$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: xap6YsQD2DIPv9W2eiMR4VdCF77FQSzcsetjkPztvH8= Subject key identifier: E2:17:BE:03:4F:51:FD:48:97:A4:EC:B8:4C:87:EC:6A:36:95:6C:F6 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 034A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0319 Signing time: Wed 07 May 2025 01:09:06 +0000 Manifest this update: Wed 07 May 2025 01:09:05 +0000 Manifest next update: Wed 14 May 2025 01:09:05 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: ocE/IhOpk3pFPc5Y9YHh+gl/9dhOTtRZ18u5V3fmBDU=) 2: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 3: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 4: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 5: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 6: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 7: DDBFCC3E74D011EDBF68684EC4F9AE02.roa (hash: sAJg3DCCYRdjAFCi7QXgAP3kSOdimSLLMFAsyPc69fQ=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 842 (0x34a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: May 7 01:09:05 2025 GMT Not After : May 14 01:09:05 2025 GMT Subject: CN=681ab2b2-e8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:fe:12:4d:56:b5:89:35:43:75:32:74:aa: 5d:79:9d:91:fb:28:82:bb:f3:19:38:cb:9d:a4:07: 4a:65:73:f9:bb:c3:41:9a:65:1e:66:c3:fb:e5:c0: 90:b0:43:0a:fd:1e:48:5b:19:7c:46:70:3e:42:89: 4a:8c:63:f4:a2:63:55:6e:a1:d4:21:13:7c:77:86: b8:b6:84:51:da:66:32:cc:07:ca:b2:74:46:93:42: df:d9:1a:cb:30:d9:41:6f:e3:bd:d8:f3:d4:e4:fd: 82:44:1c:fc:ff:40:20:f1:18:81:f1:76:ff:ef:56: dd:16:9a:8b:ce:b0:15:24:22:97:52:d3:08:00:5a: 28:78:d5:c5:8f:68:03:6e:8f:aa:33:10:37:cc:96: 0c:45:7d:49:93:9b:b5:e9:2b:bb:73:3f:ac:63:b2: 44:b6:f9:13:67:c0:f3:91:90:d1:e6:cd:ae:b1:41: a5:44:a4:ea:cc:23:90:20:6c:d7:bc:1b:41:b2:3f: 98:9e:18:ee:0a:92:cd:88:38:73:21:af:87:73:10: a9:0f:e9:58:ff:3e:01:1f:ed:9c:d2:d1:a2:a3:0b: e2:f2:0f:d1:37:ac:a5:02:96:4a:66:06:e8:ad:da: c7:57:38:f2:b3:a5:87:a4:e2:0f:23:f2:95:da:68: 6e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:17:BE:03:4F:51:FD:48:97:A4:EC:B8:4C:87:EC:6A:36:95:6C:F6 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:fe:04:27:0d:7a:51:f0:10:68:dc:b1:c5:bc:41:0c:b4:5e: 4d:d7:9d:67:28:7a:78:80:66:9e:f6:ad:55:3f:66:ca:6b:18: 05:e5:df:cc:84:e1:fe:96:97:0f:8e:60:f6:d7:b4:bd:dd:28: 1a:c3:09:32:90:7d:bb:4a:7a:16:0b:ad:a5:4f:52:8c:d5:e1: 2a:eb:ab:eb:13:49:d2:44:b3:18:f8:31:cd:f3:93:b6:e8:80: ac:96:21:a2:0a:8f:1c:da:81:93:e9:90:e5:c0:1b:eb:65:cf: 43:5d:e1:0e:ef:d6:1e:c5:d7:69:3d:04:f2:e5:b2:9f:70:7c: 0c:8d:31:31:92:69:69:c3:a4:4e:ae:0b:f3:3e:8c:2e:99:fc: d6:42:71:ff:04:df:fe:3a:e3:7a:06:cf:b8:1e:a1:67:14:56: ee:c3:c1:3f:af:5c:86:a9:82:18:8a:37:6a:1b:9c:c4:e1:fe: ec:aa:df:2b:f5:62:99:cf:69:58:0e:45:fb:87:4d:ae:7a:e9: ec:0b:fb:e6:ca:b2:dc:52:b7:8f:be:cf:66:07:a6:99:f9:94: b0:22:23:75:c8:da:ae:1d:cd:5a:54:b7:37:1f:1d:70:18:fa: d4:45:71:26:24:2b:f4:1a:52:65:19:4e:77:4d:2a:d2:33:20: 12:b1:40:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNTA3MDEwOTA1WhcNMjUwNTE0MDEwOTA1WjAYMRYwFAYD VQQDEw02ODFhYjJiMi1lOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSb+Ek1WtYk1Q3UydKpdeZ2R+yiCu/MZOMudpAdKZXP5u8NBmmUeZsP75cCQ sEMK/R5IWxl8RnA+QolKjGP0omNVbqHUIRN8d4a4toRR2mYyzAfKsnRGk0Lf2RrL MNlBb+O92PPU5P2CRBz8/0Ag8RiB8Xb/71bdFpqLzrAVJCKXUtMIAFooeNXFj2gD bo+qMxA3zJYMRX1Jk5u16Su7cz+sY7JEtvkTZ8DzkZDR5s2usUGlRKTqzCOQIGzX vBtBsj+YnhjuCpLNiDhzIa+HcxCpD+lY/z4BH+2c0tGiowvi8g/RN6ylApZKZgbo rdrHVzjys6WHpOIPI/KV2mhuuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIXvgNP Uf1Il6TsuEyH7Go2lWz2MB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA/gQnDXpR8BBo3LHFvEEMtF5N151nKHp4gGae9q1VP2bKaxgF5d/M hOH+lpcPjmD217S93SgawwkykH27SnoWC62lT1KM1eEq66vrE0nSRLMY+DHN85O2 6ICsliGiCo8c2oGT6ZDlwBvrZc9DXeEO79YexddpPQTy5bKfcHwMjTExkmlpw6RO rgvzPowumfzWQnH/BN/+OuN6Bs+4HqFnFFbuw8E/r1yGqYIYijdqG5zE4f7sqt8r 9WKZz2lYDkX7h02ueunsC/vmyrLcUrePvs9mB6aZ+ZSwIiN1yNquHc1aVLc3Hx1w GPrURXEmJCv0GlJlGU53TSrSMyASsUDa -----END CERTIFICATE-----Generated at Wed May 7 11:03:21 2025 by rpki-client