$ rpki-client -vvf rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft File: JMzoDfDUim0MORo68N1kTdv7das.mft (raw, json) Hash identifier: DmocN8dqMUAUEan1Kqap30hdOhRuxAZdMsy5dGOw818= Subject key identifier: D4:79:58:7C:D2:76:1B:1D:79:B8:F3:C3:7F:7A:2B:02:38:AC:40:1E Authority key identifier: 24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB Certificate issuer: /CN=A918769B/serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft Manifest number: 034E Signing time: Sat 23 Aug 2025 01:16:15 +0000 Manifest this update: Sat 23 Aug 2025 01:16:14 +0000 Manifest next update: Sat 30 Aug 2025 01:16:14 +0000 Files and hashes: 1: JMzoDfDUim0MORo68N1kTdv7das.crl (hash: W2IHPVx+blg+S22bIrJrLK9CUpFi81aXg6R3Dvgee8w=) 2: D8D89576CF2F11EC8378951DC4F9AE02.roa (hash: hLXl6/Z8LuNjbKfmjM+o1Rss4EPhppx+VpRuw3V1cZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:16:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918769B, serialNumber=24CCE80DF0D48A6D0C391A3AF0DD644DDBFB75AB Validity Not Before: Aug 23 01:16:14 2025 GMT Not After : Aug 30 01:16:14 2025 GMT Subject: CN=68a9165f-c2ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4c:4e:47:be:9c:88:1a:33:bd:03:1e:d6:67: fb:12:5f:e7:57:1d:cb:e3:41:50:a7:45:2a:78:35: a6:04:25:f4:c9:95:6f:dc:71:19:c5:31:e8:e6:1c: d9:23:ea:2c:16:66:12:bc:f8:65:8c:96:78:d1:6d: 9f:ab:28:c8:e3:4c:71:35:20:52:a5:d2:dc:6d:ff: 6b:33:23:6c:5c:5a:22:b1:a4:39:5d:0e:c9:84:36: ed:52:fc:96:1b:67:3c:c3:45:95:6e:8d:31:ef:3d: d0:46:30:a0:cb:73:ce:78:e2:ab:dd:31:6d:36:93: 80:e2:11:a2:a2:9f:a5:27:9b:35:51:4b:0e:38:c5: 94:6c:5b:57:0c:21:64:1a:fd:53:04:00:69:b2:9c: c0:54:01:d6:d5:1a:71:c7:b6:65:67:0c:1d:9f:4e: 72:66:47:06:5c:cd:4c:57:fa:ce:c1:59:52:dd:f8: 44:98:d9:99:a9:19:0e:7d:a3:0a:75:1a:4f:a7:48: 2c:ad:13:a0:db:06:bd:cd:81:98:95:62:73:6b:04: 0e:2c:37:09:23:2f:fd:04:68:8f:fe:d0:7b:67:19: 9e:66:db:30:29:84:9c:8f:9e:6d:55:f8:33:df:32: db:e1:f5:c5:a4:36:f1:1d:93:4e:49:8f:a4:02:89: 2e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:58:7C:D2:76:1B:1D:79:B8:F3:C3:7F:7A:2B:02:38:AC:40:1E X509v3 Authority Key Identifier: keyid:24:CC:E8:0D:F0:D4:8A:6D:0C:39:1A:3A:F0:DD:64:4D:DB:FB:75:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JMzoDfDUim0MORo68N1kTdv7das.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918769B/B0935D54CC6311EC9B8E962BC4F9AE02/JMzoDfDUim0MORo68N1kTdv7das.