$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: DQ3RPQ53puYgcIxFWpdYUdDwGj923nmVpzClhZQDQ/c= Subject key identifier: E5:2D:A8:90:F9:8B:17:91:45:CF:86:73:15:C9:70:52:2D:D9:97:CD Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0331 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0310 Signing time: Fri 11 Jul 2025 01:49:08 +0000 Manifest this update: Fri 11 Jul 2025 01:49:07 +0000 Manifest next update: Fri 18 Jul 2025 01:49:07 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: FxjsMEKaXRJicXJe46yX+WAoClLiDD4jN0gOLI9PTRM=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Jul 2025 01:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 817 (0x331) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jul 11 01:49:07 2025 GMT Not After : Jul 18 01:49:07 2025 GMT Subject: CN=68706d93-7b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:5f:ae:e6:12:d4:15:d0:79:bc:10:6c:7c: d8:6e:d5:1c:46:81:f6:e5:17:11:87:25:4c:34:0d: 89:10:aa:8e:35:9e:c7:75:bb:40:58:a9:17:3a:3a: d1:74:db:a1:5a:02:6a:c7:61:5d:e5:66:9c:18:da: 8a:de:53:f8:98:48:f3:4b:29:03:a2:88:22:a5:1a: 7b:7e:d4:c0:a2:5b:fd:14:31:5c:e8:28:55:5c:b1: 8f:31:3b:a5:30:bb:50:7f:66:2e:b6:fd:43:fd:9e: 7d:b8:d1:c5:23:e9:38:d0:06:d5:b4:ab:77:d3:2c: 18:da:5f:74:bf:61:45:82:93:63:0f:8c:ac:ff:18: 93:1b:61:1e:03:64:43:9b:7f:58:c3:bc:e2:ea:e0: 05:93:b9:57:45:33:9b:96:fc:23:00:13:a4:21:dd: 4a:e5:55:8c:03:ba:e0:e8:3c:a0:0a:dd:f2:6b:94: a9:27:64:53:3b:fa:3b:58:24:07:18:47:7c:fa:55: 09:88:31:85:a0:8f:0c:7c:28:63:33:9f:c1:8e:af: d3:d9:19:4c:ab:1f:25:6c:6d:5e:91:1f:d0:7d:6e: 11:29:14:eb:da:b5:8d:3d:cc:fd:b6:69:b8:58:3e: 8b:b3:12:ec:32:87:7f:0d:18:42:a3:16:6c:f8:f1: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2D:A8:90:F9:8B:17:91:45:CF:86:73:15:C9:70:52:2D:D9:97:CD X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:39:d1:f6:c4:8b:7e:c9:d8:53:b7:50:75:61:42:65:ed:09: 87:6d:88:a4:d1:ea:f4:6d:5d:a9:b9:04:0d:5a:7c:dd:95:85: 3f:f7:f5:63:c1:b4:68:ab:1b:19:46:e2:2e:22:0c:07:e0:01: 9b:38:00:9e:39:f9:40:c3:91:81:6d:60:71:43:72:dd:76:86: 4d:85:08:6c:d5:d5:d7:85:af:64:4c:eb:cc:e8:2d:08:16:71: 2a:2d:8f:20:54:c7:70:88:db:86:e0:51:34:28:20:6a:76:dd: d9:0b:59:09:64:b2:35:65:61:a3:2d:72:e5:2b:2c:a6:0f:db: e4:c5:e4:f1:e4:2a:79:62:07:7e:4b:5d:a8:50:a3:d5:89:df: fe:2f:3f:79:85:58:0e:2a:06:7f:17:38:96:ad:c3:83:f0:ac: 47:08:f6:64:d3:f7:4b:31:3d:cf:8f:81:ab:3f:99:d4:8a:7b: 44:ae:64:e5:38:a4:e1:8c:a3:f9:8d:2c:fb:e6:0f:69:5e:b6: cf:ed:6d:79:71:70:f1:4c:55:f2:e1:c1:aa:ef:28:0f:69:fc: f8:42:2e:6b:72:af:6c:39:15:5c:3a:d2:7e:74:e9:0d:e2:f7: ce:2f:d2:12:e0:65:ae:c1:c3:54:02:2d:a9:4d:06:5d:79:ab: 56:0a:ca:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNzExMDE0OTA3WhcNMjUwNzE4MDE0OTA3WjAYMRYwFAYD VQQDEw02ODcwNmQ5My03YjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38pfruYS1BXQebwQbHzYbtUcRoH25RcRhyVMNA2JEKqONZ7HdbtAWKkXOjrR dNuhWgJqx2Fd5WacGNqK3lP4mEjzSykDoogipRp7ftTAolv9FDFc6ChVXLGPMTul MLtQf2Yutv1D/Z59uNHFI+k40AbVtKt30ywY2l90v2FFgpNjD4ys/xiTG2EeA2RD m39Yw7zi6uAFk7lXRTOblvwjABOkId1K5VWMA7rg6DygCt3ya5SpJ2RTO/o7WCQH GEd8+lUJiDGFoI8MfChjM5/Bjq/T2RlMqx8lbG1ekR/QfW4RKRTr2rWNPcz9tmm4 WD6LsxLsMod/DRhCoxZs+PGbHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUtqJD5 ixeRRc+GcxXJcFIt2ZfNMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXOdH2xIt+ydhTt1B1YUJl7QmHbYik0er0bV2puQQNWnzdlYU/9/Vj wbRoqxsZRuIuIgwH4AGbOACeOflAw5GBbWBxQ3LddoZNhQhs1dXXha9kTOvM6C0I FnEqLY8gVMdwiNuG4FE0KCBqdt3ZC1kJZLI1ZWGjLXLlKyymD9vkxeTx5Cp5Ygd+ S12oUKPVid/+Lz95hVgOKgZ/FziWrcOD8KxHCPZk0/dLMT3Pj4GrP5nUintErmTl OKThjKP5jSz75g9pXrbP7W15cXDxTFXy4cGq7ygPafz4Qi5rcq9sORVcOtJ+dOkN 4vfOL9IS4GWuwcNUAi2pTQZdeatWCsro -----END CERTIFICATE-----Generated at Sat Jul 12 17:05:38 2025 by rpki-client