$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: t+eN1q7/qx9g6u4r3dLRH7HbZOaQN21OGs++ESCe4O0= Subject key identifier: 97:DC:99:40:D3:F1:6B:3A:73:C7:EE:AB:A7:10:D5:35:D4:AE:B2:4E Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 032D Signing time: Fri 13 Jun 2025 00:47:18 +0000 Manifest this update: Fri 13 Jun 2025 00:47:17 +0000 Manifest next update: Fri 20 Jun 2025 00:47:17 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: tvYA2FfXUR9K1w5FsmCw+ZLyH9Bb+JG3gSPHGHIBdAw=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: mXZI4ZmDMYGAviVq8q1EXRtaamenFNKJ1D2Wqwa/y+M=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Jun 13 00:47:17 2025 GMT Not After : Jun 20 00:47:17 2025 GMT Subject: CN=684b7515-6fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:29:2c:bc:8b:d5:49:ac:b4:29:d9:6c:83:5e: fb:31:b9:a0:69:f1:f2:c2:5d:21:6b:9e:f1:03:f1: 5c:21:61:87:50:db:79:3c:99:b7:76:bd:a6:ac:d1: 3c:27:7a:df:b3:25:3a:16:5a:b6:36:df:fc:26:ae: 28:53:15:28:04:2f:c2:ed:e9:c0:94:08:58:26:d1: 41:14:c9:bf:6b:dc:85:ed:bb:03:87:b3:25:1d:33: b5:5d:c3:58:29:44:c9:e8:34:44:6e:18:86:c8:de: 28:1e:ac:5e:20:a4:62:e3:8b:96:d6:2b:86:a4:9b: 2d:e6:f5:39:dd:ea:3b:a4:47:67:58:75:99:ad:9f: 50:51:bb:67:e3:87:9f:99:d9:44:8a:d5:d3:a8:94: c8:ec:c6:0e:69:e1:37:6d:dd:5d:dc:00:b8:02:e5: 57:23:94:b0:0f:f2:f7:0e:81:24:90:63:ca:77:e7: 82:9e:55:10:88:87:02:1f:51:0c:bb:e1:97:75:d4: 9e:5d:3e:34:71:ed:2d:c9:74:b0:72:e4:4b:5a:21: 6e:df:96:0f:f0:17:09:7e:19:3e:2f:fd:bc:0b:41: 41:a0:ca:65:81:86:4d:ea:e7:f1:55:3f:79:a2:81: 96:a4:4d:df:73:a2:56:6c:06:67:72:74:c6:64:9a: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DC:99:40:D3:F1:6B:3A:73:C7:EE:AB:A7:10:D5:35:D4:AE:B2:4E X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d7:4e:eb:5d:6e:67:0b:ec:7c:34:fb:3c:47:ec:58:e1:79: 29:73:4c:49:46:c1:ba:35:e5:15:4f:7f:bb:2d:63:9b:d6:87: 7b:d3:e8:75:12:9d:5d:7f:4e:1a:a2:3f:a3:32:ec:5a:ff:57: 02:81:79:4a:4c:f4:9b:8a:de:5d:21:1d:4e:0d:64:1f:53:c6: 50:a8:04:74:94:9d:1e:84:59:7b:1f:da:f7:69:a7:fa:f6:8d: ed:0d:c4:38:70:a9:e4:6b:dd:27:11:51:bf:3d:ac:e1:c2:da: 2f:e0:65:97:3b:7a:0f:2b:f5:50:ee:65:72:04:5d:3a:5a:b8: a0:70:54:ce:0a:72:4a:1d:ad:19:43:73:09:f0:92:eb:ee:9f: 5a:24:9a:06:60:5d:b7:e5:38:09:ff:6e:fe:1b:92:0d:ce:b9: 40:e6:14:5d:57:a1:bc:26:40:0e:f4:95:80:88:6d:de:66:af: b0:2c:1f:a3:2b:73:5e:9c:1a:dd:bc:a7:5d:a0:e8:7a:0f:6b: 71:2e:63:a4:bb:34:c4:72:36:31:f3:cc:8d:a3:03:c5:3f:86: d8:94:2d:4e:bd:df:c0:d5:51:b7:d5:8c:74:95:0b:de:6d:01: af:14:6b:3f:17:35:f3:2f:76:cd:73:fe:ff:c7:8b:f2:e5:60: fc:d2:a4:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNjEzMDA0NzE3WhcNMjUwNjIwMDA0NzE3WjAYMRYwFAYD VQQDEw02ODRiNzUxNS02ZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniksvIvVSay0Kdlsg177MbmgafHywl0ha57xA/FcIWGHUNt5PJm3dr2mrNE8 J3rfsyU6Flq2Nt/8Jq4oUxUoBC/C7enAlAhYJtFBFMm/a9yF7bsDh7MlHTO1XcNY KUTJ6DREbhiGyN4oHqxeIKRi44uW1iuGpJst5vU53eo7pEdnWHWZrZ9QUbtn44ef mdlEitXTqJTI7MYOaeE3bd1d3AC4AuVXI5SwD/L3DoEkkGPKd+eCnlUQiIcCH1EM u+GXddSeXT40ce0tyXSwcuRLWiFu35YP8BcJfhk+L/28C0FBoMplgYZN6ufxVT95 ooGWpE3fc6JWbAZncnTGZJr7qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfcmUDT 8Ws6c8fuq6cQ1TXUrrJOMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi107rXW5nC+x8NPs8R+xY4Xkpc0xJRsG6NeUVT3+7LWOb1od70+h1 Ep1df04aoj+jMuxa/1cCgXlKTPSbit5dIR1ODWQfU8ZQqAR0lJ0ehFl7H9r3aaf6 9o3tDcQ4cKnka90nEVG/Pazhwtov4GWXO3oPK/VQ7mVyBF06WrigcFTOCnJKHa0Z Q3MJ8JLr7p9aJJoGYF235TgJ/27+G5INzrlA5hRdV6G8JkAO9JWAiG3eZq+wLB+j K3NenBrdvKddoOh6D2txLmOkuzTEcjYx88yNowPFP4bYlC1Ovd/A1VG31Yx0lQve bQGvFGs/FzXzL3bNc/7/x4vy5WD80qS7 -----END CERTIFICATE-----Generated at Sat Jun 14 20:17:55 2025 by rpki-client