$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: o1ilxIXZq2lQgXB4By943kQvFB2+DMcG87mrYZzfDGw= Subject key identifier: 4F:F3:AF:E1:B6:BD:B3:D3:C7:57:00:2C:BF:0D:B9:F8:33:24:CD:04 Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 075E Signing time: Fri 30 May 2025 22:02:09 +0000 Manifest this update: Fri 30 May 2025 22:02:08 +0000 Manifest next update: Fri 06 Jun 2025 22:02:08 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: wC89VizJZM4hxHmkCrb++iuP/p0wM9CqyIdrcb5OF8E=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: mxB3yjYGB13RAoosj8FX8EoTGGWkUSin7w4er+g4SEM=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: JKRkAuL9yffO/Fe1PSsX5t/Ot6ARnJ9I/G6iI6zoO/g=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: siwf/BRs/2qjsSqYe1YNo8fuooHbA+PHr0NQC6IUKoY=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: hyIj/oH1UbDGdOUj+NMHphg7x96naMtPuDiIW9PmlFc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: 7ARnOa15SPNUaY70Cimy+c5qoh+iIO5hu8LoR0cj8rc=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: i6QopCT3wMyI5V4oS5AOopBe2SziRTgfYrO+6jKs/XA=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: pyTKRU9BUUR54eL45xj3zBjeNm0ArDMdCQGdgijd2ls=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: zgVRs+6F7DXZL1anc6K7thLZ91kSFqktNq+7bQzMe3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: May 30 22:02:08 2025 GMT Not After : Jun 6 22:02:08 2025 GMT Subject: CN=683a2ae0-0b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:f0:44:a7:b0:ae:e6:a2:b9:57:bc:28:aa: 03:e3:9b:5d:a0:5f:fc:6e:c7:2d:b3:25:3b:0b:eb: e6:97:40:bb:54:f3:a2:83:a3:53:d0:78:3e:2b:59: ff:94:82:c7:f3:0e:36:04:2d:b3:6d:5d:c4:20:9f: 47:8a:07:c2:44:41:b1:85:6e:65:14:53:3d:7b:56: e4:f7:ba:87:50:20:a7:23:28:ea:99:eb:c1:25:a2: 02:4d:fd:42:07:d8:93:64:86:36:c4:f8:be:3f:88: 02:67:f6:a3:7e:ce:79:3f:ab:23:0e:6d:08:01:6f: 95:c7:2d:59:b6:ce:f0:10:7a:81:72:40:99:4a:aa: df:11:e0:81:a7:9e:5f:ee:e6:e0:8f:55:2f:57:63: ce:17:11:74:6a:35:de:58:f4:d2:64:9d:ef:2a:e7: b8:f6:4a:f7:2f:d3:fb:4a:81:97:25:2e:bb:2f:a4: d4:6e:07:88:9e:07:14:bb:40:26:27:a4:e4:a0:0a: 60:73:a4:fe:e9:6d:a2:aa:c3:c9:3f:60:83:03:10: 61:7c:83:c1:88:67:29:5b:1c:22:49:09:d8:93:db: 5c:31:0f:2f:85:25:2d:ab:7e:24:12:e5:c4:13:c5: 41:36:54:86:3e:8c:da:95:26:76:ad:b7:3e:d2:d8: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F3:AF:E1:B6:BD:B3:D3:C7:57:00:2C:BF:0D:B9:F8:33:24:CD:04 X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:91:03:ed:cc:82:f4:0b:14:7b:44:d0:db:2f:21:6a:5b:2b: 2e:b4:c1:17:4b:c4:ab:b1:77:41:b3:ec:90:66:ea:db:1e:b4: 18:17:9d:6f:8b:08:ea:ff:07:2a:b0:35:47:1b:83:dc:8a:c5: 9b:90:51:1b:07:36:af:72:a0:e5:9d:0b:61:f7:81:c7:21:ea: 53:33:27:13:61:39:0f:59:a3:bd:3a:cd:87:6f:4f:b9:b0:84: 9a:66:85:95:ee:e4:e1:12:6c:bd:46:22:29:b0:11:c4:ad:86: 02:6c:e1:36:04:bd:c9:60:fe:12:9d:32:05:99:92:d6:00:72: 1d:0a:a7:42:0a:16:4f:2a:e4:80:8c:90:99:a4:85:04:a8:56: c1:4d:75:58:85:b7:54:cb:77:92:45:41:a2:17:21:12:e4:b9: 24:ba:b2:d2:e1:45:3f:b7:a3:45:1a:2a:75:70:d8:10:8f:62: 4a:5e:a8:12:b6:0d:a7:ce:4d:68:66:b9:81:18:31:32:90:a3: bc:26:42:09:d7:49:7e:0f:e1:88:ec:65:4b:0d:ca:ac:8f:42: 1f:27:a2:ed:31:90:20:e4:73:1d:6f:75:06:1e:7c:c7:49:39: 7f:38:ba:c5:dd:8e:ae:80:e1:90:1d:ce:26:d7:d7:7d:3e:18: 3e:3c:98:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNTMwMjIwMjA4WhcNMjUwNjA2MjIwMjA4WjAYMRYwFAYD VQQDEw02ODNhMmFlMC0wYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwnwRKewruaiuVe8KKoD45tdoF/8bsctsyU7C+vml0C7VPOig6NT0Hg+K1n/ lILH8w42BC2zbV3EIJ9HigfCREGxhW5lFFM9e1bk97qHUCCnIyjqmevBJaICTf1C B9iTZIY2xPi+P4gCZ/ajfs55P6sjDm0IAW+Vxy1Zts7wEHqBckCZSqrfEeCBp55f 7ubgj1UvV2POFxF0ajXeWPTSZJ3vKue49kr3L9P7SoGXJS67L6TUbgeIngcUu0Am J6TkoApgc6T+6W2iqsPJP2CDAxBhfIPBiGcpWxwiSQnYk9tcMQ8vhSUtq34kEuXE E8VBNlSGPozalSZ2rbc+0tjOswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/zr+G2 vbPTx1cALL8NufgzJM0EMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCikQPtzIL0CxR7RNDbLyFqWysutMEXS8SrsXdBs+yQZurbHrQYF51v iwjq/wcqsDVHG4PcisWbkFEbBzavcqDlnQth94HHIepTMycTYTkPWaO9Os2Hb0+5 sISaZoWV7uThEmy9RiIpsBHErYYCbOE2BL3JYP4SnTIFmZLWAHIdCqdCChZPKuSA jJCZpIUEqFbBTXVYhbdUy3eSRUGiFyES5LkkurLS4UU/t6NFGip1cNgQj2JKXqgS tg2nzk1oZrmBGDEykKO8JkIJ10l+D+GI7GVLDcqsj0IfJ6LtMZAg5HMdb3UGHnzH STl/OLrF3Y6ugOGQHc4m19d9Phg+PJiL -----END CERTIFICATE-----Generated at Sat May 31 17:00:20 2025 by rpki-client