$ rpki-client -vvf rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft File: jowmjxBHCaZsjW9iCludk8Ga8FA.mft (raw, json) Hash identifier: 8ZgRRt9xJC2gHizaH0RmyJUeXoyQAtXUsnzZ0hsxvso= Subject key identifier: 15:84:6B:AF:20:48:AA:30:C6:DC:00:7D:A3:43:42:91:F1:AB:9E:DB Authority key identifier: 8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 Certificate issuer: /CN=A9145EFF/serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft Manifest number: 04A6 Signing time: Sat 10 May 2025 23:32:01 +0000 Manifest this update: Sat 10 May 2025 23:32:00 +0000 Manifest next update: Sat 17 May 2025 23:32:00 +0000 Files and hashes: 1: jowmjxBHCaZsjW9iCludk8Ga8FA.crl (hash: 3sO3+TmAyX7K5F34PABD4oeB7ARN8dq4n9NYKr8bkTE=) 2: 19270196406311ECB405CB27C4F9AE02.roa (hash: PAlDAafRPLwFp/PEqgO09+1N1FVKH9jjHII3UASHZqU=) 3: 85B249CA30AE11ECB675E112C4F9AE02.roa (hash: 91ojNZdpc/d8WvpoycTwxLyqjQ15ZAvRlTJU6gSTdZU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145EFF, serialNumber=8E8C268F104709A66C8D6F620A5B9D93C19AF050 Validity Not Before: May 10 23:32:00 2025 GMT Not After : May 17 23:32:00 2025 GMT Subject: CN=681fe1f0-99f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:16:c0:20:e6:6e:32:ca:81:75:fe:7c:56: 88:bd:6d:56:5e:a9:78:e4:0e:62:50:c2:3a:ac:8b: 50:be:77:ce:11:9c:9d:49:c5:d2:fa:78:23:4b:a4: ef:06:5b:37:43:dc:ba:f0:73:2b:e0:8c:ad:32:ab: c6:8e:be:8b:2e:3b:75:fa:d4:3d:f8:93:a8:2d:b2: c3:69:0f:96:7f:6a:ed:42:90:63:fa:2f:d8:ba:eb: 32:51:a6:2c:b5:4b:d2:aa:8d:27:85:8d:b5:6e:d6: b7:76:a1:c0:00:73:e7:08:d0:4b:33:de:6e:93:a0: 25:6d:62:be:3b:32:d3:ff:61:ed:1c:fd:da:cd:87: 9b:1f:ba:aa:ed:2f:c4:01:0c:1c:b9:39:37:7a:63: 0e:c1:44:58:0e:94:25:0b:bc:22:d0:80:1d:be:61: 43:e3:c9:fc:16:3e:0b:e5:1b:82:ca:b0:83:32:58: d8:db:11:b5:57:fb:3d:b5:60:9d:cc:b4:39:f2:77: 6f:01:61:95:21:3a:2c:c2:b3:80:27:39:c7:90:67: 61:14:49:6b:37:75:ac:b6:95:2d:4d:fa:d8:a6:05: d0:59:7f:4e:95:c6:f7:b9:a0:31:4e:8a:db:35:9d: 35:c3:65:c4:7e:c1:25:6c:4b:ba:fd:e5:59:28:dd: 5d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:6B:AF:20:48:AA:30:C6:DC:00:7D:A3:43:42:91:F1:AB:9E:DB X509v3 Authority Key Identifier: keyid:8E:8C:26:8F:10:47:09:A6:6C:8D:6F:62:0A:5B:9D:93:C1:9A:F0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jowmjxBHCaZsjW9iCludk8Ga8FA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145EFF/4517ECE830AA11EC845DDD50C4F9AE02/jowmjxBHCaZsjW9iCludk8Ga8FA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ce:08:92:49:fa:8f:e0:d1:6b:96:12:c7:a1:56:d3:f8:59: 