$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft File: 1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json) Hash identifier: Z6LZIcosy8gwj5CQIbYVmW1zR/c3ymD8vt+XtWGf7bM= Subject key identifier: 58:C9:0D:F3:1A:E9:A8:99:69:9C:F2:C0:A4:AA:CB:19:73:07:C2:0E Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Certificate serial: 079B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft Manifest number: 074D Signing time: Thu 24 Apr 2025 21:40:56 +0000 Manifest this update: Thu 24 Apr 2025 21:40:56 +0000 Manifest next update: Thu 01 May 2025 21:40:56 +0000 Files and hashes: 1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: Bn5apqpv7YYvVMcCvLb973AbNJFsWL6on9G4mz59d/I=) 2: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: SgUApaKrz3I+VB8AtKHyQ8VOd7m+ovVx9xgf8pErYlU=) 3: C25AE1346FB111EBA11B8D2DC4F9AE02.roa (hash: mxB3yjYGB13RAoosj8FX8EoTGGWkUSin7w4er+g4SEM=) 4: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: JKRkAuL9yffO/Fe1PSsX5t/Ot6ARnJ9I/G6iI6zoO/g=) 5: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: siwf/BRs/2qjsSqYe1YNo8fuooHbA+PHr0NQC6IUKoY=) 6: 2605BA6A267D11ECAF7F166DC4F9AE02.roa (hash: hyIj/oH1UbDGdOUj+NMHphg7x96naMtPuDiIW9PmlFc=) 7: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: 7ARnOa15SPNUaY70Cimy+c5qoh+iIO5hu8LoR0cj8rc=) 8: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: i6QopCT3wMyI5V4oS5AOopBe2SziRTgfYrO+6jKs/XA=) 9: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: pyTKRU9BUUR54eL45xj3zBjeNm0ArDMdCQGdgijd2ls=) 10: E2EB4C72D85A11EDA96B1D11C4F9AE02.roa (hash: zgVRs+6F7DXZL1anc6K7thLZ91kSFqktNq+7bQzMe3Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1947 (0x79b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9 Validity Not Before: Apr 24 21:40:56 2025 GMT Not After : May 1 21:40:56 2025 GMT Subject: CN=680aafe8-d0d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3a:da:db:d9:17:9e:83:53:45:c1:96:b3:42: a1:9c:6a:0c:6f:43:c2:d7:34:f0:2b:34:82:46:97: f4:af:dd:42:0a:e7:67:78:48:0d:2b:c3:28:e0:93: 4b:e0:fe:b5:00:d8:56:62:25:9c:44:4a:2f:e1:c5: c8:5b:27:f2:22:ee:84:4f:2a:fd:9a:4b:79:a9:6a: 76:15:a9:21:15:62:14:66:d9:59:da:0f:59:24:80: 7d:39:49:4b:bd:6e:ad:13:c3:7e:54:82:7a:34:15: 72:d8:8f:ab:18:6d:0e:de:f1:b2:e3:d8:6b:71:0a: 32:3c:5d:f1:a7:fb:d5:2e:de:13:ef:af:d2:31:55: 7c:01:2d:27:a8:6b:1e:14:71:e0:81:4f:08:0c:07: f7:a3:e5:b8:52:4c:39:1f:fc:ee:51:9c:13:7c:ff: db:a6:43:5f:ee:bd:b2:a6:2c:08:0a:1f:3b:dd:c7: d5:5f:19:81:f4:d9:72:dd:fd:7c:4e:d9:58:d8:09: 