$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft File: MOWJKI62UAJRDId7Rmq-GXU7284.mft (raw, json) Hash identifier: tTPzNxfXlF4qi9mfZCpZgGF5V3DoIlc0UeHOOlXKn3U= Subject key identifier: 3F:FA:CB:6C:A5:9F:C6:D8:34:5B:E1:C8:41:2E:08:22:18:57:6F:E5 Authority key identifier: 30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE Certificate issuer: /CN=A91D3794/serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Certificate serial: 21A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft Manifest number: 2167 Signing time: Wed 02 Jul 2025 16:01:59 +0000 Manifest this update: Wed 02 Jul 2025 16:01:58 +0000 Manifest next update: Wed 09 Jul 2025 16:01:58 +0000 Files and hashes: 1: MOWJKI62UAJRDId7Rmq-GXU7284.crl (hash: U7wKh7oEp8RARSz6j0+c3rfgOVt5tiSf5N/3ZJyrT8A=) 2: 52644D4AA1E411E8AE269764C4F9AE02.roa (hash: Mbfd5VpIfvRMDcFTC+b57JrG1/6jEpd6n/DO7HbeZ2s=) 3: 89A9F0B436B511EEB14AD345C4F9AE02.roa (hash: 1hpcaoZTEGohdBmHSNUJeRCnYIqlFMvgeF37urhp6CE=) 4: 96862188486111E8AA9B1B45C4F9AE02.roa (hash: Tf0FHT1S2LqhWgKXbz3aiqZH7Ay/C2PxgAMnS0SSxOA=) 5: 869ED548F1E511E88BD7AA7CC4F9AE02.roa (hash: Tn1WNn2P9hp7f1yU1ogriDIlSi8ORgENeJR6Q9egV04=) 6: 69A7319C4F7311E988A75B37C4F9AE02.roa (hash: sUKjaugG8gMNtNrmEougacrEWZeMLjYKQpUMh/WLNxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8608 (0x21a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3794, serialNumber=30E589288EB65002510C877B466ABE19753BDBCE Validity Not Before: Jul 2 16:01:58 2025 GMT Not After : Jul 9 16:01:58 2025 GMT Subject: CN=686557f6-37c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:6d:24:79:99:02:bb:cc:b5:72:a1:38:e5: 6d:cb:82:2f:77:91:2c:18:e9:c5:37:57:fd:86:15: 53:5d:07:3b:aa:c0:f5:1f:4b:dd:68:c3:32:6c:d2: cb:17:e3:90:58:c6:34:85:65:15:e2:62:13:5d:6b: 92:19:64:e5:97:65:d6:4c:eb:1d:d8:df:ac:f1:44: d9:a1:4c:ff:72:a8:51:05:39:ef:06:7a:df:cf:34: 34:d1:fa:eb:c0:ed:4d:28:fc:45:e7:96:f9:59:10: 4c:4b:81:d8:50:d0:80:cf:27:32:e2:18:33:28:ec: ae:99:e0:83:f7:8f:78:68:4b:12:be:c2:b0:8c:10: ef:7e:29:76:8e:2d:59:96:d4:c3:13:b6:45:0e:5e: 85:23:46:61:10:fc:e0:00:f1:11:6b:3c:c6:7d:ef: f9:ca:7e:d1:0e:6d:fa:86:3c:8f:8c:e9:49:7b:10: 20:4e:7b:30:76:c6:01:1b:3e:87:05:ac:57:f7:e9: 6e:bb:25:45:5e:7f:ba:45:b2:5d:1d:54:4c:a8:0b: 28:a0:6e:30:7c:de:50:ed:cd:56:ac:30:f2:05:1b: e9:26:72:1d:96:c9:e8:28:72:93:aa:e7:f2:e9:97: 17:38:93:04:b7:72:67:3f:59:4e:f3:bc:8e:73:9f: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FA:CB:6C:A5:9F:C6:D8:34:5B:E1:C8:41:2E:08:22:18:57:6F:E5 X509v3 Authority Key Identifier: keyid:30:E5:89:28:8E:B6:50:02:51:0C:87:7B:46:6A:BE:19:75:3B:DB:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOWJKI62UAJRDId7Rmq-GXU7284.