$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft File: JZau0MDLO8_jGASyOc9GV3EuJ2o.mft (raw, json) Hash identifier: 3gwmy53QYtDG4GtQ/VZWoH+Leph0jc5sAZ7NFZ+FiZs= Subject key identifier: A6:3E:4F:1D:21:B5:4B:E6:25:2E:0B:7F:AE:E2:EC:09:E3:F1:3B:BE Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Certificate serial: 0385 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft Manifest number: 0352 Signing time: Sat 23 Aug 2025 01:23:37 +0000 Manifest this update: Sat 23 Aug 2025 01:23:36 +0000 Manifest next update: Sat 30 Aug 2025 01:23:36 +0000 Files and hashes: 1: JZau0MDLO8_jGASyOc9GV3EuJ2o.crl (hash: nI9AGiynoHH6qzwOCDN6GWbRgynAvP9kS974EdSDIS8=) 2: 095A440652B311F0B25AA911C4F9AE02.roa (hash: boxMqVE8q46us+PFvAGR6ljVcVX9wIOjIMY9dIoSWLY=) 3: 5725C1363AB711EDBB6FC759C4F9AE02.roa (hash: L1bCR75Hue0TXTuaR9phNFwMeS+w2BZBYMYdoH99/Js=) 4: 01F6431CDD3711EC9EF48256C4F9AE02.roa (hash: wELH7xAso5yJTrFR9tYIcPWH7wUbQZEOV1q8HH4uvEs=) 5: 00D63708DD3711EC9EF48256C4F9AE02.roa (hash: O/zJp//uLJET2r/IQOL6LgcOoOX57jFHaWoNR1klg6w=) 6: 01607012DD3711EC9EF48256C4F9AE02.roa (hash: cn4PIQ9X9CTXrinDmGJ+unxsk56D5+SAv63KVNhk6Ik=) 7: A60805D653EB11EEA1F43363C4F9AE02.roa (hash: Z62331QXn+f9H4+WNs003qjSugQvwDu9f8FfBukZEH0=) 8: 1A5C7B24EDE411ED8259CE53C4F9AE02.roa (hash: lD0BDsW30xCXLHS6wcZEaYzkhA5Dm5fsOSckdceztUo=) 9: C40F74B2D5C611EEA589D110C4F9AE02.roa (hash: uTjAJBFg5hQgIl0RzTH1eeJlAB0/iHcketsf+BNxr5U=) 10: 3C46738AD49D11EDAD9A672FC4F9AE02.roa (hash: t5s3Ybo931LYAhYI/Vvo5cem0MCHg347gdOGZERuiPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 901 (0x385) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A Validity Not Before: Aug 23 01:23:36 2025 GMT Not After : Aug 30 01:23:36 2025 GMT Subject: CN=68a91819-101d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4f:0b:77:8a:2b:f7:9f:14:56:7c:1b:fd:23: 67:77:cc:77:37:2c:30:c3:7b:b2:bb:9d:bb:a1:93: 25:f0:3c:34:04:be:76:15:2e:2a:24:0f:b9:98:6e: 1d:ad:a0:63:d5:a6:c9:21:97:c5:88:0c:b9:57:88: e0:42:1d:f7:ab:6a:d9:02:eb:93:9c:b9:a5:ab:da: 86:aa:2b:86:70:d0:59:ee:6d:52:ff:54:0e:61:e9: a4:22:03:d6:1f:fa:0e:5d:9d:ee:bf:0d:45:29:d3: e4:14:1a:d2:39:66:59:c3:2e:5a:b7:08:a9:5d:b9: c9:dc:8e:bb:b3:b7:c7:6a:10:0c:fa:df:39:26:e9: 5f:f2:a3:77:13:15:ba:38:be:2e:b7:62:01:38:91: 23:76:bb:2d:00:b6:bb:69:22:7a:8f:f2:94:4a:ed: ad:e9:f6:6f:7c:b7:8c:cf:5a:24:f8:02:48:ae:0b: 9e:e0:c3:60:3d:51:da:8c:2d:df:2d:74:85:f4:a1: 54:ca:2c:c1:46:ee:fa:b5:eb:91:b9:3e:a5:1e:00: 15:9b:e4:39:01:20:b3:0d:af:86:a1:d1:80:a8:e8: 49:66:e6:30:5c:b3:46:9a:01:c4:de:b6:36:8b:4f: