$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: AmH9xdwToQOmrsDFlBQ6Zz9zjZtz2dahywCLYmmKODo= Subject key identifier: 20:2E:05:B0:AA:32:5B:FE:33:36:C4:6D:DA:A0:DB:9E:DD:6D:71:BA Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 0794 Signing time: Thu 04 Sep 2025 21:56:12 +0000 Manifest this update: Thu 04 Sep 2025 21:56:11 +0000 Manifest next update: Thu 11 Sep 2025 21:56:11 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: PIHFC/pL5bq/ksFBVlqtzlJ3EWDEShmLYKPU66ydEIw=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: fcLk74mhI/vJXY1ktCkvuDEMWDBzEh5+AvgLMjlAcms=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: l/DHTVbPHG3y6ZP96kTGxdjScCsZX+opfzZPaXFSPHE=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: rFNdBE/l2Q3OnzMQ6TN5aUj23PCHorUgqebxmyTEGXU=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: xQhNdK+dmnWFBSYuPKpKIiIyOGr1KTaY3ftw2n4c55M=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: Ixq9geRxUKKGOgHHhaiXOEHSRL++Qm2+qsdIs46ukkY=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: I61epdoS7NgSvCNgvdHOLFptBBSx5JIqUPN5lG/cUj8=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: VPyjHXIlyfKXrjtRepxZP54GhoJ+eI58uZbgIe9Td2M=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: qln4gvIuOP7tepjN2xzQIyOgSArueoVOrTlqRA/GgZc=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: i6AcoSqcO3NvCwEFhXskxT9JukL3BBiPTq3PwcXZ51Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Sep 4 21:56:11 2025 GMT Not After : Sep 11 21:56:11 2025 GMT Subject: CN=68ba0afb-1d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3e:6b:2e:90:25:e2:39:f9:9a:d0:68:45:d8: 11:1f:0d:97:84:87:e8:f8:67:2c:8a:fe:45:1f:87: cd:d4:ef:93:60:49:9a:f2:77:68:28:f2:0a:a9:17: 15:90:b2:39:58:a4:44:8a:a8:8f:a7:6e:07:f0:4a: ce:db:a5:4e:bc:8a:e3:09:95:77:e5:3c:7d:4a:51: 47:79:4a:4d:33:f0:df:2b:c1:69:40:10:3c:8b:45: 44:63:71:41:02:73:c8:d6:21:2b:7d:3d:c5:4a:95: 19:9a:71:ae:85:90:17:3e:7a:1e:fd:07:b1:03:8b: 03:b8:28:65:5a:c5:98:57:50:73:27:ea:fc:14:37: f0:64:06:c4:b4:1d:1b:39:0e:87:5a:cc:f7:a7:86: f2:3c:59:06:b0:2b:ff:13:d7:94:bb:65:ed:21:dd: 74:14:5f:94:5d:fc:63:51:c4:9c:d2:76:ec:85:ae: 72:8a:dc:c4:8c:c1:64:e0:92:ec:71:67:27:21:b4: 5d:5b:53:1f:a4:96:42:7a:4b:50:0a:50:1b:f8:a7: ee:38:f0:63:cc:14:4c:6e:ce:f3:eb:e4:73:6b:92: 31:ec:18:56:09:80:b0:02:a0:0e:4a:ef:c4:70:f3: e5:75:7b:f8:2a:e1:25:8e:6d:d3:a1:e7:e0:24:0e: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2E:05:B0:AA:32:5B:FE:33:36:C4:6D:DA:A0:DB:9E:DD:6D:71:BA X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:40:43:7e:aa:f0:37:4a:e0:54:50:4d:5e:51:20:28:bb:e2: dd:c5:39:28:f6:6c:c8:a1:26:04:f9:5e:74:ec:1a:e4:89:7d: 04:96:76:f4:50:e2:2f:6b:e7:76:8a:8a:dc:db:74:1d:3c:1f: d5:ca:df:46:1c:b5:ab:6a:fd:b3:4c:cc:6c:77:0c:7d:0b:80: 20:ac:ff:af:fe:10:2c:c0:d1:1d:82:ad:2b:68:0b:5b:71:a8: de:79:b6:41:c7:f3:51:bd:92:0f:7d:fd:38:66:8e:2f:86:5d: 90:53:82:bd:57:1e:7e:56:f0:4a:67:fe:ac:3c:fe:97:f1:70: 77:dc:20:91:bd:bc:45:68:b1:69:a0:e1:62:b1:8a:56:3a:8a: 5a:13:cb:35:22:8d:e8:51:61:d8:0f:72:ae:3e:d9:16:87:77: e3:73:12:b9:2a:71:6f:f3:7a:23:ee:2f:0a:ad:82:ef:e8:b3: 91:1b:23:08:8e:d4:3a:7a:9e:4a:6b:1c:77:a5:8c:74:0d:ba: 28:a6:3c:4e:2b:45:58:1b:aa:35:a1:5e:b8:31:1e:e5:94:43: 59:ef:b3:a4:71:e8:8f:83:68:98:cb:91:98:3a:0e:06:32:7f: 5b:76:ad:ad:bc:9e:b5:60:04:a0:52:f9:e5:ab:ce:ae:50:8c: cc:da:30:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwOTA0MjE1NjExWhcNMjUwOTExMjE1NjExWjAYMRYwFAYD VQQDEw02OGJhMGFmYi0xZDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7T5rLpAl4jn5mtBoRdgRHw2XhIfo+Gcsiv5FH4fN1O+TYEma8ndoKPIKqRcV kLI5WKREiqiPp24H8ErO26VOvIrjCZV35Tx9SlFHeUpNM/DfK8FpQBA8i0VEY3FB AnPI1iErfT3FSpUZmnGuhZAXPnoe/QexA4sDuChlWsWYV1BzJ+r8FDfwZAbEtB0b OQ6HWsz3p4byPFkGsCv/E9eUu2XtId10FF+UXfxjUcSc0nbsha5yitzEjMFk4JLs cWcnIbRdW1MfpJZCektQClAb+KfuOPBjzBRMbs7z6+Rza5Ix7BhWCYCwAqAOSu/E cPPldXv4KuEljm3ToefgJA7J/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAuBbCq Mlv+MzbEbdqg257dbXG6MB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtQEN+qvA3SuBUUE1eUSAou+LdxTko9mzIoSYE+V507BrkiX0Elnb0 UOIva+d2iorc23QdPB/Vyt9GHLWrav2zTMxsdwx9C4AgrP+v/hAswNEdgq0raAtb cajeebZBx/NRvZIPff04Zo4vhl2QU4K9Vx5+VvBKZ/6sPP6X8XB33CCRvbxFaLFp oOFisYpWOopaE8s1Io3oUWHYD3KuPtkWh3fjcxK5KnFv83oj7i8KrYLv6LORGyMI jtQ6ep5Kaxx3pYx0DboopjxOK0VYG6o1oV64MR7llENZ77OkceiPg2iYy5GYOg4G Mn9bdq2tvJ61YASgUvnlq86uUIzM2jBr -----END CERTIFICATE-----Generated at Sat Sep 6 06:02:01 2025 by rpki-client