$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: sCBvwwqOkHuquz530YE8DGnkAYH9gt06OZwSlXkD96k= Subject key identifier: BE:B3:0A:DE:1D:F3:AB:8A:7C:DC:1B:10:F3:63:72:21:7F:2A:DF:CC Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04DA Signing time: Fri 22 Aug 2025 23:59:38 +0000 Manifest this update: Fri 22 Aug 2025 23:59:37 +0000 Manifest next update: Fri 29 Aug 2025 23:59:37 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: nwdjbvohdyM6oSbEndKWmIu8+QDYKeQBQ20otEVLoBU=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: Aug 22 23:59:37 2025 GMT Not After : Aug 29 23:59:37 2025 GMT Subject: CN=68a9046a-a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:93:7b:5c:88:56:92:00:c8:f2:3a:ec:99:55: 7e:a3:3f:e4:89:5b:b0:cb:bc:af:db:d2:1f:0e:8a: 42:70:83:73:8d:10:87:e4:b8:4c:6a:5d:24:8a:5c: 0a:86:ac:f7:29:c8:e2:1d:96:06:88:a9:99:63:09: 2e:75:ef:b0:64:7b:f1:93:5c:0c:64:4e:f8:f1:38: 7d:d7:4c:0b:2d:59:5a:6d:e4:98:ae:9e:d4:89:28: 90:99:c3:f0:ea:b3:71:07:16:8e:0c:02:a4:cf:d5: e9:ae:c5:e6:79:ef:93:1a:91:fc:64:aa:8d:7c:b2: 5c:8f:d3:b9:06:8f:1d:0f:2f:55:56:27:4c:3e:d4: a0:2e:82:e1:0b:c9:5d:c9:da:e0:1a:f9:3f:ed:2c: 41:c0:97:f1:e2:b0:40:a2:61:dd:b6:dd:65:87:b4: f5:b1:75:4b:4c:e0:7d:46:f5:cb:90:22:6c:26:63: eb:c8:78:58:c0:e4:0d:fa:3c:9c:57:76:43:e5:99: bf:7d:24:9b:78:f0:a2:64:d0:5b:d8:f6:e7:82:43: 2b:1e:a6:5f:4d:38:f3:dd:a3:e5:a0:9a:28:43:a7: 49:9d:b7:56:10:87:df:be:91:ae:76:0c:3b:27:32: e6:5f:bd:1a:29:d6:f2:2f:db:2c:ac:e5:d6:15:e6: 68:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B3:0A:DE:1D:F3:AB:8A:7C:DC:1B:10:F3:63:72:21:7F:2A:DF:CC X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:79:58:9e:61:b4:a3:2c:78:5c:e6:77:9c:03:21:9d:f2: 9e:34:26:ee:6d:c7:be:3f:4d:8c:cb:f8:83:8f:d0:46:97:32: 8c:62:76:df:f0:ab:f1:29:09:2c:51:7d:e5:0d:43:a0:9e:b9: f3:70:40:6e:9a:a7:90:19:2f:10:64:7a:c6:a8:83:4e:cc:ef: b6:ef:37:ba:55:83:d5:7a:b9:ce:c5:d5:fa:0f:9f:fe:1a:cf: c2:49:b6:5a:f6:c0:17:e0:3d:4e:c4:ff:e4:dd:e6:9c:e3:35: 01:79:c2:de:71:6b:6f:80:28:9b:5f:82:32:87:22:0c:e2:d4: c2:63:a6:ec:08:61:fa:f1:8a:15:e5:47:47:05:d8:c0:b8:b2: 27:8a:3d:af:a3:96:f8:d4:03:ff:ed:dc:7d:72:04:90:ce:13: 89:98:48:40:51:ac:a3:8f:3d:ff:a0:80:06:83:c6:84:60:e5: 52:4f:08:30:ac:35:5d:76:b1:18:ff:07:58:6e:56:4d:3e:b6: e1:d9:db:76:eb:dc:30:5e:c2:24:b6:01:49:cd:38:ca:d0:27: 75:83:2f:e7:54:14:36:43:7c:13:5a:8a:7b:9c:15:99:b9:b7: 44:1d:45:a3:f6:0e:53:2d:d9:65:ab:6c:ef:8a:c7:f1:46:01: 23:b7:24:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwODIyMjM1OTM3WhcNMjUwODI5MjM1OTM3WjAYMRYwFAYD VQQDEw02OGE5MDQ2YS1hMWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5N7XIhWkgDI8jrsmVV+oz/kiVuwy7yv29IfDopCcINzjRCH5LhMal0kilwK hqz3KcjiHZYGiKmZYwkude+wZHvxk1wMZE748Th910wLLVlabeSYrp7UiSiQmcPw 6rNxBxaODAKkz9XprsXmee+TGpH8ZKqNfLJcj9O5Bo8dDy9VVidMPtSgLoLhC8ld ydrgGvk/7SxBwJfx4rBAomHdtt1lh7T1sXVLTOB9RvXLkCJsJmPryHhYwOQN+jyc V3ZD5Zm/fSSbePCiZNBb2PbngkMrHqZfTTjz3aPloJooQ6dJnbdWEIffvpGudgw7 JzLmX70aKdbyL9ssrOXWFeZoUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6zCt4d 86uKfNwbEPNjciF/Kt/MMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpjnlYnmG0oyx4XOZ3nAMhnfKeNCbubce+P02My/iDj9BGlzKMYnbf 8KvxKQksUX3lDUOgnrnzcEBumqeQGS8QZHrGqINOzO+27ze6VYPVernOxdX6D5/+ Gs/CSbZa9sAX4D1OxP/k3eac4zUBecLecWtvgCibX4IyhyIM4tTCY6bsCGH68YoV 5UdHBdjAuLInij2vo5b41AP/7dx9cgSQzhOJmEhAUayjjz3/oIAGg8aEYOVSTwgw rDVddrEY/wdYblZNPrbh2dt269wwXsIktgFJzTjK0Cd1gy/nVBQ2Q3wTWop7nBWZ ubdEHUWj9g5TLdllq2zvisfxRgEjtyRY -----END CERTIFICATE-----Generated at Sat Aug 23 21:18:33 2025 by rpki-client