$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: cq1DumExb6lKWyqwEPHwOqc1YFHQw65QN76UsXDI/KI= Subject key identifier: E3:BD:E8:52:0B:4A:F3:83:A8:25:DE:58:54:3F:93:10:65:81:9A:02 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 0770 Signing time: Mon 30 Jun 2025 22:39:09 +0000 Manifest this update: Mon 30 Jun 2025 22:39:09 +0000 Manifest next update: Mon 07 Jul 2025 22:39:09 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: 9Sp8IPJtykChrZ5vOaZWT0qYyPr1U87w41ubwCYZIXQ=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tAzy0GZ/aV5JGqaLnAkZNEGjYXdMr1wOclaKrZQRx3w=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: V7BVbUk3tLJAnUAIFcCedA1lQMXA6fyLBvM1KY86UsM=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: qPKlvYc3eOsuO3DqYWbG+hTNfTz+1rjxdArgPIyS1Pg=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: 7OqBQwbdapWyCvyq8jiiXli2XJMLbrPUHyj9SrBV36c=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: 9WV5k4NfwBvcudGQwMKdlFtGBtJgUcwspBP19Jw4D/s=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: Rd5Xj0r3V4w3p1PVgOBaWB5OTlLu2xrD4JiPJXQbqEU=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: 9RQxtMrzyxjjCFQVBmlSE980ylB4GQNU6kNM3xDDdp4=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: 9/k38zAIx4eV0yOcrqoNvT7fw4D5eOkUBhTVdCLPg28=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: 4EZkD4ayzurgaQW9EQDR5KEXQfDfDFoolIhFxZ6KRTk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jun 30 22:39:09 2025 GMT Not After : Jul 7 22:39:09 2025 GMT Subject: CN=6863120d-b8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:34:51:73:dd:12:bd:9c:04:dd:c5:64:d7: 68:f5:e6:20:fc:a6:22:ae:e6:38:1a:d7:f2:ee:9a: d7:fb:d9:85:49:10:35:07:37:ec:12:db:6f:25:71: 26:9b:fd:39:84:bd:d6:8f:72:ff:61:92:fb:72:7b: 36:3d:70:3e:bd:31:b3:07:66:cf:7e:94:cb:f9:fe: f9:16:72:f3:53:e0:12:d3:3a:a1:e0:f9:96:b8:73: 9e:04:a4:88:cb:42:08:fd:44:cf:d2:dc:cb:c0:ae: 04:22:1f:51:75:e3:10:9f:86:ff:d2:45:8f:34:97: 92:d4:57:ee:ab:45:c0:fa:62:6f:52:14:18:1e:8f: 76:a0:cc:c7:0d:42:7a:26:1c:90:0e:c5:93:03:4e: 34:b9:ee:1e:47:d1:75:63:12:04:6a:00:99:ec:6a: bd:08:e7:91:9a:13:a5:61:67:49:c5:68:b5:c2:f3: ab:b9:84:6e:e1:59:cb:47:ef:9d:df:fb:34:e4:0b: 8f:6d:7b:fa:e8:5c:4c:f4:b9:27:49:67:0e:a1:f3: 03:90:ca:72:23:c9:56:9b:45:fb:9c:e3:5f:75:a5: 1e:8c:30:58:e0:77:b1:42:81:f6:97:f6:c0:9a:54: fe:39:5f:68:dc:88:06:36:b9:11:4f:4c:60:00:ca: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BD:E8:52:0B:4A:F3:83:A8:25:DE:58:54:3F:93:10:65:81:9A:02 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c1:d1:bf:93:3a:2a:b6:b6:b1:a2:f3:09:c1:52:0f:93:f9: 95:16:fa:0d:d3:2f:33:76:d7:7b:56:f0:5a:a0:c4:e9:be:11: 73:f2:5a:d9:5a:4b:00:12:48:7b:38:c3:df:8d:4f:69:0a:c9: 3a:ef:83:7d:64:a7:76:6d:62:35:09:d3:23:fd:35:2e:8f:f8: 9b:dd:2f:d9:7d:56:5e:18:77:3b:a7:b6:03:16:4f:fc:c9:0f: 3a:85:e4:9b:73:3b:8c:69:b2:63:70:7e:53:9a:75:06:44:59: 01:d5:7d:b0:51:7e:6d:7e:3c:2f:fe:80:c5:8d:b6:cd:68:2e: 1c:57:5f:ce:c7:8d:c2:21:7e:e3:c8:db:a0:ff:0d:a3:25:ac: c0:30:62:5d:da:af:0c:bd:87:9f:e8:34:5a:a8:91:c3:42:86: 42:af:62:c4:9c:5b:9c:01:10:46:2c:0e:0e:54:86:8d:68:e8: 8a:7a:74:5e:f3:4f:39:cd:1e:eb:a1:c5:4d:41:10:56:54:60: bb:4f:82:5b:cc:ec:23:c3:c4:18:53:5c:16:c2:8f:a1:91:d5: 35:2a:72:5d:a3:77:1b:29:7c:3d:8b:f8:25:d1:b3:04:78:ec: 1f:1a:41:ef:d8:e4:8e:c9:43:a1:5f:8a:7b:b0:82:0d:1d:15: 6d:ae:38:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNjMwMjIzOTA5WhcNMjUwNzA3MjIzOTA5WjAYMRYwFAYD VQQDEw02ODYzMTIwZC1iOGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9w0UXPdEr2cBN3FZNdo9eYg/KYiruY4Gtfy7prX+9mFSRA1BzfsEttvJXEm m/05hL3Wj3L/YZL7cns2PXA+vTGzB2bPfpTL+f75FnLzU+AS0zqh4PmWuHOeBKSI y0II/UTP0tzLwK4EIh9RdeMQn4b/0kWPNJeS1Ffuq0XA+mJvUhQYHo92oMzHDUJ6 JhyQDsWTA040ue4eR9F1YxIEagCZ7Gq9COeRmhOlYWdJxWi1wvOruYRu4VnLR++d 3/s05AuPbXv66FxM9LknSWcOofMDkMpyI8lWm0X7nONfdaUejDBY4HexQoH2l/bA mlT+OV9o3IgGNrkRT0xgAMq/ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO96FIL SvODqCXeWFQ/kxBlgZoCMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChwdG/kzoqtraxovMJwVIPk/mVFvoN0y8zdtd7VvBaoMTpvhFz8lrZ WksAEkh7OMPfjU9pCsk674N9ZKd2bWI1CdMj/TUuj/ib3S/ZfVZeGHc7p7YDFk/8 yQ86heSbczuMabJjcH5TmnUGRFkB1X2wUX5tfjwv/oDFjbbNaC4cV1/Ox43CIX7j yNug/w2jJazAMGJd2q8MvYef6DRaqJHDQoZCr2LEnFucARBGLA4OVIaNaOiKenRe 8085zR7rocVNQRBWVGC7T4JbzOwjw8QYU1wWwo+hkdU1KnJdo3cbKXw9i/gl0bME eOwfGkHv2OSOyUOhX4p7sIINHRVtrjib -----END CERTIFICATE-----Generated at Wed Jul 2 20:09:29 2025 by rpki-client