$ rpki-client -vvf rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft File: JMi7-TDNLRI5mr35ycqxSxzXn2s.mft (raw, json) Hash identifier: AchigVDEVd8dSvxJ3Sx3bdjK0UEuU5qhIiWZGmBEo2o= Subject key identifier: 35:19:62:C6:CB:BF:29:7E:CF:60:E5:4F:B9:36:B8:D8:69:8A:0D:A5 Authority key identifier: 24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B Certificate issuer: /CN=A919A713/serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Certificate serial: 0347 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft Manifest number: 0326 Signing time: Sat 23 Aug 2025 01:26:05 +0000 Manifest this update: Sat 23 Aug 2025 01:26:04 +0000 Manifest next update: Sat 30 Aug 2025 01:26:04 +0000 Files and hashes: 1: JMi7-TDNLRI5mr35ycqxSxzXn2s.crl (hash: 1bokQldGJG4t0boY/uznGbsVud76vS8Q3WsLLI0ZO5M=) 2: D0BE1D2AE0E111ECBFF27B44C4F9AE02.roa (hash: aCiTo8r6/YizGBxfvK+82W96JeKhKg5t3eb9WI+OofU=) 3: 28A46886845B11EFA46A8F64C4F9AE02.roa (hash: fvVxyFpJKv2/Kv82D1rdU5ie/2GisD974gz0+Vt1t6k=) 4: D1424FC8E0E111ECBFF27B44C4F9AE02.roa (hash: aCk5dw5oxFHrUmANk28KoR3AF4mj3OF8t0MW7sG5Ktg=) 5: 8F2728B45C8511EDA172EE5CC4F9AE02.roa (hash: 9BTKbr2sPCRbMfdTVmqWj3bTlg1bAkaWUGIvP2XMEnE=) 6: CF96FC32E0E111ECBFF27B44C4F9AE02.roa (hash: b4RibpoJMhsqMgrvgCz+wbq8oYJevPHAnDjdAidam1w=) 7: 907FFB3C5C8511EDA172EE5CC4F9AE02.roa (hash: kMLH0aZXrux27E1RrjydkAHducxB7OKoxs3uQTrKzTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 839 (0x347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A713, serialNumber=24C8BBF930CD2D12399ABDF9C9CAB14B1CD79F6B Validity Not Before: Aug 23 01:26:04 2025 GMT Not After : Aug 30 01:26:04 2025 GMT Subject: CN=68a918ad-f3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:06:a8:3f:08:4d:69:90:9a:82:ed:14:ce: 23:fd:25:e0:05:77:37:dd:15:5f:09:b9:64:dc:7b: f8:22:dc:b3:cc:4d:7f:36:73:f5:75:58:3c:3f:b5: 6e:9f:d2:4d:bf:d4:4b:bb:79:d2:e5:e4:3f:9b:b5: 1d:2b:bb:e6:ee:88:5e:09:14:3c:7d:2f:f3:5e:bb: a0:83:ae:4a:a2:ed:1f:8f:9c:2d:f1:12:87:40:d7: 76:d4:f1:80:33:d8:4d:2c:14:13:0b:61:e4:6d:d3: 88:7d:d0:cd:63:6f:77:40:67:ae:01:d9:33:c9:bd: 6c:9f:08:06:60:bf:5e:5e:04:85:1a:bb:72:95:62: 15:10:7f:16:23:79:84:c6:ae:88:3c:4d:f2:52:f0: b1:98:05:41:fd:fe:8f:8f:07:c7:35:ba:19:ed:d3: 20:49:2c:5b:52:19:8f:f8:b8:4e:15:71:43:50:ee: 09:6f:90:06:e2:0b:29:9e:34:63:ee:e3:0d:9a:18: 45:2d:09:e6:ce:62:e7:f8:a3:a3:42:1d:13:40:2f: 9b:11:d3:6b:2f:da:6e:ca:2e:a1:04:04:6c:8f:aa: 69:9b:1d:5d:fc:ec:23:2c:ab:ca:df:77:82:26:60: 4e:69:8a:76:ae:45:f0:a4:89:01:70:a5:46:cd:e8: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:19:62:C6:CB:BF:29:7E:CF:60:E5:4F:B9:36:B8:D8:69:8A:0D:A5 X509v3 Authority Key Identifier: