$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: 9+pFZGMxrYUoHuGMt/1aV5zxWohSVK01PhFJc1LYH1w= Subject key identifier: D2:8E:FD:09:44:0F:29:38:42:DD:55:74:5A:B0:3D:F3:FB:EE:52:F9 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0326 Signing time: Sat 31 May 2025 01:28:13 +0000 Manifest this update: Sat 31 May 2025 01:28:13 +0000 Manifest next update: Sat 07 Jun 2025 01:28:13 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: l5xcDAYPVhnoBv8zP80HCb99pKH+Y5vOjDRJWGOJxvo=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: mXZI4ZmDMYGAviVq8q1EXRtaamenFNKJ1D2Wqwa/y+M=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:28:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: May 31 01:28:13 2025 GMT Not After : Jun 7 01:28:13 2025 GMT Subject: CN=683a5b2d-bb45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:d7:21:c6:d8:d2:df:3a:3e:df:30:7d:97: 2a:95:5a:5a:56:d2:92:f0:b5:f9:1c:e5:e1:de:b3: 3a:0e:37:46:4f:c8:8e:2b:93:27:57:4d:be:f0:dd: f7:15:6e:ba:df:70:a0:67:e4:f0:e4:59:9f:29:a1: 3a:87:b6:7a:24:7c:0d:0c:64:11:8e:26:68:fa:89: 5c:1b:a6:35:2f:f8:27:b8:88:fd:7e:29:54:18:07: 52:b3:d8:02:40:c7:68:eb:78:79:1d:aa:f5:40:04: 6a:60:07:5a:34:6c:2d:93:20:07:1e:86:a0:e4:48: 3c:74:10:40:7e:56:22:69:f7:2a:e0:17:d3:2e:c5: dd:11:8b:4d:ba:2a:db:ef:5f:7e:1c:bb:ac:d5:84: c7:99:78:95:e1:f8:f1:5c:90:2b:fd:58:f9:16:6d: 16:61:2c:a7:8c:d4:f6:95:26:86:e7:59:2d:4e:2b: 9e:48:7d:81:56:2e:c2:ba:db:6e:cb:31:7c:f6:42: 93:e7:4d:ba:57:e7:ef:de:6c:64:08:33:b5:96:7b: 64:3b:3e:78:7e:01:1b:c1:89:7a:eb:1d:d0:93:76: 63:3f:fc:7d:79:5a:41:4c:aa:e2:9e:6c:83:8a:6f: 45:92:3e:92:8d:8b:c1:0d:29:95:af:61:a2:35:d1: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8E:FD:09:44:0F:29:38:42:DD:55:74:5A:B0:3D:F3:FB:EE:52:F9 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:16:7c:bb:61:ec:88:c6:59:5f:dc:fd:fb:80:f9:ec:98:d2: 40:5e:c4:06:f8:98:4c:8c:7f:90:5e:41:2e:cb:b0:1e:87:03: 11:9b:a4:a3:7e:e2:64:e0:5b:3c:49:a2:f8:78:17:ee:8a:a4: ea:e7:4f:f0:58:86:d5:06:b2:7d:2f:8c:82:09:48:64:58:23: 36:1e:f4:91:e1:03:b1:dd:25:dd:ff:76:f6:9f:fe:db:49:4c: 76:39:8f:69:46:7a:e9:11:31:78:b2:70:97:d3:92:df:aa:4e: 8f:a9:55:0e:6d:90:d4:06:15:b1:2b:50:64:8f:f9:76:f7:43: 92:68:92:3c:a9:dd:cd:1c:f4:74:6f:d3:3c:0a:65:5c:5a:d4: b3:7b:1a:41:48:ed:e4:fb:e3:1c:fe:d4:14:20:c8:d5:60:88: 00:0b:e4:4a:77:ea:2e:52:33:50:10:d3:5f:ec:d2:c2:24:a9: ee:2f:b5:73:49:97:0f:92:5f:5c:6d:85:cb:c7:55:3c:f5:d7: 25:47:f8:5f:3f:3e:af:0b:0d:ee:9a:77:89:85:89:fd:1d:e5: df:84:a5:2d:b9:7d:c1:23:03:cd:47:ff:74:5f:7a:7d:97:48: a8:4c:94:9e:24:12:ee:6c:51:c6:2b:7e:2a:30:1d:92:e3:2d: e1:78:d4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNTMxMDEyODEzWhcNMjUwNjA3MDEyODEzWjAYMRYwFAYD VQQDEw02ODNhNWIyZC1iYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+TXIcbY0t86Pt8wfZcqlVpaVtKS8LX5HOXh3rM6DjdGT8iOK5MnV02+8N33 FW6633CgZ+Tw5FmfKaE6h7Z6JHwNDGQRjiZo+olcG6Y1L/gnuIj9filUGAdSs9gC QMdo63h5Har1QARqYAdaNGwtkyAHHoag5Eg8dBBAflYiafcq4BfTLsXdEYtNuirb 719+HLus1YTHmXiV4fjxXJAr/Vj5Fm0WYSynjNT2lSaG51ktTiueSH2BVi7Cuttu yzF89kKT5026V+fv3mxkCDO1lntkOz54fgEbwYl66x3Qk3ZjP/x9eVpBTKrinmyD im9Fkj6SjYvBDSmVr2GiNdG48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKO/QlE Dyk4Qt1VdFqwPfP77lL5MB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Fny7YeyIxllf3P37gPnsmNJAXsQG+JhMjH+QXkEuy7AehwMRm6Sj fuJk4Fs8SaL4eBfuiqTq50/wWIbVBrJ9L4yCCUhkWCM2HvSR4QOx3SXd/3b2n/7b SUx2OY9pRnrpETF4snCX05Lfqk6PqVUObZDUBhWxK1Bkj/l290OSaJI8qd3NHPR0 b9M8CmVcWtSzexpBSO3k++Mc/tQUIMjVYIgAC+RKd+ouUjNQENNf7NLCJKnuL7Vz SZcPkl9cbYXLx1U89dclR/hfPz6vCw3umneJhYn9HeXfhKUtuX3BIwPNR/90X3p9 l0ioTJSeJBLubFHGK34qMB2S4y3heNR+ -----END CERTIFICATE-----Generated at Sat May 31 14:39:51 2025 by rpki-client