0d:c4:b3:b3:ed:a5:44:97:dc:7c:f1:ac:6f:60:68:30:cf:e3: ea:23:13:5f:72:52:18:80:37:0c:b7:3b:3a:f9:ac:bc:91:59: a6:29:d5:e3:4e:ca:3e:78:68:5b:60:cc:3a:20:01:94:19:09: b3:4f:e5:2a:ae:d1:55:a6:03:dd:a3:9d:8e:32:b7:f8:63:30: f4:26:4c:dd:d3:ea:72:54:ee:34:11:86:14:d6:67:1f:de:48: 14:89:00:6f:58:c0:15:3a:62:55:e7:92:22:10:0b:3d:1d:f1: 98:de:70:c4:08:c5:c7:cb:95:ad:41:d8:e2:fb:20:58:5c:90: 78:3a:18:b4:60:61:7e:22:ec:ba:e0:70:f8:54:62:74:01:d9: 36:33:6e:46:6d:93:27:f7:5c:97:df:19:5e:04:4f:0b:c8:9b: dd:e6:82:c7:10:6c:c5:86:f4:b8:5f:bc:71:8a:9d:56:bd:49: 68:89:f1:60:d4:53:8b:e7:ba:8a:a5:36:74:98:69:7b:80:c8: 2c:32:4a:28:05:0e:32:a4:f0:0c:06:42:12:7a:86:e8:7a:36: ff:67:60:3b:81:bf:0e:71:3e:7d:59:1c:c8:cc:6a:15:9b:0a: e3:0c:3c:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFRkYxMTAvBgNVBAUTKDhFOEMyNjhGMTA0NzA5QTY2QzhENkY2MjBBNUI5RDkz QzE5QUYwNTAwHhcNMjUwNTEwMjMzMjAwWhcNMjUwNTE3MjMzMjAwWjAYMRYwFAYD VQQDEw02ODFmZTFmMC05OWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnwWwCDmbjLKgXX+fFaIvW1WXql45A5iUMI6rItQvnfOEZydScXS+ngjS6Tv Bls3Q9y68HMr4IytMqvGjr6LLjt1+tQ9+JOoLbLDaQ+Wf2rtQpBj+i/YuusyUaYs tUvSqo0nhY21bta3dqHAAHPnCNBLM95uk6AlbWK+OzLT/2HtHP3azYebH7qq7S/E AQwcuTk3emMOwURYDpQlC7wi0IAdvmFD48n8Fj4L5RuCyrCDMljY2xG1V/s9tWCd zLQ58ndvAWGVIToswrOAJznHkGdhFElrN3WstpUtTfrYpgXQWX9Olcb3uaAxTorb NZ01w2XEfsElbEu6/eVZKN1dsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWEa68g SKowxtwAfaNDQpHxq57bMB8GA1UdIwQYMBaAFI6MJo8QRwmmbI1vYgpbnZPBmvBQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUVGRi80NTE3RUNFODMw QUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENhWnNqVzlpQ2x1ZGs4R2E4 RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvd21qeEJIQ2Fac2pXOWlDbHVkazhHYThGQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUVGRi80NTE3RUNFODMwQUExMUVDODQ1RERENTBDNEY5QUUwMi9qb3dtanhCSENh WnNqVzlpQ2x1ZGs4R2E4RkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjzgiSSfqP4NFrlhLHoVbT+FkNxLOz7aVEl9x88axvYGgwz+PqIxNf clIYgDcMtzs6+ay8kVmmKdXjTso+eGhbYMw6IAGUGQmzT+UqrtFVpgPdo52OMrf4 YzD0Jkzd0+pyVO40EYYU1mcf3kgUiQBvWMAVOmJV55IiEAs9HfGY3nDECMXHy5Wt Qdji+yBYXJB4Ohi0YGF+Iuy64HD4VGJ0Adk2M25GbZMn91yX3xleBE8LyJvd5oLH EGzFhvS4X7xxip1WvUloifFg1FOL57qKpTZ0mGl7gMgsMkooBQ4ypPAMBkISeobo ejb/Z2A7gb8OcT59WRzIzGoVmwrjDDxh -----END CERTIFICATE-----Generated at Mon May 12 06:55:20 2025 by rpki-client