$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: 1YcYOVPirxBPSURzzWrfa7UC02/SkgNpyAq4kObky/8= Subject key identifier: BD:E9:FC:D1:38:91:54:D3:5F:06:C9:1C:1A:07:9D:DB:A1:47:7F:25 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 078D Signing time: Fri 22 Aug 2025 21:50:28 +0000 Manifest this update: Fri 22 Aug 2025 21:50:28 +0000 Manifest next update: Fri 29 Aug 2025 21:50:28 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: nq2365ALvRkKgLKzbXmxtfu+Dx3ETEiCu1PL+S2BuL4=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: l/DHTVbPHG3y6ZP96kTGxdjScCsZX+opfzZPaXFSPHE=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: Ixq9geRxUKKGOgHHhaiXOEHSRL++Qm2+qsdIs46ukkY=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: i6AcoSqcO3NvCwEFhXskxT9JukL3BBiPTq3PwcXZ51Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2029 (0x7ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Aug 22 21:50:28 2025 GMT Not After : Aug 29 21:50:28 2025 GMT Subject: CN=68a8e624-8a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:58:9d:86:48:84:42:ae:df:05:dc:ad:c1:fe: 0f:ca:3b:43:29:51:bd:30:d6:39:e9:a6:5e:0d:0d: 17:33:26:b1:88:b2:45:17:36:b4:c1:8b:22:75:a5: eb:aa:3a:89:96:95:df:b9:26:ef:b9:9e:2e:70:db: 29:44:f3:5b:73:0c:70:9c:79:0b:2e:f1:e9:20:98: f6:8e:e1:fc:3f:13:65:15:e4:2c:8d:9b:50:e9:eb: c8:60:40:6c:3e:ab:c5:34:72:e6:92:61:ce:b6:13: 5f:eb:06:b8:ed:de:c8:16:fe:aa:3c:e5:65:3b:fe: 98:33:cc:44:1c:71:de:c1:b3:42:ca:72:23:2d:2a: 42:73:c8:7e:6d:62:ef:96:93:1c:d4:c0:fa:c0:9f: 4a:b7:a2:5f:61:17:7a:a1:35:ca:22:0d:b8:46:a4: 3f:e5:cb:df:76:0c:2c:3a:69:46:f5:83:47:b8:1e: 86:c1:18:1f:18:02:72:d5:f1:cd:60:bd:10:10:e5: 7d:45:03:48:01:51:ef:52:cd:36:76:87:8a:0b:a4: fd:6e:21:57:0d:8d:12:ed:fb:32:6a:7c:b5:75:f9: f6:5a:44:bb:0b:1f:39:c3:7e:67:66:cc:c6:24:30: 36:d8:c2:be:27:a3:ac:f5:e0:e5:da:9d:ac:e5:59: 2e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:FC:D1:38:91:54:D3:5F:06:C9:1C:1A:07:9D:DB:A1:47:7F:25 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:99:99:a4:6e:17:81:ce:d5:f0:96:2f:b2:cb:d1:f4:09:25: 70:27:d2:80:ea:43:6d:ec:88:45:6d:01:53:1e:2e:e8:62:ef: 53:76:2a:d2:4b:e3:80:23:2c:25:1e:8d:57:be:a7:ba:28:ff: b6:fb:18:37:9d:e2:e9:1e:b8:84:49:d7:16:97:0e:51:ff:74: 9b:34:03:11:29:c4:8b:0c:db:54:bb:3e:25:12:ae:25:7c:bd: 70:79:6b:70:03:96:ed:0d:a8:42:80:69:5b:fa:74:03:13:4a: 47:79:05:40:8e:0b:8d:26:48:1e:89:06:e4:c4:62:2f:56:72: c6:df:cd:d5:b6:fc:52:4d:a5:cf:5d:d0:41:25:23:cb:2c:34: ef:e5:9a:24:5c:f9:74:37:08:ca:38:5a:69:32:6c:5f:51:ca: f1:11:04:dc:9e:d3:81:d1:7b:92:43:a3:34:18:72:52:c7:5c: f3:dc:7c:a2:09:13:76:3f:6a:8a:73:a6:c0:fa:0e:0d:4b:d7: 2e:7f:93:e0:25:e3:da:1c:bd:ed:e5:44:3e:e0:c5:fe:c4:d9: 4a:96:31:fe:12:05:12:99:7e:9e:c3:c4:29:bc:a4:f4:b9:23: b9:ce:30:fa:31:ff:02:e4:15:3f:ae:52:55:29:1a:11:e3:4a: 4f:99:d5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwODIyMjE1MDI4WhcNMjUwODI5MjE1MDI4WjAYMRYwFAYD VQQDEw02OGE4ZTYyNC04YTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFidhkiEQq7fBdytwf4PyjtDKVG9MNY56aZeDQ0XMyaxiLJFFza0wYsidaXr qjqJlpXfuSbvuZ4ucNspRPNbcwxwnHkLLvHpIJj2juH8PxNlFeQsjZtQ6evIYEBs PqvFNHLmkmHOthNf6wa47d7IFv6qPOVlO/6YM8xEHHHewbNCynIjLSpCc8h+bWLv lpMc1MD6wJ9Kt6JfYRd6oTXKIg24RqQ/5cvfdgwsOmlG9YNHuB6GwRgfGAJy1fHN YL0QEOV9RQNIAVHvUs02doeKC6T9biFXDY0S7fsyany1dfn2WkS7Cx85w35nZszG JDA22MK+J6Os9eDl2p2s5Vku1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3p/NE4 kVTTXwbJHBoHnduhR38lMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQmZmkbheBztXwli+yy9H0CSVwJ9KA6kNt7IhFbQFTHi7oYu9TdirS S+OAIywlHo1Xvqe6KP+2+xg3neLpHriESdcWlw5R/3SbNAMRKcSLDNtUuz4lEq4l fL1weWtwA5btDahCgGlb+nQDE0pHeQVAjguNJkgeiQbkxGIvVnLG383VtvxSTaXP XdBBJSPLLDTv5ZokXPl0NwjKOFppMmxfUcrxEQTcntOB0XuSQ6M0GHJSx1zz3Hyi CRN2P2qKc6bA+g4NS9cuf5PgJePaHL3t5UQ+4MX+xNlKljH+EgUSmX6ew8QpvKT0 uSO5zjD6Mf8C5BU/rlJVKRoR40pPmdWI -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:57 2025 by rpki-client