83:50:e1:b5:13:a9:e0:21:fc:5a:a1:1d:43:5e:99: 9d:e9:06:c5:94:a6:ef:b4:fc:96:b7:52:6c:7c:5e: e8:2e:28:59:68:d3:89:7a:c5:0c:0f:63:6e:ec:72: e5:72:f1:8c:c7:0c:44:bf:c0:ee:9a:34:bc:a9:fc: 57:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C9:0D:F3:1A:E9:A8:99:69:9C:F2:C0:A4:AA:CB:19:73:07:C2:0E X509v3 Authority Key Identifier: keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:43:7b:87:24:d8:f9:27:b2:a8:2e:a3:25:f1:0c:88:fb:f9: f6:4c:e6:ec:85:40:de:31:88:83:0a:01:29:9a:87:20:14:1f: 09:7f:eb:e4:1b:f2:44:f1:b2:76:d5:84:72:73:05:de:83:89: 39:53:0d:0a:de:80:83:b2:54:5c:f0:7d:32:dc:45:6f:c7:95: 46:5a:cf:e5:68:cf:14:f8:6d:20:69:a0:76:40:3e:66:6a:40: 7a:cb:5c:90:58:a9:a0:bc:a9:a5:ac:74:8d:31:98:70:66:fc: 78:57:49:5a:3c:74:a8:18:ea:1d:de:b8:7a:59:c6:7d:72:ec: 4e:f4:bf:16:7b:89:6f:c7:52:f7:86:44:37:ee:21:df:87:34: 5c:67:f7:fa:94:1c:fe:27:b1:f6:d2:9a:96:18:6d:2e:f0:57: 41:86:a1:d7:54:4d:fe:36:65:00:04:05:7f:59:8f:2b:9c:45: 50:99:27:f5:7a:9d:71:2b:61:99:55:60:a8:22:27:0e:8a:24: f7:24:3e:61:8c:50:40:f0:fa:4b:cf:84:ec:81:13:3f:e7:a4: 83:a9:73:18:bb:3d:7d:57:9f:ba:ca:91:42:79:c2:d1:56:f6: 2f:08:72:26:67:72:27:99:c4:a2:37:14:1e:6e:c2:96:e2:20: e0:e0:18:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0 QUYzNDA1RTkwHhcNMjUwNDI0MjE0MDU2WhcNMjUwNTAxMjE0MDU2WjAYMRYwFAYD VQQDEw02ODBhYWZlOC1kMGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Dra29kXnoNTRcGWs0KhnGoMb0PC1zTwKzSCRpf0r91CCudneEgNK8Mo4JNL 4P61ANhWYiWcREov4cXIWyfyIu6ETyr9mkt5qWp2FakhFWIUZtlZ2g9ZJIB9OUlL vW6tE8N+VIJ6NBVy2I+rGG0O3vGy49hrcQoyPF3xp/vVLt4T76/SMVV8AS0nqGse FHHggU8IDAf3o+W4Ukw5H/zuUZwTfP/bpkNf7r2ypiwICh873cfVXxmB9Nly3f18 TtlY2AmDUOG1E6ngIfxaoR1DXpmd6QbFlKbvtPyWt1JsfF7oLihZaNOJesUMD2Nu 7HLlcvGMxwxEv8DumjS8qfxX6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFjJDfMa 6aiZaZzywKSqyxlzB8IOMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1 QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDBEMi81OTM3RDQzRTM1QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZI LWp1R1ZTLVY5UkZLODBCZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZQ3uHJNj5J7KoLqMl8QyI+/n2TObshUDeMYiDCgEpmocgFB8Jf+vk G/JE8bJ21YRycwXeg4k5Uw0K3oCDslRc8H0y3EVvx5VGWs/laM8U+G0gaaB2QD5m akB6y1yQWKmgvKmlrHSNMZhwZvx4V0laPHSoGOod3rh6WcZ9cuxO9L8We4lvx1L3 hkQ37iHfhzRcZ/f6lBz+J7H20pqWGG0u8FdBhqHXVE3+NmUABAV/WY8rnEVQmSf1 ep1xK2GZVWCoIicOiiT3JD5hjFBA8PpLz4TsgRM/56SDqXMYuz19V5+6ypFCecLR VvYvCHImZ3InmcSiNxQebsKW4iDg4Bg6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:20 2025 by rpki-client