$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: OBaK9RNsdBJ6LWliz6ZpkKo+mYJDQwnq+SrFwTFiESc= Subject key identifier: 3C:AB:B6:C8:9B:50:42:62:92:4E:44:09:93:A4:7C:BC:0D:53:17:54 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 0756 Signing time: Mon 12 May 2025 21:38:12 +0000 Manifest this update: Mon 12 May 2025 21:38:11 +0000 Manifest next update: Mon 19 May 2025 21:38:11 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: OgHvns7n+4V5EjrlR+nTTKDah4qpYoKB3xQWRs5pObo=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: mxB3yjYGB13RAoosj8FX8EoTGGWkUSin7w4er+g4SEM=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: JKRkAuL9yffO/Fe1PSsX5t/Ot6ARnJ9I/G6iI6zoO/g=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: siwf/BRs/2qjsSqYe1YNo8fuooHbA+PHr0NQC6IUKoY=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: hyIj/oH1UbDGdOUj+NMHphg7x96naMtPuDiIW9PmlFc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: 7ARnOa15SPNUaY70Cimy+c5qoh+iIO5hu8LoR0cj8rc=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: i6QopCT3wMyI5V4oS5AOopBe2SziRTgfYrO+6jKs/XA=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: pyTKRU9BUUR54eL45xj3zBjeNm0ArDMdCQGdgijd2ls=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: zgVRs+6F7DXZL1anc6K7thLZ91kSFqktNq+7bQzMe3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1956 (0x7a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: May 12 21:38:11 2025 GMT Not After : May 19 21:38:11 2025 GMT Subject: CN=68226a43-95e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:81:0a:44:a0:1d:49:0f:30:ed:b5:be:9d: 5c:59:85:de:5f:e0:4b:a2:bb:29:c7:b1:84:0d:78: 3c:7d:b2:7d:92:5a:da:50:30:a1:44:c5:fc:9b:43: 20:fd:34:db:57:8a:c4:f1:20:d3:a7:78:67:99:29: 4a:78:af:e9:8d:90:7c:9d:8b:0e:00:88:36:f0:34: da:dd:7b:d6:28:61:a4:04:de:21:73:05:25:e2:4d: 1f:1b:42:1d:90:13:7b:d7:26:1f:b8:db:c0:b8:ef: 8c:e3:e5:12:07:39:15:39:9b:6b:f0:50:e0:7c:94: 67:2d:63:3b:5c:c0:26:3a:cf:15:f5:4d:11:3d:97: 6e:8e:b9:bb:ab:0e:ce:53:5e:31:91:77:6d:05:36: 00:73:c1:1c:7b:36:c3:df:b2:78:46:19:c7:72:2d: c4:f6:26:1e:01:71:86:c1:f9:f9:4f:81:7b:fc:02: 17:3d:18:87:01:92:07:cb:a2:94:44:c8:d5:48:07: 80:56:37:a7:69:d6:c0:55:5e:23:43:2c:7c:20:7e: 63:cd:34:32:4d:8e:fd:75:b6:65:6f:0f:68:90:f1: 0c:1e:88:6c:4a:c0:8a:97:a7:ca:01:c9:13:a8:62: 11:e0:3e:f9:2d:d9:58:75:7a:7b:97:8f:d9:b6:81: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:B6:C8:9B:50:42:62:92:4E:44:09:93:A4:7C:BC:0D:53:17:54 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:29:8a:0e:24:07:4f:55:aa:43:54:a2:67:1c:42:5c:94:53: 98:cb:58:f1:f1:ab:eb:fa:1f:da:9d:8a:4c:ac:95:c9:4a:f3: 07:e3:82:b1:51:f2:75:a9:0d:fc:fc:ff:26:e0:4d:84:77:6c: 9e:25:30:dc:56:23:dd:f6:2a:e7:9b:66:26:4d:1b:6f:0c:02: a6:05:25:4a:c9:39:06:fe:73:1c:02:b5:ec:c2:c7:22:d8:7b: 87:d9:49:37:99:3d:29:b0:6c:de:a9:8a:a5:8a:73:e3:5a:c5: f9:eb:46:38:44:cc:67:51:fe:9d:7b:1a:7a:4b:79:91:8d:5c: c9:29:b8:63:3e:65:17:c2:8a:41:6c:95:eb:d3:a1:5d:d9:00: e1:13:ba:d5:d2:b5:b0:a3:1b:eb:c4:f4:70:c2:55:df:e9:62: ca:61:07:17:98:83:a2:44:46:da:6d:36:36:65:4b:d6:86:bf: f2:83:33:10:16:2a:dc:28:31:9c:c9:b5:73:54:be:c6:ca:02: 9b:3a:b9:0d:90:4b:e9:60:ba:aa:cd:c4:49:e0:c7:bc:4e:61: c5:1b:9f:68:11:cf:fd:0c:a8:6e:4e:90:19:8e:4f:6c:8f:9e: 95:7a:56:6d:92:cb:9e:03:f0:c0:be:94:a2:66:8e:cf:3b:3e: 30:16:97:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNTEyMjEzODExWhcNMjUwNTE5MjEzODExWjAYMRYwFAYD VQQDEw02ODIyNmE0My05NWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kmBCkSgHUkPMO21vp1cWYXeX+BLorspx7GEDXg8fbJ9klraUDChRMX8m0Mg /TTbV4rE8SDTp3hnmSlKeK/pjZB8nYsOAIg28DTa3XvWKGGkBN4hcwUl4k0fG0Id kBN71yYfuNvAuO+M4+USBzkVOZtr8FDgfJRnLWM7XMAmOs8V9U0RPZdujrm7qw7O U14xkXdtBTYAc8EcezbD37J4RhnHci3E9iYeAXGGwfn5T4F7/AIXPRiHAZIHy6KU RMjVSAeAVjenadbAVV4jQyx8IH5jzTQyTY79dbZlbw9okPEMHohsSsCKl6fKAckT qGIR4D75LdlYdXp7l4/ZtoFYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDyrtsib UEJikk5ECZOkfLwNUxdUMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdKYoOJAdPVapDVKJnHEJclFOYy1jx8avr+h/anYpMrJXJSvMH44Kx UfJ1qQ38/P8m4E2Ed2yeJTDcViPd9irnm2YmTRtvDAKmBSVKyTkG/nMcArXswsci 2HuH2Uk3mT0psGzeqYqlinPjWsX560Y4RMxnUf6dexp6S3mRjVzJKbhjPmUXwopB bJXr06Fd2QDhE7rV0rWwoxvrxPRwwlXf6WLKYQcXmIOiREbabTY2ZUvWhr/ygzMQ FircKDGcybVzVL7GygKbOrkNkEvpYLqqzcRJ4Me8TmHFG59oEc/9DKhuTpAZjk9s j56VelZtksueA/DAvpSiZo7POz4wFpeH -----END CERTIFICATE-----Generated at Tue May 13 02:23:43 2025 by rpki-client