keyid:24:C8:BB:F9:30:CD:2D:12:39:9A:BD:F9:C9:CA:B1:4B:1C:D7:9F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JMi7-TDNLRI5mr35ycqxSxzXn2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A713/34994CB4E0DA11EC94C7E062C4F9AE02/JMi7-TDNLRI5mr35ycqxSxzXn2s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:68:dc:03:78:ab:e6:6e:51:0c:ef:28:b1:8d:ac:c4:e9:a5: dd:6a:4c:e2:e4:f1:67:dc:39:a9:0c:f5:50:f0:42:e7:78:34: 3a:b1:57:35:08:6d:22:80:a5:95:fd:9e:b0:59:8a:35:46:40: cf:95:ec:f8:18:e0:c5:ff:ce:15:8c:4f:a3:d9:fe:bf:8f:57: b8:11:77:71:26:6a:37:ae:5d:bd:44:e5:6e:b9:82:ab:9f:b8: 17:47:65:b1:f3:6d:2d:56:56:b5:f6:d7:7e:83:4e:56:c8:61: 6f:46:ce:e3:64:e5:ff:53:5b:b0:39:d9:ed:ec:d3:6e:9b:2a: ca:35:ed:01:3a:e7:4a:ec:69:b4:a6:4d:27:6f:f4:2e:fc:60: 55:5c:02:89:e5:56:2f:eb:95:47:53:13:b4:35:28:b6:cf:6a: 87:d2:39:8a:6e:10:61:1a:a2:41:3f:0c:0e:25:f6:23:66:c9: 91:69:86:9e:ae:c5:51:87:6e:00:c4:66:37:7f:e6:ef:24:0c: 96:fd:0a:eb:42:ae:4f:5d:4a:8b:e1:78:82:86:cd:e3:bf:a2: 52:0b:44:91:75:d5:b9:77:32:53:50:0c:44:8c:ef:70:a1:5b: 1a:68:4c:18:df:b2:5c:4f:3f:0c:fe:5a:0e:e2:26:28:5a:42: 18:4f:a6:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3MTMxMTAvBgNVBAUTKDI0QzhCQkY5MzBDRDJEMTIzOTlBQkRGOUM5Q0FCMTRC MUNENzlGNkIwHhcNMjUwODIzMDEyNjA0WhcNMjUwODMwMDEyNjA0WjAYMRYwFAYD VQQDEw02OGE5MThhZC1mM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4AGqD8ITWmQmoLtFM4j/SXgBXc33RVfCblk3Hv4ItyzzE1/NnP1dVg8P7Vu n9JNv9RLu3nS5eQ/m7UdK7vm7oheCRQ8fS/zXrugg65Kou0fj5wt8RKHQNd21PGA M9hNLBQTC2HkbdOIfdDNY293QGeuAdkzyb1snwgGYL9eXgSFGrtylWIVEH8WI3mE xq6IPE3yUvCxmAVB/f6PjwfHNboZ7dMgSSxbUhmP+LhOFXFDUO4Jb5AG4gspnjRj 7uMNmhhFLQnmzmLn+KOjQh0TQC+bEdNrL9puyi6hBARsj6ppmx1d/OwjLKvK33eC JmBOaYp2rkXwpIkBcKVGzei6MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUZYsbL vyl+z2DlT7k2uNhpig2lMB8GA1UdIwQYMBaAFCTIu/kwzS0SOZq9+cnKsUsc159r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTcxMy8zNDk5NENCNEUw REExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxSSTVtcjM1eWNxeFN4elhu MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pNaTctVEROTFJJNW1yMzV5Y3F4U3h6WG4ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTcxMy8zNDk5NENCNEUwREExMUVDOTRDN0UwNjJDNEY5QUUwMi9KTWk3LVRETkxS STVtcjM1eWNxeFN4elhuMnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8aNwDeKvmblEM7yixjazE6aXdakzi5PFn3DmpDPVQ8ELneDQ6sVc1 CG0igKWV/Z6wWYo1RkDPlez4GODF/84VjE+j2f6/j1e4EXdxJmo3rl29ROVuuYKr n7gXR2Wx820tVla19td+g05WyGFvRs7jZOX/U1uwOdnt7NNumyrKNe0BOudK7Gm0 pk0nb/Qu/GBVXAKJ5VYv65VHUxO0NSi2z2qH0jmKbhBhGqJBPwwOJfYjZsmRaYae rsVRh24AxGY3f+bvJAyW/QrrQq5PXUqL4XiChs3jv6JSC0SRddW5dzJTUAxEjO9w oVsaaEwY37JcTz8M/loO4iYoWkIYT6az -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:38 2025 by rpki-client