$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: 892DKw5yFJaAPrSvNWlw7pvIc6KVwWes5BCfCEHqFG8= Subject key identifier: E7:0F:17:18:54:DC:A1:72:D3:D9:90:3B:F8:FA:EC:A3:BF:FE:32:AA Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 038B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0358 Signing time: Wed 03 Sep 2025 01:29:28 +0000 Manifest this update: Wed 03 Sep 2025 01:29:27 +0000 Manifest next update: Wed 10 Sep 2025 01:29:27 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: gn1fzMHYrLzr9ZQJNBVvd06vJp1RGg5joRbc6fH3cCk=) 2: 095A440652B311F0B25AA911C4F9AE02.roa (hash: boxMqVE8q46us+PFvAGR6ljVcVX9wIOjIMY9dIoSWLY=) 3: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 4: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 907 (0x38b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Sep 3 01:29:27 2025 GMT Not After : Sep 10 01:29:27 2025 GMT Subject: CN=68b799f7-316a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:d5:05:88:3b:50:9f:16:34:f7:82:d7:b7: a6:20:f3:f7:00:b9:a2:2b:2d:7f:70:78:91:46:f1: 0d:0f:9f:39:35:39:c6:1d:0b:94:bb:e3:5f:d5:ee: c3:24:74:a3:ea:87:b7:de:4b:3a:c0:af:21:43:30: 65:f9:b9:5f:54:0d:1b:6c:43:36:87:bc:c7:6d:da: 2d:88:3f:5d:35:e4:3a:f1:ce:e5:6a:fe:9a:d0:e9: 01:e2:35:8d:38:14:7d:c3:08:f0:74:ed:ab:b2:3d: 13:e9:9f:1a:c3:63:38:f6:b6:a7:fe:25:cf:f3:e4: e9:d5:81:f6:13:c0:cd:93:b2:58:21:df:83:3a:de: 51:7c:84:dc:ea:1a:41:8d:53:78:f4:f5:b2:f3:de: 15:9e:1c:cc:8c:32:b9:0d:c1:0d:00:c2:f9:d8:cf: a3:d9:12:46:18:e7:a8:ba:d0:ef:71:62:d9:68:20: 8b:a8:74:79:76:74:58:d7:60:7c:ac:8c:48:c8:1c: 29:f3:41:75:1f:ae:5e:dc:a3:b6:19:48:ca:5b:24: e2:e2:af:0b:a4:c4:9d:1f:ed:f4:05:76:0f:17:27: 32:64:1e:0d:7c:9a:6c:63:03:6d:b0:66:44:e7:0c: 7f:f5:39:9e:e9:77:fa:92:ec:0d:c4:a1:6f:fa:2c: c7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:17:18:54:DC:A1:72:D3:D9:90:3B:F8:FA:EC:A3:BF:FE:32:AA X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:05:87:0b:c9:b5:e4:5c:df:f5:01:9b:ed:61:05:ef:33:e5: b2:53:2b:f6:cc:d4:07:08:de:48:2a:41:b9:36:63:75:a8:50: a4:43:14:e5:4d:21:b2:dc:cc:de:e7:ef:1b:a6:bc:5c:86:a2: 44:00:4b:4c:9d:e4:e3:6b:7c:49:cb:d7:a4:56:1f:45:f8:5f: 61:93:81:dc:91:59:ce:3d:00:a9:f8:e2:34:ce:a4:e0:c1:18: 49:57:c7:42:f0:0b:23:6d:7e:08:12:67:3a:7b:28:be:bb:75: 69:c3:5f:b5:4e:f6:a7:88:5e:b0:2a:8b:57:7c:dd:7b:b3:03: 3e:b6:56:f1:be:ca:54:2d:ef:38:29:c0:6b:43:52:68:37:f2: d5:b4:6b:cc:d3:0a:2f:9c:50:2a:2d:88:d0:3a:16:b2:eb:1e: 6c:50:de:de:69:6e:07:89:42:16:6a:ff:77:7d:23:6e:3c:5b: 8d:3e:15:e6:bf:75:d6:16:0f:d5:80:38:00:64:ba:30:d7:a1: 0c:51:6b:73:6e:d2:42:9f:ba:00:69:01:28:66:33:41:d7:04: 64:a7:45:63:7e:93:ab:b5:a5:b4:00:a6:8c:48:ee:7b:13:9a: e7:93:0f:07:c3:5a:d1:20:6d:14:21:75:f8:2c:04:a6:4f:c9: b6:82:e9:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwOTAzMDEyOTI3WhcNMjUwOTEwMDEyOTI3WjAYMRYwFAYD VQQDEw02OGI3OTlmNy0zMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtf3VBYg7UJ8WNPeC17emIPP3ALmiKy1/cHiRRvEND585NTnGHQuUu+Nf1e7D JHSj6oe33ks6wK8hQzBl+blfVA0bbEM2h7zHbdotiD9dNeQ68c7lav6a0OkB4jWN OBR9wwjwdO2rsj0T6Z8aw2M49ran/iXP8+Tp1YH2E8DNk7JYId+DOt5RfITc6hpB jVN49PWy894VnhzMjDK5DcENAML52M+j2RJGGOeoutDvcWLZaCCLqHR5dnRY12B8 rIxIyBwp80F1H65e3KO2GUjKWyTi4q8LpMSdH+30BXYPFycyZB4NfJpsYwNtsGZE 5wx/9Tme6Xf6kuwNxKFv+izHlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcPFxhU 3KFy09mQO/j67KO//jKqMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvBYcLybXkXN/1AZvtYQXvM+WyUyv2zNQHCN5IKkG5NmN1qFCkQxTl TSGy3Mze5+8bprxchqJEAEtMneTja3xJy9ekVh9F+F9hk4HckVnOPQCp+OI0zqTg wRhJV8dC8AsjbX4IEmc6eyi+u3Vpw1+1TvaniF6wKotXfN17swM+tlbxvspULe84 KcBrQ1JoN/LVtGvM0wovnFAqLYjQOhay6x5sUN7eaW4HiUIWav93fSNuPFuNPhXm v3XWFg/VgDgAZLow16EMUWtzbtJCn7oAaQEoZjNB1wRkp0VjfpOrtaW0AKaMSO57 E5rnkw8Hw1rRIG0UIXX4LASmT8m2gulx -----END CERTIFICATE-----Generated at Thu Sep 4 02:15:48 2025 by rpki-client