$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: 6aT5KlVMijtjwRt7c84XqQuqnalLL4QYbEgisjhlaKk= Subject key identifier: 6B:F5:78:C0:21:96:BE:55:07:50:B3:D6:0E:AF:4D:54:7D:5C:2F:98 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0314 Signing time: Sat 19 Jul 2025 01:39:43 +0000 Manifest this update: Sat 19 Jul 2025 01:39:42 +0000 Manifest next update: Sat 26 Jul 2025 01:39:42 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 8rfMrwW8svwRy3EgyhJRj1Fd6rD3zweh3QWkQDxOgQw=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Jul 19 01:39:42 2025 GMT Not After : Jul 26 01:39:42 2025 GMT Subject: CN=687af75f-ef63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:f8:d2:88:c4:12:5d:1b:a8:3e:d0:b9:0e: a1:16:b2:b7:a9:95:27:b4:3f:2d:db:15:cb:45:c8: 67:12:87:8c:36:1d:e3:15:63:96:fa:e4:d6:9c:10: 86:a8:18:2d:6e:76:5d:41:f5:c9:ba:6f:3b:3e:6d: 5a:67:97:5d:e2:30:45:f5:8e:18:c4:3d:34:2d:32: ea:53:34:63:ed:f2:57:8f:3f:3f:92:ca:45:9f:e4: 31:21:f7:82:c4:27:0d:5a:31:35:8f:8e:2f:c8:dc: ab:aa:f0:c3:45:61:42:a7:f3:16:ea:56:9c:01:2a: 30:a3:7d:fb:a7:76:f6:d3:c8:4a:35:bb:c6:63:98: fc:f2:5b:84:1e:7d:a7:e8:8f:41:b0:a3:c9:0f:46: a4:b3:03:2b:c0:2a:a0:82:29:cf:44:0c:a6:a2:fd: c4:be:f3:fc:e6:48:03:69:c5:96:1c:ac:88:f9:16: dd:19:bd:3d:21:be:c0:ec:5c:77:7f:cb:8e:69:f5: d6:ac:a2:97:08:de:96:b4:4b:61:cd:04:17:10:ea: e7:3e:11:ec:e7:d9:75:06:49:ac:99:dc:27:b1:ec: 02:6f:4a:0a:59:fe:3b:ac:9e:2a:a6:6f:f8:c9:c8: f8:b8:9d:9e:ac:6d:d3:f1:4e:c0:a1:9f:01:4a:36: f3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F5:78:C0:21:96:BE:55:07:50:B3:D6:0E:AF:4D:54:7D:5C:2F:98 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:19:a4:3f:09:7d:59:e0:8d:ab:4b:fa:7e:01:c0:3f:8d:ee: d7:e1:bf:39:29:f6:48:de:78:18:9d:a2:b4:a2:9e:a0:d0:c1: b3:ed:70:d9:c8:cd:49:c7:d5:f5:b8:24:9c:0c:34:12:24:06: 71:0b:14:90:d0:a4:d7:ee:b0:01:90:b6:6c:03:30:9a:70:ab: 15:d5:71:d5:cb:fc:18:ad:96:a5:d3:c8:e9:ca:f5:7a:32:16: cc:44:42:db:3c:2d:dd:d9:98:0a:bc:0b:b7:08:4b:87:d1:30: be:d6:21:5a:86:95:e3:b1:1a:fd:2f:d6:59:75:34:a6:28:6c: 91:d5:90:3a:91:68:f6:76:31:af:08:90:81:cb:d6:93:42:9d: 6b:f5:c3:f4:23:e4:e4:2c:25:00:ed:cd:03:e7:b3:b9:ee:6f: 1b:81:45:af:78:1a:a6:d7:8b:75:bf:9d:70:a3:20:c6:89:26: 0b:f3:28:30:d3:9e:6a:0b:57:1a:2e:99:7b:0b:7c:a9:e7:69: 21:06:f6:ed:82:48:b8:c4:72:88:55:05:d2:3d:7b:7b:fc:af: b6:2f:c5:3c:a1:c9:d0:73:e9:fd:e2:16:a5:db:18:99:4b:0e: 27:83:e9:e8:51:c1:da:8d:ed:a1:f2:0f:61:e8:e1:fa:e1:44: 72:bd:23:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwNzE5MDEzOTQyWhcNMjUwNzI2MDEzOTQyWjAYMRYwFAYD VQQDEw02ODdhZjc1Zi1lZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDb40ojEEl0bqD7QuQ6hFrK3qZUntD8t2xXLRchnEoeMNh3jFWOW+uTWnBCG qBgtbnZdQfXJum87Pm1aZ5dd4jBF9Y4YxD00LTLqUzRj7fJXjz8/kspFn+QxIfeC xCcNWjE1j44vyNyrqvDDRWFCp/MW6lacASowo337p3b208hKNbvGY5j88luEHn2n 6I9BsKPJD0akswMrwCqgginPRAymov3EvvP85kgDacWWHKyI+RbdGb09Ib7A7Fx3 f8uOafXWrKKXCN6WtEthzQQXEOrnPhHs59l1BkmsmdwnsewCb0oKWf47rJ4qpm/4 ycj4uJ2erG3T8U7AoZ8BSjbzHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv1eMAh lr5VB1Cz1g6vTVR9XC+YMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEGaQ/CX1Z4I2rS/p+AcA/je7X4b85KfZI3ngYnaK0op6g0MGz7XDZ yM1Jx9X1uCScDDQSJAZxCxSQ0KTX7rABkLZsAzCacKsV1XHVy/wYrZal08jpyvV6 MhbMRELbPC3d2ZgKvAu3CEuH0TC+1iFahpXjsRr9L9ZZdTSmKGyR1ZA6kWj2djGv CJCBy9aTQp1r9cP0I+TkLCUA7c0D57O57m8bgUWveBqm14t1v51woyDGiSYL8ygw 055qC1caLpl7C3yp52khBvbtgki4xHKIVQXSPXt7/K+2L8U8ocnQc+n94hal2xiZ Sw4ng+noUcHaje2h8g9h6OH64URyvSOZ -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:04 2025 by rpki-client