$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: VQ1UJgOjXq8LtIb5EdRxYHVIUMOcbOlELze52yyyPsg= Subject key identifier: FD:A2:2C:38:40:3B:AE:8F:D1:20:36:F9:5D:29:CA:92:76:70:9B:DC Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 061A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 0921 Signing time: Fri 04 Jul 2025 23:17:12 +0000 Manifest this update: Fri 04 Jul 2025 23:17:11 +0000 Manifest next update: Fri 11 Jul 2025 23:17:11 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: uaIqfmIY2MOUZ5qLBQPggW6FibHekiEFR0FWdV6OH6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Jul 4 23:17:11 2025 GMT Not After : Jul 11 23:17:11 2025 GMT Subject: CN=686860f8-2994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5a:90:32:b3:ed:9a:09:b1:a5:14:e8:fa:cc: d7:2d:7b:0d:1d:f5:72:17:f8:cd:14:98:71:81:6d: 66:9d:dc:0d:2c:6f:db:b5:25:e8:c7:d9:45:df:05: 6f:bd:9a:3f:8a:5d:4d:1d:f5:4e:8a:d2:70:81:20: 52:15:07:12:a8:dc:cd:4f:d7:03:82:bd:a9:63:fd: 38:72:a7:ba:ad:9f:55:7b:f9:a1:72:db:de:56:92: 2c:3d:ee:29:bf:b9:45:b8:58:7e:d6:75:08:09:4e: 71:75:7b:50:51:cf:f0:bf:c8:a9:c8:b7:89:81:28: a4:d9:94:8e:ac:0d:43:4e:8d:5a:33:8f:73:90:72: d1:c4:e1:0d:01:f9:bb:bb:e2:c8:9a:cc:c2:b5:a3: e9:64:a1:ca:88:6c:7c:04:49:3c:8c:d8:6d:30:8a: 26:e4:3f:af:fe:7a:f8:ea:f9:08:ea:5f:cd:00:fb: 07:ef:3a:8c:2c:48:f3:cb:ae:11:10:b3:cf:2e:9b: 27:70:a2:bc:02:84:e1:76:69:1e:c5:34:65:4a:0c: ff:6d:42:25:3a:9a:89:09:a2:c3:29:ec:9b:0b:6a: ff:a6:6e:73:43:11:9e:8e:7b:bc:44:ff:b3:74:41: 61:f9:63:f3:ba:06:e5:ff:36:a9:aa:a3:6a:8a:22: a9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A2:2C:38:40:3B:AE:8F:D1:20:36:F9:5D:29:CA:92:76:70:9B:DC X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a5:50:9e:8d:67:aa:07:a8:41:49:e7:f0:72:4f:e6:53:d5: f8:0a:2b:91:11:22:d8:9e:5f:8a:fe:76:8d:11:e2:12:2d:30: 50:cb:da:5c:4b:e0:65:bc:3d:16:32:f4:11:79:2d:a9:85:aa: c3:d2:e4:97:79:5e:7e:cb:bd:75:67:d8:73:96:07:f5:85:c8: 39:5b:8f:db:80:54:fa:f9:53:60:f1:1a:7b:cf:69:d1:4e:4d: b2:85:09:a9:c1:bf:f0:4e:e3:48:e5:4d:04:9e:27:eb:3a:b7: c5:75:63:35:a5:fb:80:08:cd:6a:74:b4:66:5d:3c:35:96:6d: 87:62:e9:45:f4:6c:fe:a2:66:27:29:64:fa:6c:97:8b:28:98: 5e:cb:04:98:01:2d:87:08:c0:0b:9b:ee:b1:6b:cc:86:81:4f: 8e:12:d6:d4:74:6c:fb:e2:29:b1:e5:91:2d:12:2e:23:7b:ea: f8:ac:83:ba:28:ca:fb:92:27:f8:c7:76:d6:97:81:02:bc:7b: 7e:0c:96:42:d7:f2:4f:f4:61:cd:aa:9f:54:75:0a:54:7f:c8: 00:22:05:1c:48:d2:97:48:5a:2b:5b:01:3a:10:a1:e9:2f:ee: a5:46:8c:83:0f:9e:56:d1:35:15:b5:23:49:d4:d6:73:64:9e: 8e:28:12:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwNzA0MjMxNzExWhcNMjUwNzExMjMxNzExWjAYMRYwFAYD VQQDEw02ODY4NjBmOC0yOTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlqQMrPtmgmxpRTo+szXLXsNHfVyF/jNFJhxgW1mndwNLG/btSXox9lF3wVv vZo/il1NHfVOitJwgSBSFQcSqNzNT9cDgr2pY/04cqe6rZ9Ve/mhctveVpIsPe4p v7lFuFh+1nUICU5xdXtQUc/wv8ipyLeJgSik2ZSOrA1DTo1aM49zkHLRxOENAfm7 u+LImszCtaPpZKHKiGx8BEk8jNhtMIom5D+v/nr46vkI6l/NAPsH7zqMLEjzy64R ELPPLpsncKK8AoThdmkexTRlSgz/bUIlOpqJCaLDKeybC2r/pm5zQxGejnu8RP+z dEFh+WPzugbl/zapqqNqiiKpOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2iLDhA O66P0SA2+V0pypJ2cJvcMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQpVCejWeqB6hBSefwck/mU9X4CiuRESLYnl+K/naNEeISLTBQy9pc S+BlvD0WMvQReS2pharD0uSXeV5+y711Z9hzlgf1hcg5W4/bgFT6+VNg8Rp7z2nR Tk2yhQmpwb/wTuNI5U0EnifrOrfFdWM1pfuACM1qdLRmXTw1lm2HYulF9Gz+omYn KWT6bJeLKJheywSYAS2HCMALm+6xa8yGgU+OEtbUdGz74imx5ZEtEi4je+r4rIO6 KMr7kif4x3bWl4ECvHt+DJZC1/JP9GHNqp9UdQpUf8gAIgUcSNKXSForWwE6EKHp L+6lRoyDD55W0TUVtSNJ1NZzZJ6OKBLv -----END CERTIFICATE-----Generated at Sat Jul 5 01:55:19 2025 by rpki-client