$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: /9iYjQX+ANRrnDxiXvIdwlo+sus++AG+BF2QgFzQCrE= Subject key identifier: 7A:22:9D:51:3B:04:06:B3:04:BB:C4:6F:A8:9D:8C:FA:F9:1D:28:B3 Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0369 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0336 Signing time: Sun 29 Jun 2025 00:46:50 +0000 Manifest this update: Sun 29 Jun 2025 00:46:49 +0000 Manifest next update: Sun 06 Jul 2025 00:46:49 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: jMsujmLjMylnBj56OBU2phj5QzNyp2RSmM2JG+FOodk=) 2: 095A440652B311F0B25AA911C4F9AE02.roa (hash: boxMqVE8q46us+PFvAGR6ljVcVX9wIOjIMY9dIoSWLY=) 3: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 4: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 873 (0x369) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Jun 29 00:46:49 2025 GMT Not After : Jul 6 00:46:49 2025 GMT Subject: CN=68608cfa-b091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dc:3e:b6:71:da:d0:1e:89:63:7c:00:d4:6b: d8:c5:21:b7:53:20:45:d5:51:bd:bd:f7:92:ce:db: b1:5a:2e:a6:70:29:04:a9:92:c6:ae:60:1b:c8:31: 6b:09:1f:cc:c8:9c:b2:90:eb:a5:26:8a:c6:c8:90: 81:c2:23:c3:97:90:23:c3:31:4b:a1:1a:dc:98:4c: e0:85:61:9c:3f:64:2c:0b:ba:19:60:92:ec:f8:0c: 0c:15:54:86:ed:ba:e0:f0:4e:cb:cf:4b:f2:9c:db: e9:1b:cc:30:59:9e:2e:80:53:40:6c:d3:a5:71:0c: bc:4c:75:65:ad:4d:a0:84:25:20:27:3d:37:ae:67: 7f:44:62:b6:a3:3f:48:ae:5a:86:f3:9b:23:97:ad: 80:a5:21:2c:8d:72:95:b7:d1:7d:ce:f6:21:7c:91: a5:b5:ce:e7:ab:7d:82:9b:56:ec:39:52:06:7b:85: 8b:ec:c3:e7:44:40:32:32:8a:ac:02:9d:07:dd:56: 75:55:57:7f:93:14:d2:01:d8:23:5b:80:f1:34:33: 4f:99:7c:3f:6e:a3:57:2f:12:13:50:cc:46:c9:7a: 40:9b:15:6b:2c:c1:f2:0a:e8:15:f3:e1:ec:74:04: bf:09:1c:ce:3f:ae:d0:77:65:76:98:fc:fd:04:e5: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:9D:51:3B:04:06:B3:04:BB:C4:6F:A8:9D:8C:FA:F9:1D:28:B3 X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:7a:fe:fe:5a:01:b4:e7:cf:ed:26:d1:3b:ce:ab:5f:30:93: e4:3a:f7:a5:18:cf:be:75:18:f3:39:61:e5:d9:1d:f3:a9:e6: 8d:a9:2c:73:f4:19:aa:0b:3f:49:c2:93:d1:29:93:0b:e0:dd: d4:0b:f5:0a:4d:63:2e:b0:1b:c2:65:af:5f:56:91:1e:76:44: 48:69:50:e3:80:01:fc:34:b0:bc:47:06:fe:3e:bf:14:ca:59: 07:c2:39:26:8a:55:f4:5d:32:47:16:b2:a8:53:2e:31:ad:00: 5e:03:1b:a6:00:a8:93:2f:a0:41:62:5e:d2:8b:0f:50:78:0d: 64:bd:01:b4:b7:51:c6:39:7e:c7:0b:f1:07:6a:a0:4c:88:20: dc:4b:0c:24:b7:77:e8:bc:ab:d7:1f:1a:32:f9:2e:bf:e8:52: 20:91:96:9f:0d:d1:ab:47:02:da:22:d0:3c:3c:ee:38:69:ed: fa:81:62:41:7d:6b:0f:4d:3f:54:94:f7:17:bf:33:48:be:ce: fd:70:22:bf:55:67:24:86:76:83:1f:3c:a7:9f:1e:82:3a:34: 48:db:65:40:ab:8a:9c:51:23:2b:04:d7:a5:c5:ea:5b:7b:d9: 4e:60:de:32:a7:e4:88:9a:6f:3f:d4:93:9e:b2:d2:e1:b9:45: 7c:f6:94:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwNjI5MDA0NjQ5WhcNMjUwNzA2MDA0NjQ5WjAYMRYwFAYD VQQDEw02ODYwOGNmYS1iMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstw+tnHa0B6JY3wA1GvYxSG3UyBF1VG9vfeSztuxWi6mcCkEqZLGrmAbyDFr CR/MyJyykOulJorGyJCBwiPDl5AjwzFLoRrcmEzghWGcP2QsC7oZYJLs+AwMFVSG 7brg8E7Lz0vynNvpG8wwWZ4ugFNAbNOlcQy8THVlrU2ghCUgJz03rmd/RGK2oz9I rlqG85sjl62ApSEsjXKVt9F9zvYhfJGltc7nq32Cm1bsOVIGe4WL7MPnREAyMoqs Ap0H3VZ1VVd/kxTSAdgjW4DxNDNPmXw/bqNXLxITUMxGyXpAmxVrLMHyCugV8+Hs dAS/CRzOP67Qd2V2mPz9BOW7iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoinVE7 BAazBLvEb6idjPr5HSizMB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADev7+WgG058/tJtE7zqtfMJPkOvelGM++dRjzOWHl2R3zqeaNqSxz 9BmqCz9JwpPRKZML4N3UC/UKTWMusBvCZa9fVpEedkRIaVDjgAH8NLC8Rwb+Pr8U ylkHwjkmilX0XTJHFrKoUy4xrQBeAxumAKiTL6BBYl7Siw9QeA1kvQG0t1HGOX7H C/EHaqBMiCDcSwwkt3fovKvXHxoy+S6/6FIgkZafDdGrRwLaItA8PO44ae36gWJB fWsPTT9UlPcXvzNIvs79cCK/VWckhnaDHzynnx6COjRI22VAq4qcUSMrBNelxepb e9lOYN4yp+SImm8/1JOestLhuUV89pQu -----END CERTIFICATE-----Generated at Sun Jun 29 13:36:25 2025 by rpki-client