$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: bHKZzLOy9+bk3RsMM19cMeRk8YUUvJoBlzyw1EtbknM= Subject key identifier: AC:BB:57:2E:3B:01:43:02:67:DA:48:01:5F:68:3A:C7:55:7A:C4:25 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 03AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0377 Signing time: Mon 03 Nov 2025 00:57:52 +0000 Manifest this update: Mon 03 Nov 2025 00:57:51 +0000 Manifest next update: Mon 10 Nov 2025 00:57:51 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: Qg/KY/AZudbij7qaqYKcL63Y7KUPlul7uqX5+uipNLc=) 2: 2CF7FA46995011F082453F71C4F9AE02.roa (hash: 4JuHgtX3TciEejuSWgnFjxZF5Q3DjPESOngbU4kj6II=) 3: 095A440652B311F0B25AA911C4F9AE02.roa (hash: boxMqVE8q46us+PFvAGR6ljVcVX9wIOjIMY9dIoSWLY=) 4: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 8: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:57:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 939 (0x3ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Nov 3 00:57:51 2025 GMT Not After : Nov 10 00:57:51 2025 GMT Subject: CN=6907fe0f-d9d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:41:89:25:66:ef:69:3e:72:db:76:5f:8c: 0b:81:5b:a3:2b:f4:6e:43:94:be:38:37:dc:d5:5a: c6:f4:4a:ba:ff:02:af:4b:a8:c1:e0:e4:76:0f:d5: 01:48:f8:42:1c:d0:39:ac:96:2a:21:55:d0:4f:fc: 96:ee:59:1d:a8:6f:32:95:de:bb:61:d2:5f:99:65: 93:a8:24:3b:40:43:80:73:7f:60:5e:f7:0e:aa:ab: b8:30:d6:d5:66:63:2e:cb:3b:2e:3d:db:b2:ba:1b: ca:a4:9d:44:55:c0:4d:a3:7f:db:59:71:79:c9:3e: a8:ac:70:aa:6b:43:2e:6b:9a:2a:bc:e4:42:79:de: e9:6b:7b:74:5d:31:ac:58:ac:cd:3f:68:3b:8b:03: ad:b6:17:17:33:4c:d7:5f:2c:50:23:a1:cd:38:66: 6e:aa:84:2c:9e:19:50:7c:67:94:09:a8:62:50:c1: a0:30:4b:96:72:df:5e:3d:ff:f7:2b:34:1a:30:7c: aa:6f:09:2c:c3:63:77:19:9e:4d:5b:a8:66:df:d5: 18:72:87:6f:d3:72:b2:aa:51:d9:a2:5a:e3:ee:f8: 00:cc:f2:3c:95:39:c4:cd:05:2b:25:fd:08:97:83: 8e:4a:35:6f:5d:cb:9f:28:cf:57:d2:9e:2c:f0:d6: af:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:57:2E:3B:01:43:02:67:DA:48:01:5F:68:3A:C7:55:7A:C4:25 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:dd:f8:9b:63:66:67:57:1e:32:c8:ef:03:08:8d:ae:6b:67: 96:29:fe:ac:13:d8:fe:56:36:05:2c:ca:7d:d3:7d:11:f6:9b: 9d:ac:f4:17:b8:7b:ec:db:ba:be:8b:45:90:08:2d:cf:66:de: a3:3b:27:a8:9a:69:19:5b:65:13:4a:88:da:44:66:30:86:07: 48:1b:51:9d:fe:d3:0c:d5:08:18:1e:8d:39:d5:55:80:87:6b: 17:89:fe:2c:86:61:7f:3c:1f:1e:39:24:0e:f5:19:72:23:4f: 71:db:c8:e1:94:c8:d2:ef:13:ec:30:86:36:10:0d:02:b5:14: bc:f8:71:b2:0a:2e:46:8c:56:b4:5f:71:39:ac:e2:df:6c:bb: 2d:14:82:97:58:ca:71:e8:ad:5b:9f:11:34:96:c5:38:cd:48: 0d:f6:87:5f:cc:12:d5:5f:23:63:2d:fb:93:ab:b1:c6:21:94: 95:56:fb:5e:df:eb:29:09:a5:2b:77:6a:41:d2:30:28:4d:b0: 33:b9:0e:0d:ca:7b:8e:60:78:5f:e3:5d:22:3a:db:27:07:d6: 18:25:ad:8e:63:7d:c7:93:c6:81:1c:2c:f2:dd:d0:1a:ba:e9: 6b:0b:b0:72:07:8f:7b:3f:ce:56:60:09:13:8b:39:2f:36:bb: 29:54:60:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUxMTAzMDA1NzUxWhcNMjUxMTEwMDA1NzUxWjAYMRYwFAYD VQQDEw02OTA3ZmUwZi1kOWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHdBiSVm72k+ctt2X4wLgVujK/RuQ5S+ODfc1VrG9Eq6/wKvS6jB4OR2D9UB SPhCHNA5rJYqIVXQT/yW7lkdqG8yld67YdJfmWWTqCQ7QEOAc39gXvcOqqu4MNbV ZmMuyzsuPduyuhvKpJ1EVcBNo3/bWXF5yT6orHCqa0Mua5oqvORCed7pa3t0XTGs WKzNP2g7iwOtthcXM0zXXyxQI6HNOGZuqoQsnhlQfGeUCahiUMGgMEuWct9ePf/3 KzQaMHyqbwksw2N3GZ5NW6hm39UYcodv03KyqlHZolrj7vgAzPI8lTnEzQUrJf0I l4OOSjVvXcufKM9X0p4s8NavpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy7Vy47 AUMCZ9pIAV9oOsdVesQlMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY3fibY2ZnVx4yyO8DCI2ua2eWKf6sE9j+VjYFLMp9030R9pudrPQX uHvs27q+i0WQCC3PZt6jOyeommkZW2UTSojaRGYwhgdIG1Gd/tMM1QgYHo051VWA h2sXif4shmF/PB8eOSQO9RlyI09x28jhlMjS7xPsMIY2EA0CtRS8+HGyCi5GjFa0 X3E5rOLfbLstFIKXWMpx6K1bnxE0lsU4zUgN9odfzBLVXyNjLfuTq7HGIZSVVvte 3+spCaUrd2pB0jAoTbAzuQ4NynuOYHhf410iOtsnB9YYJa2OY33Hk8aBHCzy3dAa uulrC7ByB497P85WYAkTizkvNrspVGBc -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:06 2025 by rpki-client