$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: TW9acBcZ9TEP/25ZZxcBTk4p9grj/sZ1UwQnrJAhb3o= Subject key identifier: A5:3F:7A:29:A9:B7:60:59:5F:55:A4:E0:7E:04:6A:D7:AE:D7:EF:19 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0370 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 034A Signing time: Thu 23 Oct 2025 02:25:10 +0000 Manifest this update: Thu 23 Oct 2025 02:25:10 +0000 Manifest next update: Thu 30 Oct 2025 02:25:10 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: i9D5Bpp9hCNf2yzuZ/mtsCyBtkDhteyriFBjn9/LYoI=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 6: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 880 (0x370) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Oct 23 02:25:10 2025 GMT Not After : Oct 30 02:25:10 2025 GMT Subject: CN=68f99206-465d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:b8:38:78:7f:0b:0c:ab:1e:58:a2:c4:0e: fb:dc:a3:a1:c7:63:14:20:43:ff:0e:56:f5:53:09: 29:83:62:e8:97:48:9d:57:8c:3b:1b:5e:d9:83:df: 64:30:cf:1f:00:7f:44:41:46:2f:fb:69:ac:55:ed: 02:19:7b:9a:77:40:76:b7:48:f5:de:c6:68:bb:7d: a1:f5:f0:f5:cf:6e:9f:71:6b:4f:a9:4b:81:32:d6: 83:3a:4e:7e:4e:59:70:2b:9e:41:dc:38:f6:a7:98: 40:a1:b0:a8:57:6a:1f:b3:ad:96:05:e0:3c:23:12: 00:c2:f4:09:17:4e:55:60:cf:e3:72:d3:a2:11:c1: 35:f3:4d:cd:02:e9:7f:1c:97:77:7e:af:38:c0:b7: ba:7e:45:a0:b0:5f:4e:f4:0d:cf:cf:b8:6a:b3:f6: 8a:c1:31:b1:36:0d:9d:27:bc:29:4f:0e:96:f7:27: c0:dc:ca:7a:b4:38:b0:a6:43:e3:f2:5b:b9:3e:81: 2a:1f:1c:d1:c5:a6:9f:ae:06:a3:44:ec:2c:76:1c: 62:bc:ca:c1:28:73:27:72:fc:2c:0b:ab:14:8e:38: e0:40:35:35:f4:d3:cf:03:be:95:39:8d:09:1b:4d: 91:95:cd:7a:5b:18:44:35:21:92:2c:d3:1a:01:35: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3F:7A:29:A9:B7:60:59:5F:55:A4:E0:7E:04:6A:D7:AE:D7:EF:19 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:a1:62:9c:3f:7c:f9:1b:0a:45:42:cd:69:4f:10:65:80:30: 0b:56:2e:31:21:8b:90:2b:5f:42:74:f7:69:af:fd:a4:c0:37: f9:9f:f9:54:e7:29:77:9f:c1:65:d0:d4:74:a0:86:01:c9:b3: 69:d5:f8:2e:de:43:cb:ed:25:3f:3d:4b:ad:3c:9a:a5:41:53: 0c:29:f0:21:62:25:7d:4a:74:39:10:a9:fb:25:d8:bc:e4:b9: 8b:5c:2e:dc:1d:c4:ac:98:2a:0e:5a:ca:9e:d9:4f:f6:1f:c2: 2f:c3:91:04:13:25:d9:6a:9e:1d:f0:75:97:dd:6e:1d:da:38: 4a:f6:4f:1d:a9:21:05:0f:c3:7a:ac:a3:e1:ba:88:22:8a:c5: 9a:c6:fe:6d:f4:64:dc:d3:9a:b3:1a:89:82:56:d7:c3:fe:ec: ba:21:5b:2e:58:85:8c:69:a2:53:5a:a0:dd:c9:ec:ba:b6:ea: 6e:67:3b:d1:67:6d:da:26:ce:d8:bc:54:d6:11:43:b9:36:39: 46:c7:c3:4a:ca:e1:4f:0c:ce:40:9c:e8:7c:52:90:69:ec:f4: 3e:23:e7:f6:01:3d:18:7e:f7:95:8f:52:8b:ef:d2:73:6b:3c: ba:15:19:15:c1:65:b3:32:4b:cf:c6:8a:1a:5f:81:13:db:d3: 58:86:21:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUxMDIzMDIyNTEwWhcNMjUxMDMwMDIyNTEwWjAYMRYwFAYD VQQDEw02OGY5OTIwNi00NjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0l24OHh/CwyrHliixA773KOhx2MUIEP/Dlb1Uwkpg2Lol0idV4w7G17Zg99k MM8fAH9EQUYv+2msVe0CGXuad0B2t0j13sZou32h9fD1z26fcWtPqUuBMtaDOk5+ TllwK55B3Dj2p5hAobCoV2ofs62WBeA8IxIAwvQJF05VYM/jctOiEcE1803NAul/ HJd3fq84wLe6fkWgsF9O9A3Pz7hqs/aKwTGxNg2dJ7wpTw6W9yfA3Mp6tDiwpkPj 8lu5PoEqHxzRxaafrgajROwsdhxivMrBKHMncvwsC6sUjjjgQDU19NPPA76VOY0J G02Rlc16WxhENSGSLNMaATUFZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU/eimp t2BZX1Wk4H4Eateu1+8ZMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1oWKcP3z5GwpFQs1pTxBlgDALVi4xIYuQK19CdPdpr/2kwDf5n/lU 5yl3n8Fl0NR0oIYBybNp1fgu3kPL7SU/PUutPJqlQVMMKfAhYiV9SnQ5EKn7Jdi8 5LmLXC7cHcSsmCoOWsqe2U/2H8Ivw5EEEyXZap4d8HWX3W4d2jhK9k8dqSEFD8N6 rKPhuogiisWaxv5t9GTc05qzGomCVtfD/uy6IVsuWIWMaaJTWqDdyey6tupuZzvR Z23aJs7YvFTWEUO5NjlGx8NKyuFPDM5AnOh8UpBp7PQ+I+f2AT0YfveVj1KL79Jz azy6FRkVwWWzMkvPxooaX4ET29NYhiFi -----END CERTIFICATE-----Generated at Thu Oct 23 05:25:56 2025 by rpki-client