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:cd:20:fa:d7:7d:1f:4f:27:9a:b5:37:8f:2f:07:cd:d6: f7:92:a2:de:b0:98:e8:13:1f:df:98:b3:61:8c:e1:b0:cd:18: 6f:23:df:3f:98:ae:65:9d:be:51:ad:91:b2:97:10:54:9f:93: 5f:ad:85:66:37:db:14:eb:5b:6c:d4:33:a9:a7:dc:21:9c:46: e7:c5:3a:30:7d:71:b2:71:c5:b1:b1:b0:22:d4:4b:ff:7d:de: 77:37:a7:d5:0b:60:62:27:3f:bb:3a:52:3c:18:c6:34:b5:dd: 07:25:ed:e0:e0:01:a9:b4:fe:28:20:21:ab:73:f1:12:f8:7a: e2:09:99:d6:da:22:fc:29:df:c3:a9:e9:32:5b:75:c8:aa:77: 74:17:d2:41:bb:b9:53:be:86:63:9d:12:d9:75:73:f9:8a:87: 54:04:8d:bb:cc:63:e1:a4:9a:71:d3:aa:a3:60:4c:cc:3a:70: 03:54:c5:5f:00:68:73:55:09:56:50:0a:72:0a:69:68:71:6d: 76:ad:ce:92:26:51:61:98:97:dc:a5:65:fb:ef:7c:7a:cf:22: e5:a9:83:9d:76:7c:b6:5b:fd:e3:e3:94:93:ba:8b:88:5c:1b: eb:90:1b:76:45:9b:c8:f2:95:d2:d4:6e:35:91:ac:2e:d6:96: 18:ef:81:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2OUIxMTAvBgNVBAUTKDI0Q0NFODBERjBENDhBNkQwQzM5MUEzQUYwREQ2NDRE REJGQjc1QUIwHhcNMjUwODIzMDExNjE0WhcNMjUwODMwMDExNjE0WjAYMRYwFAYD VQQDEw02OGE5MTY1Zi1jMmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10xOR76ciBozvQMe1mf7El/nVx3L40FQp0UqeDWmBCX0yZVv3HEZxTHo5hzZ I+osFmYSvPhljJZ40W2fqyjI40xxNSBSpdLcbf9rMyNsXFoisaQ5XQ7JhDbtUvyW G2c8w0WVbo0x7z3QRjCgy3POeOKr3TFtNpOA4hGiop+lJ5s1UUsOOMWUbFtXDCFk Gv1TBABpspzAVAHW1Rpxx7ZlZwwdn05yZkcGXM1MV/rOwVlS3fhEmNmZqRkOfaMK dRpPp0gsrROg2wa9zYGYlWJzawQOLDcJIy/9BGiP/tB7ZxmeZtswKYScj55tVfgz 3zLb4fXFpDbxHZNOSY+kAokuWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNR5WHzS dhsdebjzw396KwI4rEAeMB8GA1UdIwQYMBaAFCTM6A3w1IptDDkaOvDdZE3b+3Wr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzY5Qi9CMDkzNUQ1NEND NjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWltME1PUm82OE4xa1Rkdjdk YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pNem9EZkRVaW0wTU9SbzY4TjFrVGR2N2Rhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzY5Qi9CMDkzNUQ1NENDNjMxMUVDOUI4RTk2MkJDNEY5QUUwMi9KTXpvRGZEVWlt ME1PUm82OE4xa1RkdjdkYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWoM0g+td9H08nmrU3jy8Hzdb3kqLesJjoEx/fmLNhjOGwzRhvI98/ mK5lnb5RrZGylxBUn5NfrYVmN9sU61ts1DOpp9whnEbnxTowfXGyccWxsbAi1Ev/ fd53N6fVC2BiJz+7OlI8GMY0td0HJe3g4AGptP4oICGrc/ES+HriCZnW2iL8Kd/D qekyW3XIqnd0F9JBu7lTvoZjnRLZdXP5iodUBI27zGPhpJpx06qjYEzMOnADVMVf AGhzVQlWUApyCmlocW12rc6SJlFhmJfcpWX773x6zyLlqYOddny2W/3j45STuouI XBvrkBt2RZvI8pXS1G41kawu1pYY74E2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:42:47 2025 by rpki-client