$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: UZwY+Oy3GmrLFbDk0JCVYC+RWTCo+M2OEw4BK8EQksc= Subject key identifier: 1C:A0:8B:00:1B:58:0C:DA:6F:4D:B9:6B:C6:83:A7:CA:C4:F3:7F:4F Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 080A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 07AA Signing time: Sat 18 Oct 2025 22:58:13 +0000 Manifest this update: Sat 18 Oct 2025 22:58:13 +0000 Manifest next update: Sat 25 Oct 2025 22:58:13 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: mFH/2pxPb/W9vqNjy8bAvnJTTKOcB3cLeK8LJS2hXmI=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: l/DHTVbPHG3y6ZP96kTGxdjScCsZX+opfzZPaXFSPHE=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: Ixq9geRxUKKGOgHHhaiXOEHSRL++Qm2+qsdIs46ukkY=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: i6AcoSqcO3NvCwEFhXskxT9JukL3BBiPTq3PwcXZ51Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2058 (0x80a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Oct 18 22:58:13 2025 GMT Not After : Oct 25 22:58:13 2025 GMT Subject: CN=68f41b85-2e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:6c:ad:25:06:a2:27:80:bf:dc:b0:8a:0e: 79:d8:ce:c8:87:84:34:98:f9:bd:11:a5:6b:ba:32: 2f:85:b3:bb:ff:91:25:f9:e4:9d:6d:5a:95:8a:16: 89:a4:64:c4:25:8b:ca:95:80:f3:f9:6c:94:88:f8: 29:6d:46:ef:ff:38:53:85:a0:31:ed:45:9d:1e:bf: 3c:8a:54:b8:dd:18:05:8b:19:ed:27:cd:9b:d1:10: ad:3b:32:81:70:30:b2:96:b0:ed:39:0c:29:49:f3: 85:6f:60:de:7c:d3:c0:2f:b6:30:95:af:10:b2:03: 99:c6:9e:9e:78:53:ad:d4:38:8c:4c:44:b5:ce:5e: ac:11:9b:16:6a:16:bc:3f:25:5b:44:e3:13:03:c5: 15:e0:03:75:b2:2d:2a:23:9d:66:89:9a:62:4c:b9: b1:82:89:75:55:66:66:6f:f2:ba:45:39:26:3b:7e: 9b:44:37:7c:14:ba:19:a6:f9:c4:e6:40:fe:44:c4: 28:e9:20:1d:02:dc:ff:a6:78:c0:06:5f:ef:9f:1a: 00:08:5d:e1:b4:26:6f:f6:b0:26:43:dc:55:d2:a4: 31:17:18:68:e0:bc:e9:61:8f:77:a9:06:75:cd:a1: 48:0e:26:f1:1a:97:c5:82:e5:6d:c6:3d:4c:66:07: 05:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A0:8B:00:1B:58:0C:DA:6F:4D:B9:6B:C6:83:A7:CA:C4:F3:7F:4F X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ed:7e:5a:20:6d:59:af:99:be:e2:0f:64:a4:00:21:1c:de: ef:a5:9a:68:07:1a:1c:00:cb:f9:12:bd:76:73:05:ed:48:f4: af:75:e4:1e:59:e4:3f:72:80:de:5c:a1:d4:cd:71:16:31:db: ba:2a:c2:5b:f9:df:27:36:56:49:43:fd:8b:89:cc:d4:49:d7: 67:76:82:1d:4a:88:ff:ef:f5:44:ba:b3:f2:54:97:41:86:05: 4a:da:5c:b9:5d:f1:cf:96:c0:40:69:08:45:4e:63:3e:b7:b8: c6:6a:dc:a6:e8:06:b9:49:77:33:de:48:2a:d9:e3:80:b6:f2: ca:de:6b:c0:34:f8:3c:67:84:1d:de:fb:e0:c2:8c:16:54:21: 79:05:ad:25:66:94:3a:4f:3e:39:b3:a4:9f:4d:59:d3:af:31: 91:e3:c9:df:fe:dd:8f:09:29:b1:84:b2:a7:1e:4a:6d:c3:e7: 16:0c:95:7f:e5:bf:38:61:50:4c:ff:ca:de:1c:8f:d4:14:52: 84:77:9a:bf:00:ca:12:19:c8:7a:f0:6e:8d:61:a6:93:f7:ec: e8:e2:09:cc:44:bf:e5:86:0e:6f:6a:e7:3e:14:d9:f0:c8:78: 07:d8:af:3f:18:a5:1a:49:ad:5f:f6:aa:47:ee:69:58:a8:c9: 09:f1:18:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUxMDE4MjI1ODEzWhcNMjUxMDI1MjI1ODEzWjAYMRYwFAYD VQQDEw02OGY0MWI4NS0yZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwlsrSUGoieAv9ywig552M7Ih4Q0mPm9EaVrujIvhbO7/5El+eSdbVqVihaJ pGTEJYvKlYDz+WyUiPgpbUbv/zhThaAx7UWdHr88ilS43RgFixntJ82b0RCtOzKB cDCylrDtOQwpSfOFb2DefNPAL7Ywla8QsgOZxp6eeFOt1DiMTES1zl6sEZsWaha8 PyVbROMTA8UV4AN1si0qI51miZpiTLmxgol1VWZmb/K6RTkmO36bRDd8FLoZpvnE 5kD+RMQo6SAdAtz/pnjABl/vnxoACF3htCZv9rAmQ9xV0qQxFxho4LzpYY93qQZ1 zaFIDibxGpfFguVtxj1MZgcFeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBygiwAb WAzab025a8aDp8rE839PMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7X5aIG1Zr5m+4g9kpAAhHN7vpZpoBxocAMv5Er12cwXtSPSvdeQe WeQ/coDeXKHUzXEWMdu6KsJb+d8nNlZJQ/2LiczUSddndoIdSoj/7/VEurPyVJdB hgVK2ly5XfHPlsBAaQhFTmM+t7jGatym6Aa5SXcz3kgq2eOAtvLK3mvANPg8Z4Qd 3vvgwowWVCF5Ba0lZpQ6Tz45s6SfTVnTrzGR48nf/t2PCSmxhLKnHkptw+cWDJV/ 5b84YVBM/8reHI/UFFKEd5q/AMoSGch68G6NYaaT9+zo4gnMRL/lhg5vauc+FNnw yHgH2K8/GKUaSa1f9qpH7mlYqMkJ8RjE -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:26 2025 by rpki-client