$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: clwxlAXdSkVc+QhEZ0Z+vYMYW/IwyDpmUrPo21lVumA= Subject key identifier: F3:6A:D1:1F:F5:CB:3A:BA:CE:30:53:C4:C4:70:49:36:54:6D:6B:4A Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0313 Signing time: Fri 25 Apr 2025 01:05:33 +0000 Manifest this update: Fri 25 Apr 2025 01:05:33 +0000 Manifest next update: Fri 02 May 2025 01:05:33 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: JwBHiO9VHZrkGUUabYV5aPyH/8H/GoMPuyk0zNiEnHs=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: sAJg3DCCYRdjAFCi7QXgAP3kSOdimSLLMFAsyPc69fQ=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:05:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Apr 25 01:05:33 2025 GMT Not After : May 2 01:05:33 2025 GMT Subject: CN=680adfdd-702e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:b1:79:67:9e:ea:e2:49:57:7d:c4:72:27: b0:9b:8d:6a:08:54:2e:91:b9:cf:1a:13:f6:19:3b: e1:d6:88:9f:f5:63:a3:e5:36:5e:90:95:1e:69:08: 78:85:09:cf:18:40:f3:5e:b1:68:49:5a:03:96:d5: 01:58:d7:92:ab:b6:a6:88:78:a5:e7:4d:3b:ed:8b: 7e:2d:fc:1c:62:c7:fd:78:37:61:81:38:6c:5f:b6: f7:7c:fb:3a:61:cd:5e:99:ff:e3:66:b4:be:80:33: d7:a7:40:7c:c2:67:4d:1d:1e:c2:a5:b1:49:77:da: 46:b3:5e:55:8c:79:52:4a:64:54:dd:a3:d9:8d:dc: 6f:ce:b6:58:3f:c3:36:c5:66:e9:98:fa:4f:9a:35: 93:9f:51:ba:0d:da:ef:30:1f:9b:b1:f1:b4:4a:89: ee:41:7b:a5:77:76:63:08:5b:56:ff:cb:dd:b7:90: 4b:be:0e:78:3a:91:97:e6:f3:85:92:cf:30:60:c9: 8e:2b:d9:6e:8e:91:07:ac:46:06:9c:33:e6:0b:27: ad:2b:bf:f3:13:48:07:85:13:72:15:45:39:7a:36: 08:e9:78:10:16:4c:3f:53:3b:81:ee:94:6c:29:f7: ee:48:93:04:e4:a5:5c:55:59:94:ff:3b:fb:ef:d0: e5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:6A:D1:1F:F5:CB:3A:BA:CE:30:53:C4:C4:70:49:36:54:6D:6B:4A X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ff:cf:09:d1:3a:8c:93:3a:1a:e8:90:13:9b:27:45:eb:59: 13:53:3a:25:7b:18:7a:7c:d5:79:a3:65:9c:16:07:fe:cd:4d: 53:5b:f9:43:2a:bc:74:e5:63:4d:41:a9:f6:1f:4d:f5:15:50: 75:26:b7:3b:31:b9:e8:a3:59:e6:4d:70:24:f1:e3:43:36:a9: 4a:4d:00:0e:5d:61:21:1b:92:88:94:4a:1a:3f:29:2a:da:e6: 1c:76:b8:cc:4c:24:ff:03:df:44:f8:db:74:13:0b:dc:9e:27: 13:39:4b:b3:82:92:3b:60:85:51:35:ae:ae:ba:d2:cc:67:0f: a9:43:b3:7b:23:e5:86:95:d8:f6:4e:d5:2b:f2:8b:22:16:9e: 76:cc:d0:e5:4c:b8:98:94:ae:cd:12:27:3e:7a:52:c4:eb:6f: 7b:2a:80:3c:78:03:f0:cf:16:f9:ea:f3:83:77:d0:b3:30:1a: 4c:34:af:02:db:80:70:80:06:7d:5b:83:62:08:df:cc:3a:0b: a3:27:62:fd:73:75:61:99:4b:75:30:46:04:cc:e3:f8:40:b2: 4e:4a:aa:6c:73:81:27:37:ec:94:2b:70:b9:4b:e9:64:41:94: af:22:76:b2:f0:14:21:88:cd:e0:6f:89:34:c2:f2:f4:54:33: cc:16:63:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNDI1MDEwNTMzWhcNMjUwNTAyMDEwNTMzWjAYMRYwFAYD VQQDEw02ODBhZGZkZC03MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0sWxeWee6uJJV33Eciewm41qCFQukbnPGhP2GTvh1oif9WOj5TZekJUeaQh4 hQnPGEDzXrFoSVoDltUBWNeSq7amiHil50077Yt+LfwcYsf9eDdhgThsX7b3fPs6 Yc1emf/jZrS+gDPXp0B8wmdNHR7CpbFJd9pGs15VjHlSSmRU3aPZjdxvzrZYP8M2 xWbpmPpPmjWTn1G6DdrvMB+bsfG0SonuQXuld3ZjCFtW/8vdt5BLvg54OpGX5vOF ks8wYMmOK9lujpEHrEYGnDPmCyetK7/zE0gHhRNyFUU5ejYI6XgQFkw/UzuB7pRs KffuSJME5KVcVVmU/zv779DlyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNq0R/1 yzq6zjBTxMRwSTZUbWtKMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu/88J0TqMkzoa6JATmydF61kTUzolexh6fNV5o2WcFgf+zU1TW/lD Krx05WNNQan2H031FVB1Jrc7Mbnoo1nmTXAk8eNDNqlKTQAOXWEhG5KIlEoaPykq 2uYcdrjMTCT/A99E+Nt0EwvcnicTOUuzgpI7YIVRNa6uutLMZw+pQ7N7I+WGldj2 TtUr8osiFp52zNDlTLiYlK7NEic+elLE6297KoA8eAPwzxb56vODd9CzMBpMNK8C 24BwgAZ9W4NiCN/MOgujJ2L9c3VhmUt1MEYEzOP4QLJOSqpsc4EnN+yUK3C5S+lk QZSvInay8BQhiM3gb4k0wvL0VDPMFmOl -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:22 2025 by rpki-client