$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: r1wYjYS159vbg2EURbgIi/3oqLyHGC2MywmTTxowgxM= Subject key identifier: F2:B9:E6:98:2B:EA:8E:06:88:6C:0D:9C:F1:42:53:AC:86:F6:77:AB Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0320 Signing time: Mon 11 Aug 2025 01:25:10 +0000 Manifest this update: Mon 11 Aug 2025 01:25:09 +0000 Manifest next update: Mon 18 Aug 2025 01:25:09 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: q2JCTAk1zXFdB/QRtxvt2lhSzfdJh61F/A1IjVNaYck=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Aug 11 01:25:09 2025 GMT Not After : Aug 18 01:25:09 2025 GMT Subject: CN=68994675-08c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:ff:4b:4d:ae:7e:dd:09:bf:2f:ab:3b:a0: cf:b8:6d:6c:2e:6d:73:58:8f:71:d7:00:72:db:d8: 23:7c:d0:f0:df:8c:3f:5e:1f:5a:fa:e4:91:59:91: 81:50:4a:10:d2:5f:a7:55:24:93:e7:b4:b4:b5:9c: f6:f7:43:de:01:14:1b:fb:69:e0:c5:ca:20:f8:97: 85:4a:98:63:ec:b6:f2:6f:13:0f:6a:f0:4e:23:a8: e9:ee:15:aa:b1:ae:70:8a:7c:f5:dd:3b:4a:e8:24: 05:ad:49:43:70:08:14:ea:79:b8:e1:57:d3:ee:a2: 20:69:45:a9:6c:85:52:74:9d:16:ec:94:fa:c1:b2: b0:0e:a3:19:07:4e:49:c1:7a:b9:71:9e:5d:ec:d4: f5:a4:42:68:2f:7c:87:97:45:c9:03:82:e9:92:77: da:0c:a0:2b:81:cb:4f:b8:7c:f0:35:6c:1b:05:f8: 93:72:20:1e:a1:41:43:c3:a8:8b:3e:d2:f3:61:54: 62:ff:37:4b:c7:2b:38:f7:5d:84:42:f7:ea:fe:9a: e5:cb:a0:66:ff:4c:70:e0:de:a1:bf:d0:f8:6b:5c: 9c:6f:3c:f3:2e:48:fc:b0:d8:1b:44:f6:c6:c0:78: 8e:3a:2b:db:6b:e1:f7:83:74:ac:be:bc:fd:0a:5f: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:E6:98:2B:EA:8E:06:88:6C:0D:9C:F1:42:53:AC:86:F6:77:AB X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f6:83:d9:f4:c2:fe:67:07:5b:36:72:79:7d:d3:42:f6:a8: af:ab:81:85:bb:2b:4f:b8:e5:a1:e2:03:ae:cc:42:4c:88:c0: c1:f2:a9:7c:2f:82:31:b5:85:7a:eb:21:62:8d:75:13:ff:e3: 81:ce:5b:b4:61:37:b0:0a:16:d0:67:e3:3f:0f:79:92:5b:79: d1:e5:f3:ac:b2:1b:44:61:19:04:c0:1d:7d:6d:d4:fc:20:a0: cf:b6:6b:45:bd:55:7c:db:fc:99:f4:13:2c:5d:31:de:23:9e: 84:34:62:f9:a0:20:2a:10:f6:28:11:0c:dd:d6:d4:f9:ea:38: 34:40:9d:7f:07:d1:02:d1:1a:d1:be:46:9a:66:38:9a:79:2e: 6a:36:53:60:2a:da:51:da:12:11:8f:df:1d:eb:db:cd:f9:65: 28:a9:44:0f:92:15:25:ee:01:49:ac:03:1d:84:b5:aa:54:6c: c6:1e:1c:b7:86:b5:47:23:9c:eb:b0:37:e6:c4:41:e1:4a:25: d3:ce:2e:af:3f:52:c0:8a:02:87:01:a9:bb:28:38:cd:b0:1f: 10:33:98:5f:ad:6e:5e:9b:05:27:2a:72:22:5b:69:79:d1:43: 1b:0b:48:0a:8d:9c:55:9f:0c:f7:96:52:23:93:4d:7a:65:21: 81:9a:8b:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwODExMDEyNTA5WhcNMjUwODE4MDEyNTA5WjAYMRYwFAYD VQQDEw02ODk5NDY3NS0wOGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29//S02uft0Jvy+rO6DPuG1sLm1zWI9x1wBy29gjfNDw34w/Xh9a+uSRWZGB UEoQ0l+nVSST57S0tZz290PeARQb+2ngxcog+JeFSphj7LbybxMPavBOI6jp7hWq sa5winz13TtK6CQFrUlDcAgU6nm44VfT7qIgaUWpbIVSdJ0W7JT6wbKwDqMZB05J wXq5cZ5d7NT1pEJoL3yHl0XJA4LpknfaDKArgctPuHzwNWwbBfiTciAeoUFDw6iL PtLzYVRi/zdLxys4912EQvfq/prly6Bm/0xw4N6hv9D4a1ycbzzzLkj8sNgbRPbG wHiOOivba+H3g3Ssvrz9Cl++JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK55pgr 6o4GiGwNnPFCU6yG9nerMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB99oPZ9ML+ZwdbNnJ5fdNC9qivq4GFuytPuOWh4gOuzEJMiMDB8ql8 L4IxtYV66yFijXUT/+OBzlu0YTewChbQZ+M/D3mSW3nR5fOsshtEYRkEwB19bdT8 IKDPtmtFvVV82/yZ9BMsXTHeI56ENGL5oCAqEPYoEQzd1tT56jg0QJ1/B9EC0RrR vkaaZjiaeS5qNlNgKtpR2hIRj98d69vN+WUoqUQPkhUl7gFJrAMdhLWqVGzGHhy3 hrVHI5zrsDfmxEHhSiXTzi6vP1LAigKHAam7KDjNsB8QM5hfrW5emwUnKnIiW2l5 0UMbC0gKjZxVnwz3llIjk016ZSGBmovg -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:22 2025 by rpki-client