$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json) Hash identifier: +WA+k+FKpExSVdXG2O32IbUSLYi5WMQzZADDTaRXDMQ= Subject key identifier: 5B:3F:8B:26:27:75:47:10:59:1E:72:F0:F8:68:C7:2C:00:47:F2:3C Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft Manifest number: 032A Signing time: Fri 13 Jun 2025 00:40:23 +0000 Manifest this update: Fri 13 Jun 2025 00:40:22 +0000 Manifest next update: Fri 20 Jun 2025 00:40:22 +0000 Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: mCQKFA5P7CB2QmI+WDKFfsyI/ouhrnQclqoP8Ryb2UA=) 2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Validity Not Before: Jun 13 00:40:22 2025 GMT Not After : Jun 20 00:40:22 2025 GMT Subject: CN=684b7376-83c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b7:c4:f1:1b:21:ab:54:4e:ef:8c:36:e6:81: 45:66:bf:9c:0b:7a:15:da:5c:e1:66:bd:de:4a:72: d8:00:8a:91:62:19:b7:1a:29:d7:fa:86:d5:ce:a8: b7:57:18:d4:53:50:9d:2e:f4:ce:85:d1:e0:66:fb: 1d:70:1a:f8:11:63:bb:a7:47:ef:0b:e9:27:ab:63: 16:06:05:2a:85:6e:b5:d7:02:21:91:6e:fc:4a:fb: a3:de:65:5c:a7:5b:ac:06:4b:53:14:80:08:3f:36: 77:37:83:80:1d:ed:65:00:b0:2b:7a:48:52:9d:7d: f4:81:72:90:3d:c1:39:a0:dc:80:2e:9f:09:85:c5: 52:cf:8a:95:8e:6d:aa:a2:83:ae:4e:fb:d2:40:c0: b6:4a:ce:98:5a:24:69:58:bc:70:a8:7d:0a:bf:d7: 6b:04:bb:fa:21:b8:53:cf:69:d9:c3:84:be:13:f1: 3b:8e:50:b9:9a:15:d1:eb:9c:89:27:27:43:84:3b: ee:d0:bf:aa:ec:fe:83:52:a2:aa:9f:9e:02:2c:56: 7a:da:ec:28:8c:fe:5f:2c:a0:6d:58:20:0e:c8:c5: 05:bb:72:17:fc:5b:64:5e:26:6d:d6:64:b5:72:d7: cb:a7:63:a3:5b:cf:83:34:1c:bf:b1:a7:d0:31:1d: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:8B:26:27:75:47:10:59:1E:72:F0:F8:68:C7:2C:00:47:F2:3C X509v3 Authority Key Identifier: keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:51:03:e4:e1:9d:11:d6:95:2d:3e:c9:0a:11:ba:70:8a:c4: 3d:2c:15:2e:ab:26:2c:62:49:b8:5f:44:b4:64:ff:42:6f:4f: 1b:35:7c:5e:06:f0:92:e7:a1:28:3d:b8:bc:59:ec:89:c4:c2: ac:ab:b8:cb:71:77:86:62:aa:86:01:7e:d4:0c:a6:23:a7:eb: 0a:64:c4:3d:f8:be:7a:6f:22:89:2a:1d:cf:06:ec:9d:b5:50: ae:b5:6c:64:82:24:71:8d:6b:6d:f7:80:80:93:c3:d0:cc:c2: 34:c6:1c:17:dd:31:09:36:8d:f5:bd:5e:2f:a6:40:c5:c5:a4: d2:05:3b:60:70:da:5f:66:ce:22:04:7e:0d:ae:ef:f6:68:4c: 50:b7:0f:f5:4b:ce:a9:a4:be:c5:63:af:3d:19:57:1c:d6:53: 12:9b:f8:fb:f6:1e:92:6d:50:2d:15:dc:74:32:28:d4:21:19: 40:5d:03:53:c9:5b:8e:6f:5f:a2:7b:3a:56:79:33:43:fc:a2: 22:be:9f:8a:c6:a5:bb:22:d8:c9:f3:ab:28:a7:cb:80:c4:a0: 49:f8:23:0d:14:36:3e:70:01:a0:4e:4c:5e:52:b2:48:98:72: 4e:f5:e7:d8:93:14:17:98:9c:c4:1a:f9:f4:01:16:2f:ea:d9: 1f:0c:60:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE REJGQjc1QUIwHhcNMjUwNjEzMDA0MDIyWhcNMjUwNjIwMDA0MDIyWjAYMRYwFAYD VQQDEw02ODRiNzM3Ni04M2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrfE8Rshq1RO74w25oFFZr+cC3oV2lzhZr3eSnLYAIqRYhm3GinX+obVzqi3 VxjUU1CdLvTOhdHgZvsdcBr4EWO7p0fvC+knq2MWBgUqhW611wIhkW78Svuj3mVc p1usBktTFIAIPzZ3N4OAHe1lALArekhSnX30gXKQPcE5oNyALp8JhcVSz4qVjm2q ooOuTvvSQMC2Ss6YWiRpWLxwqH0Kv9drBLv6IbhTz2nZw4S+E/E7jlC5mhXR65yJ JydDhDvu0L+q7P6DUqKqn54CLFZ62uwojP5fLKBtWCAOyMUFu3IX/FtkXiZt1mS1 ctfLp2OjW8+DNBy/safQMR00RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFs/iyYn dUcQWR5y8PhoxywAR/I8MB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXUQPk4Z0R1pUtPskKEbpwisQ9LBUuqyYsYkm4X0S0ZP9Cb08bNXxe BvCS56EoPbi8WeyJxMKsq7jLcXeGYqqGAX7UDKYjp+sKZMQ9+L56byKJKh3PBuyd tVCutWxkgiRxjWtt94CAk8PQzMI0xhwX3TEJNo31vV4vpkDFxaTSBTtgcNpfZs4i BH4Nru/2aExQtw/1S86ppL7FY689GVcc1lMSm/j79h6SbVAtFdx0MijUIRlAXQNT yVuOb1+iezpWeTND/KIivp+KxqW7ItjJ86sop8uAxKBJ+CMNFDY+cAGgTkxeUrJI mHJO9efYkxQXmJzEGvn0ARYv6tkfDGD4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:27:01 2025 by rpki-client