$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: bO/RsmXNZIAdUlD2jBhTzKG2+sBC0KzKtW3EkvPo5Cc= Subject key identifier: DA:BC:D9:5E:F7:1C:06:84:41:5E:BF:24:80:B2:79:04:89:E2:49:4A Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 077B Signing time: Fri 18 Jul 2025 22:01:08 +0000 Manifest this update: Fri 18 Jul 2025 22:01:07 +0000 Manifest next update: Fri 25 Jul 2025 22:01:07 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: zuNyOtGV98H/f6fN/pIfE6quCjHVewvjwCsVuBy0hps=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: l/DHTVbPHG3y6ZP96kTGxdjScCsZX+opfzZPaXFSPHE=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: Ixq9geRxUKKGOgHHhaiXOEHSRL++Qm2+qsdIs46ukkY=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: i6AcoSqcO3NvCwEFhXskxT9JukL3BBiPTq3PwcXZ51Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Jul 18 22:01:07 2025 GMT Not After : Jul 25 22:01:07 2025 GMT Subject: CN=687ac424-3a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:bd:24:90:77:c8:88:09:ce:57:40:d1:11: 5a:d6:f2:32:af:54:d4:6d:63:77:ec:4c:34:c1:59: a1:17:44:ec:7c:56:a3:78:7b:64:8f:11:77:f0:c9: dc:ea:19:b9:8d:91:29:3b:b1:83:36:7f:7e:ef:37: dc:22:e4:b7:3b:5e:a2:83:a5:6b:0e:9e:b4:d4:d4: 68:d8:68:8a:e6:ce:38:0d:2e:36:c1:2e:c3:a6:c5: 20:d0:69:67:5f:49:2a:c9:cb:44:0b:0d:2b:ea:74: e3:ad:02:22:d1:0e:e5:90:a9:3c:1f:62:f9:16:b5: 8e:02:a4:d0:93:d1:59:b2:34:7d:f7:53:1e:4e:7c: 80:11:b6:32:af:ab:11:83:8d:cf:81:9e:39:46:21: 00:65:1e:3b:99:3f:19:8e:5e:3c:e7:0c:0b:b0:a0: 63:13:49:0a:e7:da:b8:88:d3:e0:a4:58:eb:43:99: 60:0f:1a:4b:25:30:6b:f6:fc:87:3a:89:b5:fa:4d: 08:82:13:35:7e:a9:e4:d4:85:94:61:32:9a:b1:2a: 94:fc:b7:47:7d:19:7b:94:66:87:51:e8:16:33:72: 85:6e:8a:ea:9b:e0:3b:69:d8:6f:8d:f5:2a:0a:79: cd:a9:25:d9:c3:3b:be:9e:51:5a:f7:cf:fe:70:4d: e3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BC:D9:5E:F7:1C:06:84:41:5E:BF:24:80:B2:79:04:89:E2:49:4A X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:37:a0:ba:36:cd:fd:f2:ae:c7:2e:d7:cd:83:5f:62:7e:c2: 22:4a:bf:8c:22:32:9c:70:ae:3b:6f:6f:b7:64:51:79:0b:c5: 76:f1:3a:c4:a7:ab:b5:c2:e0:c0:0a:64:be:d2:b6:18:61:46: 23:04:7d:65:3e:48:31:3b:c7:42:01:70:a5:86:7e:51:e1:ba: 8f:bd:ca:61:4c:9a:be:8f:24:76:4f:f3:21:3e:3f:68:fd:bd: a8:a0:d3:fc:a9:27:ef:3c:e7:40:76:bf:cc:fc:4a:9c:c2:8d: 18:4f:47:9d:5b:05:60:29:66:2d:35:8a:45:e9:e2:16:f3:36: 56:49:b9:cd:06:cd:c6:6a:24:ff:06:ad:a8:26:74:ff:9b:82: fc:5a:d4:6d:ff:d8:8c:ec:b5:82:7a:ed:fb:67:85:43:71:98: d4:d0:75:ff:c5:d8:a0:f6:06:1c:62:d2:f7:4c:08:c5:21:96: 7b:d9:d5:d2:f3:3c:b0:47:bc:3b:6c:76:50:84:19:cf:7d:e1: 47:14:b7:d4:cd:63:ca:ff:84:48:b2:b3:b5:98:da:24:e4:90: 23:17:59:07:83:f4:8f:b7:93:1d:92:74:f5:51:96:7d:be:5d: 0a:73:7f:e1:09:23:f0:9a:12:20:e1:f7:cd:48:27:d7:a7:96: f2:ab:b5:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNzE4MjIwMTA3WhcNMjUwNzI1MjIwMTA3WjAYMRYwFAYD VQQDEw02ODdhYzQyNC0zYTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNG9JJB3yIgJzldA0RFa1vIyr1TUbWN37Ew0wVmhF0TsfFajeHtkjxF38Mnc 6hm5jZEpO7GDNn9+7zfcIuS3O16ig6VrDp601NRo2GiK5s44DS42wS7DpsUg0Gln X0kqyctECw0r6nTjrQIi0Q7lkKk8H2L5FrWOAqTQk9FZsjR991MeTnyAEbYyr6sR g43PgZ45RiEAZR47mT8Zjl485wwLsKBjE0kK59q4iNPgpFjrQ5lgDxpLJTBr9vyH Oom1+k0IghM1fqnk1IWUYTKasSqU/LdHfRl7lGaHUegWM3KFborqm+A7adhvjfUq CnnNqSXZwzu+nlFa98/+cE3jCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq82V73 HAaEQV6/JICyeQSJ4klKMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtN6C6Ns398q7HLtfNg19ifsIiSr+MIjKccK47b2+3ZFF5C8V28TrE p6u1wuDACmS+0rYYYUYjBH1lPkgxO8dCAXClhn5R4bqPvcphTJq+jyR2T/MhPj9o /b2ooNP8qSfvPOdAdr/M/Eqcwo0YT0edWwVgKWYtNYpF6eIW8zZWSbnNBs3GaiT/ Bq2oJnT/m4L8WtRt/9iM7LWCeu37Z4VDcZjU0HX/xdig9gYcYtL3TAjFIZZ72dXS 8zywR7w7bHZQhBnPfeFHFLfUzWPK/4RIsrO1mNok5JAjF1kHg/SPt5MdknT1UZZ9 vl0Kc3/hCSPwmhIg4ffNSCfXp5byq7WI -----END CERTIFICATE-----Generated at Sun Jul 20 22:46:38 2025 by rpki-client