$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json) Hash identifier: JtQQcgbn9CNxz2syx6GxLEtvML7Jp3E5GGhVJOirbm4= Subject key identifier: E1:6F:CE:3F:CC:3E:D5:A8:53:FE:FA:B3:97:49:F6:BD:B5:06:A4:43 Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Certificate serial: 0327 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft Manifest number: 0321 Signing time: Sat 31 May 2025 01:20:56 +0000 Manifest this update: Sat 31 May 2025 01:20:55 +0000 Manifest next update: Sat 07 Jun 2025 01:20:55 +0000 Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: FEU5pI4d92w8k9vTS1sMH4eQfN7a+rTScoxMAz+pjDM=) 2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: 86l1R+M09/2NPXx9I8sqm1xbxQxFvP0FLDSgRGwtfyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 807 (0x327) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Validity Not Before: May 31 01:20:55 2025 GMT Not After : Jun 7 01:20:55 2025 GMT Subject: CN=683a5978-b551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:09:a8:af:77:a0:a8:df:15:1f:b5:97:75:b8: 4c:8f:3d:1f:09:6a:5c:4b:df:e4:ab:89:ce:c2:af: 41:86:13:9f:71:d2:0e:db:5b:f8:fc:b1:53:5d:45: b1:e6:b9:af:b8:64:5f:2e:35:be:d1:d1:38:94:90: 9d:06:e9:17:03:e6:0a:b8:6b:49:5c:c4:0f:06:77: 5e:65:62:5b:6d:b8:80:47:71:c1:ae:fb:25:65:e6: fe:4f:8b:2d:32:40:71:a9:72:77:11:87:17:6a:78: ad:e5:dc:47:54:cf:7d:61:50:af:f2:6c:d2:c8:36: 29:e5:4d:d0:d8:28:56:de:a7:ce:ec:0b:47:ff:42: b1:b1:d1:15:0e:38:9a:fa:6c:12:20:83:a9:aa:93: a5:b5:ad:29:d8:c6:0a:c8:dc:1c:e9:60:47:fd:e1: 63:ac:45:ea:cb:e4:c6:7b:72:35:2c:25:e1:3f:9a: 28:ae:25:f5:5c:df:6b:a0:f4:d3:ef:48:18:dd:ce: 20:ef:f5:3e:fe:0d:89:94:63:ac:33:94:99:27:a9: d5:72:54:0c:ff:1e:6c:8b:a7:ba:49:41:f3:c5:2f: e8:c4:9b:56:33:da:70:7c:e9:62:11:dd:ef:bc:2b: 39:ab:3a:8f:70:f6:34:27:f4:b8:76:e9:91:83:5a: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6F:CE:3F:CC:3E:D5:A8:53:FE:FA:B3:97:49:F6:BD:B5:06:A4:43 X509v3 Authority Key Identifier: keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:59:ae:7d:ea:c0:61:81:4d:08:0d:e1:9b:d7:2e:3f:a6:20: 00:5d:db:36:e1:7c:5e:49:bc:8e:35:12:4d:71:87:70:1b:be: 2c:a0:2c:d4:bd:45:04:4e:1a:1d:4b:2c:08:4f:3c:cb:4e:c1: d2:63:f6:9c:f4:05:35:30:d6:84:7b:f5:86:58:93:10:14:23: b0:73:54:ba:d1:d6:6e:29:e8:e0:3d:78:87:14:d8:47:f2:ce: ee:a0:7f:5a:9e:86:ce:19:33:e4:cf:38:3e:c7:25:a1:17:84: 22:bc:9b:ca:0c:74:f8:10:12:c4:24:fa:2c:fd:7c:0d:e9:56: 2d:a9:cb:8a:3d:f9:2e:71:ee:93:d2:ed:79:8f:1e:14:84:7f: 57:30:67:9f:c1:a1:4d:7b:4b:49:21:c9:6d:d8:03:c0:f6:28: fc:7a:8d:86:6e:f8:ff:82:ec:9a:98:52:a0:af:f7:09:08:7e: 39:60:12:4d:47:f2:72:45:df:df:fd:e0:23:05:7a:03:f8:32: 29:2b:a2:ad:d0:79:86:a7:ee:c7:fc:68:87:36:57:a1:48:fc: 10:fc:96:da:66:40:28:1b:f8:85:4e:4b:a0:b7:c6:74:6e:15: f9:03:d9:35:92:dd:f0:4c:62:05:18:fd:76:27:cc:66:e7:8c: 23:ca:65:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE REJGQjc1QUIwHhcNMjUwNTMxMDEyMDU1WhcNMjUwNjA3MDEyMDU1WjAYMRYwFAYD VQQDEw02ODNhNTk3OC1iNTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Qmor3egqN8VH7WXdbhMjz0fCWpcS9/kq4nOwq9BhhOfcdIO21v4/LFTXUWx 5rmvuGRfLjW+0dE4lJCdBukXA+YKuGtJXMQPBndeZWJbbbiAR3HBrvslZeb+T4st MkBxqXJ3EYcXanit5dxHVM99YVCv8mzSyDYp5U3Q2ChW3qfO7AtH/0KxsdEVDjia +mwSIIOpqpOlta0p2MYKyNwc6WBH/eFjrEXqy+TGe3I1LCXhP5ooriX1XN9roPTT 70gY3c4g7/U+/g2JlGOsM5SZJ6nVclQM/x5si6e6SUHzxS/oxJtWM9pwfOliEd3v vCs5qzqPcPY0J/S4dumRg1pC3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOFvzj/M PtWoU/76s5dJ9r21BqRDMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIWa596sBhgU0IDeGb1y4/piAAXds24XxeSbyONRJNcYdwG74soCzU vUUEThodSywITzzLTsHSY/ac9AU1MNaEe/WGWJMQFCOwc1S60dZuKejgPXiHFNhH 8s7uoH9anobOGTPkzzg+xyWhF4QivJvKDHT4EBLEJPos/XwN6VYtqcuKPfkuce6T 0u15jx4UhH9XMGefwaFNe0tJIclt2APA9ij8eo2Gbvj/guyamFKgr/cJCH45YBJN R/JyRd/f/eAjBXoD+DIpK6Kt0HmGp+7H/GiHNlehSPwQ/JbaZkAoG/iFTkugt8Z0 bhX5A9k1kt3wTGIFGP12J8xm54wjymUC -----END CERTIFICATE-----Generated at Sat May 31 17:32:54 2025 by rpki-client