCyfE9Gs0Wy6ARIc 8++5VXUEIKbM9VEJiPzeoLXN0eRnhWEMBN47MwgpsjqSCpMen7hkPeOFOiKTStNA 8C0j3p3/gr2Y2yXmqHosaVzKt2RbZ3puXzxQ4JHHB4KoveMU+QfhDAOKOs5CC5PZ 6DYz9WQoYJsfwN0zjpJkH5kP8svH+OwZjXzHKdeckVRF6X2XnMa99xMZBo0e0rYz XTRZt0KMR0pjtXg4DlDzHAjIi/bQbb5FkaUTqls6eGR4kTJCH6nV4IzyQ6I1A3c0 CUSjmUmxrQDkTMDs3tXx98ynw+enFE+N -----END CERTIFICATE-----Generated at Thu Jul 3 07:00:04 2025 by rpki-client