$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: wHyUwsqAoNtiCQYjyAg9eIAJNc7GiEZzrcvq+HqGcgc= Subject key identifier: C3:86:75:D3:77:17:70:73:6B:1D:DE:4C:93:FC:DA:EB:7E:62:CE:E8 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0337 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0307 Signing time: Sat 05 Apr 2025 01:30:17 +0000 Manifest this update: Sat 05 Apr 2025 01:30:16 +0000 Manifest next update: Sat 12 Apr 2025 01:30:16 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: NNkuYoQSOVirw9NHbYUqwON4pUXlkq6Vptagds4wQgk=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: wX0YxkF7ON0zYa1p4IQNaF8/BCzewXN48sfueo8kyHM=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 823 (0x337) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304 Validity Not Before: Apr 5 01:30:16 2025 GMT Not After : Apr 12 01:30:16 2025 GMT Subject: CN=67f087a8-b475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:75:d9:34:c0:c3:1a:32:32:d8:1e:33:aa: 59:dc:cf:09:9d:8c:dd:d4:31:38:22:1c:f7:eb:d3: 6d:c5:77:b5:9c:7f:9a:12:8d:1d:0d:9d:4d:54:95: 38:df:88:8f:a0:48:db:02:94:16:5c:53:63:d0:fd: a6:8c:84:97:12:23:90:c2:fb:a8:cc:b6:fd:bf:d6: 3c:dd:e6:e0:33:3b:a1:06:d0:0e:11:78:c6:10:84: 43:36:9f:a1:a2:23:96:ed:1a:24:8a:a4:4f:79:65: 3f:6e:43:e5:fd:5b:86:48:73:70:e5:f5:cd:5e:8b: bc:3a:8c:3c:ca:a5:52:7b:34:b4:cc:a6:6b:6a:ec: ae:e9:8e:b1:e8:c7:1a:72:64:49:0e:85:33:e3:36: 48:07:a8:ab:ab:b5:0f:60:ba:a6:f3:62:5a:02:0b: b0:a5:71:99:40:2e:c7:dc:ec:9e:a2:49:6d:e7:a7: 90:7d:c1:9e:ba:45:8c:78:5a:e1:8f:71:93:37:85: cd:e1:57:6a:06:ef:1d:28:04:22:ac:fc:d9:12:fc: 50:7e:f6:d7:5c:85:ae:47:8a:d6:5a:bf:21:1b:d0: 87:57:9d:ad:cb:cf:a2:f3:6b:6e:4b:86:8f:be:a8: f1:89:9b:f1:ea:8d:25:97:34:3d:c6:e2:cc:cf:c3: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:86:75:D3:77:17:70:73:6B:1D:DE:4C:93:FC:DA:EB:7E:62:CE:E8 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e6:8c:50:e9:31:00:d2:93:09:03:bb:b9:95:5f:8b:03:e1: e6:3a:28:22:6e:1b:6b:fc:e9:a9:9a:9f:a8:d3:bb:b9:bf:56: 33:f2:c7:68:3d:7c:90:84:b4:a5:e6:42:7b:5f:90:8a:46:bf: b5:b7:33:a6:26:6a:6f:d3:59:37:c8:7e:0b:3d:ec:2f:8e:e6: a7:a7:63:bd:49:1b:1b:b7:9a:e0:36:a8:ae:d1:ad:54:22:1f: 08:4b:18:f0:63:94:46:e2:92:d3:89:56:7a:17:ae:23:f3:6f: ff:88:ca:59:cc:24:dd:1e:48:1f:9a:3e:3c:1f:b5:d9:00:06: 9e:01:96:aa:42:12:61:8a:13:74:5e:d4:57:58:ce:c6:62:2b: dd:99:45:66:b6:ea:24:eb:43:f8:d8:69:77:35:37:fa:61:b2: 03:54:72:b8:56:f0:35:1f:30:df:f8:3a:0b:19:ed:ca:c8:b3: 1f:4e:bf:93:c1:83:ce:76:21:c8:1c:3b:3e:e6:f3:ee:d1:e7: f1:fd:ee:23:23:0b:7a:b0:64:c9:0e:06:17:5b:07:d1:db:ad: 35:ab:4c:f0:cf:8f:84:43:83:94:95:86:55:91:a0:ee:66:e3: de:d0:65:36:c1:e1:ab:82:95:52:06:c2:c5:4c:cc:1e:20:ac: 7d:f0:a5:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNDA1MDEzMDE2WhcNMjUwNDEyMDEzMDE2WjAYMRYwFAYD VQQDEw02N2YwODdhOC1iNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfx12TTAwxoyMtgeM6pZ3M8JnYzd1DE4Ihz369NtxXe1nH+aEo0dDZ1NVJU4 34iPoEjbApQWXFNj0P2mjISXEiOQwvuozLb9v9Y83ebgMzuhBtAOEXjGEIRDNp+h oiOW7RokiqRPeWU/bkPl/VuGSHNw5fXNXou8Oow8yqVSezS0zKZrauyu6Y6x6Mca cmRJDoUz4zZIB6irq7UPYLqm82JaAguwpXGZQC7H3Oyeoklt56eQfcGeukWMeFrh j3GTN4XN4VdqBu8dKAQirPzZEvxQfvbXXIWuR4rWWr8hG9CHV52ty8+i82tuS4aP vqjxiZvx6o0llzQ9xuLMz8P6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOGddN3 F3Bzax3eTJP82ut+Ys7oMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu5oxQ6TEA0pMJA7u5lV+LA+HmOigibhtr/Ompmp+o07u5v1Yz8sdo PXyQhLSl5kJ7X5CKRr+1tzOmJmpv01k3yH4LPewvjuanp2O9SRsbt5rgNqiu0a1U Ih8ISxjwY5RG4pLTiVZ6F64j82//iMpZzCTdHkgfmj48H7XZAAaeAZaqQhJhihN0 XtRXWM7GYivdmUVmtuok60P42Gl3NTf6YbIDVHK4VvA1HzDf+DoLGe3KyLMfTr+T wYPOdiHIHDs+5vPu0efx/e4jIwt6sGTJDgYXWwfR2601q0zwz4+EQ4OUlYZVkaDu ZuPe0GU2weGrgpVSBsLFTMweIKx98KUb -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:06 2025 by rpki-client