$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: I3WPMlazQHwuGgrMoQbaojzQx3Cm5ppfMbK8acR4R/E= Subject key identifier: BE:E5:DB:74:49:D9:46:56:FA:A7:32:BF:1C:5F:58:E1:88:B3:90:B5 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 2181 Signing time: Fri 22 Aug 2025 15:57:52 +0000 Manifest this update: Fri 22 Aug 2025 15:57:52 +0000 Manifest next update: Fri 29 Aug 2025 15:57:52 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: 3uF0D6OQqY74C3mvi+af59HGDAcpHelchZy51MJwPH4=) 2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8634 (0x21ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Aug 22 15:57:52 2025 GMT Not After : Aug 29 15:57:52 2025 GMT Subject: CN=68a89380-1375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:38:e1:cb:78:fd:8f:e3:4f:ec:0c:12:e4: e5:c2:e4:ad:c3:20:3d:d1:e0:05:d3:99:68:f4:33: 6f:77:36:9c:6d:b8:bc:bd:3d:34:3d:14:6a:76:94: af:2c:c7:71:27:58:ae:aa:b2:10:de:c5:a6:6c:22: c7:5d:65:68:e2:11:6e:cb:4e:6f:9f:0d:d8:08:7d: 44:b9:de:54:c2:f3:30:39:98:23:e6:f1:92:0f:ca: 53:49:bc:73:ad:eb:36:fb:d7:be:68:92:1a:c4:50: 7a:b9:33:70:01:f8:38:08:ba:76:d1:b8:9d:39:01: aa:3c:92:e9:70:84:fa:e0:f5:0b:4d:04:51:c8:67: 6f:77:eb:b9:53:90:53:70:7a:3c:83:7a:27:32:be: 56:4f:2c:d0:92:6e:79:20:20:3e:30:b8:bf:8e:27: 19:71:66:61:39:26:3b:90:54:ea:48:3a:9e:47:33: 51:33:99:83:96:a6:f9:ac:da:cd:9e:0d:69:81:3a: 03:72:dc:a2:08:22:8d:73:ed:42:04:ea:2a:d2:87: a0:30:3e:5f:e2:94:bb:cc:d8:73:9a:d8:a4:b8:31: 40:2f:90:54:de:a2:13:3c:e4:32:d9:6e:41:06:42: b8:13:8b:da:04:ca:ac:c5:f0:9e:c1:32:69:9d:4d: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E5:DB:74:49:D9:46:56:FA:A7:32:BF:1C:5F:58:E1:88:B3:90:B5 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:be:46:2b:c8:1e:72:03:af:bf:04:b3:5f:b7:fd:92:96:ab: 94:e6:60:cf:ac:f9:22:15:b5:d3:57:7d:2f:f1:48:00:78:54: 1f:76:d2:c8:ce:f1:94:23:9c:cb:d0:76:23:d9:87:32:41:62: 00:cc:8e:f6:0e:6f:5d:67:48:33:38:3d:d7:00:e1:8e:0a:23: f4:e1:6f:2f:07:58:7f:db:be:fb:2c:ee:6f:d6:e2:7b:dd:fe: f3:61:1d:bf:ca:3d:bd:40:c8:ee:74:0e:4d:ff:a2:45:b4:85: 97:13:be:93:a0:6b:e9:c0:dd:73:66:07:4c:3b:9b:3d:cb:24: cd:f1:76:f1:84:6e:0d:c0:63:0f:28:f7:3a:34:e9:ca:c4:0d: 6a:14:2e:18:86:7c:de:c4:e1:aa:6a:e2:e6:ae:a5:dd:8b:39: 8a:ce:8d:2a:1d:fe:b1:b2:78:4e:aa:25:a6:16:37:99:9a:2c: d0:97:3c:83:67:c5:88:f1:ca:4e:e0:4b:7a:69:67:b9:fb:29: ca:fb:e5:d4:f3:f3:2a:cd:e6:3e:d7:59:75:07:a9:fe:49:da: 07:eb:25:ed:e1:ff:f2:e1:51:2e:c0:20:d3:ac:e1:8a:5b:f0: 1e:e3:31:e1:a7:a7:a0:62:77:ff:e7:39:01:5e:ef:c1:28:21: 3c:d0:7a:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUwODIyMTU1NzUyWhcNMjUwODI5MTU1NzUyWjAYMRYwFAYD VQQDEw02OGE4OTM4MC0xMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuo44ct4/Y/jT+wMEuTlwuStwyA90eAF05lo9DNvdzacbbi8vT00PRRqdpSv LMdxJ1iuqrIQ3sWmbCLHXWVo4hFuy05vnw3YCH1Eud5UwvMwOZgj5vGSD8pTSbxz res2+9e+aJIaxFB6uTNwAfg4CLp20bidOQGqPJLpcIT64PULTQRRyGdvd+u5U5BT cHo8g3onMr5WTyzQkm55ICA+MLi/jicZcWZhOSY7kFTqSDqeRzNRM5mDlqb5rNrN ng1pgToDctyiCCKNc+1CBOoq0oegMD5f4pS7zNhzmtikuDFAL5BU3qITPOQy2W5B BkK4E4vaBMqsxfCewTJpnU2OJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL7l23RJ 2UZW+qcyvxxfWOGIs5C1MB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvvkYryB5yA6+/BLNft/2SlquU5mDPrPkiFbXTV30v8UgAeFQfdtLI zvGUI5zL0HYj2YcyQWIAzI72Dm9dZ0gzOD3XAOGOCiP04W8vB1h/2777LO5v1uJ7 3f7zYR2/yj29QMjudA5N/6JFtIWXE76ToGvpwN1zZgdMO5s9yyTN8XbxhG4NwGMP KPc6NOnKxA1qFC4YhnzexOGqauLmrqXdizmKzo0qHf6xsnhOqiWmFjeZmizQlzyD Z8WI8cpO4Et6aWe5+ynK++XU8/MqzeY+11l1B6n+SdoH6yXt4f/y4VEuwCDTrOGK W/Ae4zHhp6egYnf/5zkBXu/BKCE80HoQ -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:18 2025 by rpki-client