c2:94:34:28:99:74:6c:8c:10:c3:72:d9:e1:e8:08: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3E:4F:1D:21:B5:4B:E6:25:2E:0B:7F:AE:E2:EC:09:E3:F1:3B:BE X509v3 Authority Key Identifier: keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0c:f6:90:a8:5d:e6:76:7c:11:00:7e:08:45:06:3c:9c:32: 88:b1:07:86:bf:67:41:23:c1:97:ca:d4:a1:ca:6b:0f:76:9a: ce:e5:66:e7:48:e0:90:f8:29:2b:f0:85:23:3d:f5:c2:db:ff: f3:da:71:9c:fa:1a:8f:a8:f6:6d:ed:e4:e9:b7:b5:d5:d0:85: 48:02:04:f6:c7:b6:d7:04:c7:27:8a:58:53:1d:77:f5:80:91: 5d:f5:ae:ef:40:18:8e:c0:0d:e0:b3:c1:5d:e3:50:1a:15:23: 5c:58:bc:5b:6a:49:37:96:3e:da:aa:e0:aa:7d:39:8a:82:82: 6c:02:9c:25:55:fa:50:07:6d:f4:e7:a2:8a:20:40:84:1b:1a: c4:ca:05:06:b6:76:68:55:18:33:39:47:c1:47:7b:de:c1:e1: 4d:88:33:df:ab:a5:18:60:18:17:09:cb:ff:48:c3:04:dc:2d: fb:e8:6e:31:9f:84:2b:87:ac:ec:bf:b8:53:62:3a:75:9d:e2: 15:64:bb:e0:d8:37:10:6c:4d:29:43:b7:26:2c:b8:f9:81:fc: e4:1e:6c:f5:f8:1e:e4:02:ee:6f:cb:af:c6:ae:52:4d:59:78: 27:05:f1:5a:08:f0:26:71:8c:96:37:4d:68:1c:22:5f:a3:55: a9:be:cf:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzMDQxMTAvBgNVBAUTKDI1OTZBRUQwQzBDQjNCQ0ZFMzE4MDRCMjM5Q0Y0NjU3 NzEyRTI3NkEwHhcNMjUwODIzMDEyMzM2WhcNMjUwODMwMDEyMzM2WjAYMRYwFAYD VQQDEw02OGE5MTgxOS0xMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1E8Ld4or958UVnwb/SNnd8x3Nywww3uyu527oZMl8Dw0BL52FS4qJA+5mG4d raBj1abJIZfFiAy5V4jgQh33q2rZAuuTnLmlq9qGqiuGcNBZ7m1S/1QOYemkIgPW H/oOXZ3uvw1FKdPkFBrSOWZZwy5atwipXbnJ3I67s7fHahAM+t85Julf8qN3ExW6 OL4ut2IBOJEjdrstALa7aSJ6j/KUSu2t6fZvfLeMz1ok+AJIrgue4MNgPVHajC3f LXSF9KFUyizBRu76teuRuT6lHgAVm+Q5ASCzDa+GodGAqOhJZuYwXLNGmgHE3rY2 i0/ClDQomXRsjBDDctnh6AiivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKY+Tx0h tUvmJS4Lf67i7Anj8Tu+MB8GA1UdIwQYMBaAFCWWrtDAyzvP4xgEsjnPRldxLidq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjMwNC8xOUU0REYwNkRC MDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84X2pHQVN5T2M5R1YzRXVK Mm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0paYXUwTURMTzhfakdBU3lPYzlHVjNFdUoyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjMwNC8xOUU0REYwNkRCMDcxMUVDOTkyMkQ3MEZDNEY5QUUwMi9KWmF1ME1ETE84 X2pHQVN5T2M5R1YzRXVKMm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxDPaQqF3mdnwRAH4IRQY8nDKIsQeGv2dBI8GXytShymsPdprO5Wbn SOCQ+Ckr8IUjPfXC2//z2nGc+hqPqPZt7eTpt7XV0IVIAgT2x7bXBMcnilhTHXf1 gJFd9a7vQBiOwA3gs8Fd41AaFSNcWLxbakk3lj7aquCqfTmKgoJsApwlVfpQB230 56KKIECEGxrEygUGtnZoVRgzOUfBR3veweFNiDPfq6UYYBgXCcv/SMME3C376G4x n4Qrh6zsv7hTYjp1neIVZLvg2DcQbE0pQ7cmLLj5gfzkHmz1+B7kAu5vy6/GrlJN WXgnBfFaCPAmcYyWN01oHCJfo1Wpvs+5 -----END CERTIFICATE-----Generated at Sat Aug 23 15:43:20 2025 by rpki-client