$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: Kjle4HKqnCg8KWueCZ77SRF7a7P+AtUzof30rERrs3Y= Subject key identifier: 8E:0F:5C:BA:3E:5E:77:B4:13:77:0D:BB:82:76:8B:A8:C1:85:82:1B Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 09F9 Signing time: Sun 19 Oct 2025 00:16:43 +0000 Manifest this update: Sun 19 Oct 2025 00:16:42 +0000 Manifest next update: Sun 26 Oct 2025 00:16:42 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: T+w6FQhjUVtxnikUrhiD+ncq8574WSeBCkf6K9kvGtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Oct 19 00:16:42 2025 GMT Not After : Oct 26 00:16:42 2025 GMT Subject: CN=68f42deb-f3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c0:b2:7f:ec:c8:13:61:a1:de:d5:94:24:43: 17:86:9f:7c:a8:9a:e9:37:90:5e:0e:70:9f:f7:92: 99:90:e5:9f:97:10:03:07:5e:00:85:cb:e6:6f:17: 76:c1:69:27:15:09:fd:b5:97:7e:5d:46:3f:39:00: 5b:b2:c6:ac:0e:c3:43:1b:3c:96:54:aa:51:6b:8e: 6a:95:70:62:f5:fe:5e:9c:7a:7f:28:0b:37:1d:6c: 37:13:3f:18:fa:b3:ad:5d:94:35:fb:27:69:b6:ff: 5f:ac:04:30:4b:e5:80:2c:97:6e:30:aa:d6:87:c6: 3e:fe:a7:e3:de:2a:40:ff:cd:2c:79:68:1b:9f:77: 91:fd:43:64:32:dd:10:21:22:fd:8d:10:dd:5a:f2: 00:a6:6c:ab:58:01:8e:14:a9:55:61:71:e5:19:50: d2:9c:c4:78:d5:24:4a:fa:82:31:1f:0e:94:2c:a0: 95:20:9c:ca:13:a4:2c:af:1c:ae:85:40:df:85:1d: e5:4b:8f:bd:66:28:97:85:d1:8d:95:8b:9d:94:64: 14:8a:36:ab:f7:f2:a4:ac:3a:1a:22:6d:c3:fa:bd: 0f:ac:ee:ca:bb:17:0a:38:57:cc:db:4f:19:46:83: e3:a3:e8:95:80:0c:ef:8c:36:3e:45:1d:62:e5:97: 97:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0F:5C:BA:3E:5E:77:B4:13:77:0D:BB:82:76:8B:A8:C1:85:82:1B X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:fb:0e:0d:c3:d7:ea:dc:88:c9:f2:37:02:b9:92:8e:f3:b5: f1:21:14:69:e8:8c:ef:d4:33:93:95:21:ad:63:56:ba:75:52: 4e:a1:07:4b:87:5d:35:e0:95:b5:29:d3:45:9b:65:bb:26:d7: aa:6b:0a:0b:16:52:ce:b6:06:aa:b7:d6:0e:ff:ec:de:fb:64: 20:07:a6:ce:fa:b2:93:e2:f7:7e:95:22:02:88:32:7f:d9:81: 68:38:2e:4d:91:7b:9c:9d:fb:f8:c1:0e:d4:55:37:d9:23:36: 2c:ac:56:2c:f5:cc:a6:93:e4:6d:b5:15:19:85:ba:0f:d3:49: 5a:25:ab:12:1c:fd:3e:23:ff:8e:d2:92:0e:b7:82:ec:c2:03: 50:86:d7:d7:1a:1e:c6:de:54:77:39:1d:88:49:73:31:bf:a7: 28:a1:87:c3:1d:f4:83:96:a0:31:b0:71:66:85:31:14:d3:00: 44:5a:ca:5a:52:ab:7d:a5:6c:2b:6a:80:3e:37:f9:41:0d:6c: 15:29:fc:cf:9f:63:37:cf:a2:44:b2:98:58:53:a9:e6:3b:19: 0d:4b:9f:57:3a:ad:f3:ca:6c:3d:4e:4e:b6:4d:97:4c:43:34: 3a:37:c8:d2:04:2f:04:4e:47:e4:42:47:de:84:7d:b5:8d:da: d4:2e:cf:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUxMDE5MDAxNjQyWhcNMjUxMDI2MDAxNjQyWjAYMRYwFAYD VQQDEw02OGY0MmRlYi1mM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcCyf+zIE2Gh3tWUJEMXhp98qJrpN5BeDnCf95KZkOWflxADB14Ahcvmbxd2 wWknFQn9tZd+XUY/OQBbssasDsNDGzyWVKpRa45qlXBi9f5enHp/KAs3HWw3Ez8Y +rOtXZQ1+ydptv9frAQwS+WALJduMKrWh8Y+/qfj3ipA/80seWgbn3eR/UNkMt0Q ISL9jRDdWvIApmyrWAGOFKlVYXHlGVDSnMR41SRK+oIxHw6ULKCVIJzKE6Qsrxyu hUDfhR3lS4+9ZiiXhdGNlYudlGQUijar9/KkrDoaIm3D+r0PrO7KuxcKOFfM208Z RoPjo+iVgAzvjDY+RR1i5ZeXUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4PXLo+ Xne0E3cNu4J2i6jBhYIbMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA+w4Nw9fq3IjJ8jcCuZKO87XxIRRp6Izv1DOTlSGtY1a6dVJOoQdL h1014JW1KdNFm2W7JteqawoLFlLOtgaqt9YO/+ze+2QgB6bO+rKT4vd+lSICiDJ/ 2YFoOC5NkXucnfv4wQ7UVTfZIzYsrFYs9cymk+RttRUZhboP00laJasSHP0+I/+O 0pIOt4LswgNQhtfXGh7G3lR3OR2ISXMxv6cooYfDHfSDlqAxsHFmhTEU0wBEWspa Uqt9pWwraoA+N/lBDWwVKfzPn2M3z6JEsphYU6nmOxkNS59XOq3zymw9Tk62TZdM QzQ6N8jSBC8ETkfkQkfehH21jdrULs9R -----END CERTIFICATE-----Generated at Mon Oct 20 01:48:01 2025 by rpki-client