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3794/20FE5616E98F11E5A3DDDC66C4F9AE02/MOWJKI62UAJRDId7Rmq-GXU7284.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ca:ba:1d:62:b2:70:82:a5:a8:00:aa:c5:b0:f8:02:80:69: 98:37:e1:11:a6:f7:75:b5:f3:8f:25:4b:4b:5f:a6:98:ea:5d: e2:46:9a:a7:b7:9c:97:b8:0b:87:4b:2b:25:ef:42:0d:63:3b: 26:09:26:07:e3:ee:cb:2f:f4:6d:84:d8:d4:a5:7e:d9:86:81: 50:83:32:af:95:d0:24:67:09:e3:ea:0f:0c:bf:6a:23:f5:0e: 05:cc:10:bf:84:07:ac:02:d6:44:fb:85:d0:6c:44:c3:bd:e7: 64:fc:25:db:1e:dc:98:4c:69:57:3a:39:90:fb:e5:f3:3c:f8: fa:1e:47:b5:b5:1a:a9:e7:8f:e5:73:d8:af:cb:d8:78:fe:22: f2:42:cb:7c:49:15:09:e9:52:d8:e0:3a:a7:4b:de:77:61:53: e6:89:6b:f2:6d:53:20:8b:75:72:3d:4d:2c:93:2a:d0:55:75: 9a:fa:97:3a:1a:ac:fa:a7:10:06:51:58:21:49:c3:f0:54:7a: fb:a4:c1:01:80:a1:51:2e:47:50:a6:ec:e3:07:bf:93:10:e5: bf:87:2a:2a:b6:a1:b2:28:da:62:c7:0b:63:7e:4c:3e:0f:f9: d1:de:b1:18:9e:08:f7:c1:91:76:22:0f:c7:6d:a9:59:48:04: 60:fe:8f:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3OTQxMTAvBgNVBAUTKDMwRTU4OTI4OEVCNjUwMDI1MTBDODc3QjQ2NkFCRTE5 NzUzQkRCQ0UwHhcNMjUwNzAyMTYwMTU4WhcNMjUwNzA5MTYwMTU4WjAYMRYwFAYD VQQDEw02ODY1NTdmNi0zN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXxtJHmZArvMtXKhOOVty4Ivd5EsGOnFN1f9hhVTXQc7qsD1H0vdaMMybNLL F+OQWMY0hWUV4mITXWuSGWTll2XWTOsd2N+s8UTZoUz/cqhRBTnvBnrfzzQ00frr wO1NKPxF55b5WRBMS4HYUNCAzycy4hgzKOyumeCD9494aEsSvsKwjBDvfil2ji1Z ltTDE7ZFDl6FI0ZhEPzgAPERazzGfe/5yn7RDm36hjyPjOlJexAgTnswdsYBGz6H BaxX9+luuyVFXn+6RbJdHVRMqAsooG4wfN5Q7c1WrDDyBRvpJnIdlsnoKHKTqufy 6ZcXOJMEt3JnP1lO87yOc583ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD/6y2yl n8bYNFvhyEEuCCIYV2/lMB8GA1UdIwQYMBaAFDDliSiOtlACUQyHe0Zqvhl1O9vO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzc5NC8yMEZFNTYxNkU5 OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVBSlJESWQ3Um1xLUdYVTcy ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PV0pLSTYyVUFKUkRJZDdSbXEtR1hVNzI4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mzc5NC8yMEZFNTYxNkU5OEYxMUU1QTNERERDNjZDNEY5QUUwMi9NT1dKS0k2MlVB SlJESWQ3Um1xLUdYVTcyODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOyrodYrJwgqWoAKrFsPgCgGmYN+ERpvd1tfOPJUtLX6aY6l3iRpqn t5yXuAuHSysl70INYzsmCSYH4+7LL/RthNjUpX7ZhoFQgzKvldAkZwnj6g8Mv2oj 9Q4FzBC/hAesAtZE+4XQbETDvedk/CXbHtyYTGlXOjmQ++XzPPj6Hke1tRqp54/l c9ivy9h4/iLyQst8SRUJ6VLY4DqnS953YVPmiWvybVMgi3VyPU0skyrQVXWa+pc6 Gqz6pxAGUVghScPwVHr7pMEBgKFRLkdQpuzjB7+TEOW/hyoqtqGyKNpixwtjfkw+ D/nR3rEYngj3wZF2Ig/HbalZSARg/o9s -----END CERTIFICATE-----Generated at Thu Jul 3 06:09:36 2025 by rpki-client