$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: VKRqRa7IXgCw3xQjqggbRZQ31inUGfh+JuP+VjHnh9c= Subject key identifier: 88:C2:DE:1A:40:22:CC:79:FA:67:B8:BA:29:0E:0E:2E:43:40:4A:9A Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0373 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0340 Signing time: Sat 19 Jul 2025 01:37:21 +0000 Manifest this update: Sat 19 Jul 2025 01:37:20 +0000 Manifest next update: Sat 26 Jul 2025 01:37:20 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: oYhfAlF7PF7DTYeE/iEQ29GtnGun30FBraPtjPtxBjw=) 2: 095A440652B311F0B25AA911C4F9AE02.roa (hash: boxMqVE8q46us+PFvAGR6ljVcVX9wIOjIMY9dIoSWLY=) 3: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 4: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:37:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 883 (0x373) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Jul 19 01:37:20 2025 GMT Not After : Jul 26 01:37:20 2025 GMT Subject: CN=687af6d0-5797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:8a:dc:ed:bd:9d:b3:61:c0:a5:de:1f:6f: 64:6d:dd:6d:0f:b2:c8:80:8e:cf:d1:0f:2f:6d:e8: 7a:b0:05:5a:3b:71:c2:cd:70:e5:da:dd:5b:1d:7f: fc:5e:92:0a:60:7f:4f:5c:f9:27:0a:03:70:ee:df: 1d:bb:10:76:b3:6e:b9:a6:d4:32:78:ae:59:98:5f: b4:b3:c1:92:ec:8c:c8:21:bb:45:a1:00:39:a1:42: 35:fe:be:28:48:dd:b9:a2:dd:ce:1b:1a:cc:03:59: 06:03:06:76:a0:e6:35:79:6a:9e:13:ee:e2:9f:5b: eb:35:c9:95:df:b9:8a:77:cc:0e:32:2d:49:53:bf: 88:5c:39:cf:65:e1:e8:eb:be:6a:6a:fe:7a:5e:e2: 5c:a9:7e:31:af:98:61:46:14:2f:e0:cf:1d:fa:d4: 42:76:bb:f3:cd:79:ff:d2:ca:58:cb:d9:dd:c5:1f: 72:15:2d:2d:29:20:fc:44:24:a6:e1:d9:f0:42:cf: 70:13:dc:98:a6:84:aa:f9:de:ce:1f:da:3c:60:df: 20:9b:53:1e:97:bd:e1:2a:81:39:95:b1:a5:91:91: e9:27:0a:8f:19:79:89:fb:51:d5:0a:16:5b:9d:1c: fd:37:de:ef:e0:34:6d:55:02:64:b2:8a:d1:25:2e: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:DE:1A:40:22:CC:79:FA:67:B8:BA:29:0E:0E:2E:43:40:4A:9A X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4b:92:44:42:04:84:a9:03:65:60:25:7b:ab:c6:43:a1:eb: ef:79:30:88:11:2a:4c:86:88:e9:2e:07:bc:7a:67:07:4a:39: e1:53:28:4b:9c:5d:38:cb:e1:75:19:a6:86:f3:f3:83:28:a5: e0:bb:ac:c8:7a:21:80:80:81:92:01:52:5d:d2:5b:33:19:8d: 88:01:de:03:da:aa:9f:04:9d:e5:4a:4e:f3:62:29:9c:78:45: 6a:7d:6d:58:a0:5e:98:b4:bc:b8:55:e9:f1:b7:13:72:c7:b1: 28:d8:2d:db:3b:55:b3:65:b9:a8:c3:2d:df:af:6f:c0:f6:ac: 25:d3:46:35:59:8c:d2:52:82:6d:37:90:78:14:24:76:52:dc: f1:db:fd:97:db:c5:dd:02:8a:66:bd:ce:d8:e3:2b:f8:66:9f: c3:9b:37:96:22:a4:93:a7:01:d2:8c:fd:83:8a:9c:e0:f5:53: 49:3a:a1:be:df:d0:c9:ee:ab:73:b6:ea:41:eb:2b:c2:a6:7d: 4c:0a:8b:5e:22:05:2e:fb:3f:e1:d8:21:0f:53:30:e6:8a:8b: 94:fe:d9:d0:a5:b1:18:4a:7b:a5:31:b7:1a:db:13:ee:14:4c: ef:39:73:3d:c9:48:5e:bc:92:25:af:90:80:28:c7:28:9b:1e: 83:be:37:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNzE5MDEzNzIwWhcNMjUwNzI2MDEzNzIwWjAYMRYwFAYD VQQDEw02ODdhZjZkMC01Nzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm2K3O29nbNhwKXeH29kbd1tD7LIgI7P0Q8vbeh6sAVaO3HCzXDl2t1bHX/8 XpIKYH9PXPknCgNw7t8duxB2s265ptQyeK5ZmF+0s8GS7IzIIbtFoQA5oUI1/r4o SN25ot3OGxrMA1kGAwZ2oOY1eWqeE+7in1vrNcmV37mKd8wOMi1JU7+IXDnPZeHo 675qav56XuJcqX4xr5hhRhQv4M8d+tRCdrvzzXn/0spYy9ndxR9yFS0tKSD8RCSm 4dnwQs9wE9yYpoSq+d7OH9o8YN8gm1Mel73hKoE5lbGlkZHpJwqPGXmJ+1HVChZb nRz9N97v4DRtVQJksorRJS5cKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjC3hpA Isx5+me4uikODi5DQEqaMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDES5JEQgSEqQNlYCV7q8ZDoevveTCIESpMhojpLge8emcHSjnhUyhL nF04y+F1GaaG8/ODKKXgu6zIeiGAgIGSAVJd0lszGY2IAd4D2qqfBJ3lSk7zYimc eEVqfW1YoF6YtLy4VenxtxNyx7Eo2C3bO1WzZbmowy3fr2/A9qwl00Y1WYzSUoJt N5B4FCR2Utzx2/2X28XdAopmvc7Y4yv4Zp/DmzeWIqSTpwHSjP2Dipzg9VNJOqG+ 39DJ7qtztupB6yvCpn1MCoteIgUu+z/h2CEPUzDmiouU/tnQpbEYSnulMbca2xPu FEzvOXM9yUhevJIlr5CAKMcomx6DvjfY -----END CERTIFICATE-----Generated at Sun Jul 20 12:59:05 2025 by rpki-client