$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: g5YVHinVDmmEnWj9BkStysNY5iUHfF8c4baGPSamwXI= Subject key identifier: 08:7D:66:02:48:0A:BF:80:26:B2:E3:D6:EA:CD:02:46:04:C7:1A:4E Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 17 Signing time: Thu 03 Jul 2025 08:16:22 +0000 Manifest this update: Thu 03 Jul 2025 08:16:22 +0000 Manifest next update: Thu 10 Jul 2025 08:16:22 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: 62lUyo8lUTN66uDuKYmOqAJRTwZAP3wMiy04GQ2ZY1o=) 2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=) 3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Jul 3 08:16:22 2025 GMT Not After : Jul 10 08:16:22 2025 GMT Subject: CN=68663c56-d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:0c:93:ff:41:c3:7a:51:42:a9:e6:19:a1: de:ce:2e:88:78:12:af:d8:61:49:d9:1a:80:e2:b1: 55:cb:17:1b:8b:db:c3:6f:d6:3f:2d:33:22:e0:5d: 71:5f:cc:12:d4:01:0a:6a:dc:06:a1:8c:f5:ba:cb: 6e:4a:b6:14:7c:1e:e2:df:e3:eb:f9:72:d6:c3:47: 1c:49:90:09:c8:b6:63:4e:57:31:9d:a2:44:c8:24: f9:10:15:f2:94:ed:b3:a6:fb:32:29:39:32:76:53: 50:5e:35:0e:e6:97:2f:20:37:a9:c0:49:74:a8:24: 73:8b:da:62:0f:a1:bd:66:41:8a:70:cf:d7:3b:8f: 94:21:f6:3a:6e:d3:6c:95:cc:94:f6:48:aa:13:73: 65:5b:b3:00:10:5e:ef:a0:17:6f:e7:5e:a5:d8:32: bd:5c:d7:50:56:8b:c8:59:38:db:5d:05:d3:f2:74: f0:cf:dd:97:16:bc:2d:88:21:ea:d4:82:2e:5c:93: 56:ba:1a:14:1d:fe:c0:19:c8:99:57:c2:89:72:8c: 4d:85:04:ee:30:62:51:97:c4:cc:67:e9:3f:b9:1d: ba:a0:bd:9b:99:80:be:c5:4e:9b:82:92:a9:09:0e: 5d:bf:f6:94:4b:a4:71:d6:bb:89:e9:43:90:0e:c4: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7D:66:02:48:0A:BF:80:26:B2:E3:D6:EA:CD:02:46:04:C7:1A:4E X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e8:48:de:ea:d5:d3:f7:2b:dd:a0:00:a3:e2:8a:81:61:d6:e1: 71:cf:78:e2:a5:0d:d4:b7:eb:3e:f2:72:b2:47:7e:57:e3:57: 09:8b:6f:12:c4:22:c8:d2:37:f6:a6:66:86:00:3d:40:1b:7f: 0b:5e:61:85:89:6e:e1:66:62:20:ed:45:ec:ae:f2:57:56:ea: df:44:63:20:af:75:06:7e:1d:89:48:73:a9:1e:02:e4:dc:05: ae:90:c2:cb:ff:e9:df:08:1e:0e:27:9d:a8:79:c9:37:d1:74: 79:0d:9e:d6:9b:63:50:a5:a4:e1:ba:4e:69:be:7c:06:2c:2e: 7a:df:d1:db:d2:e0:74:4d:76:54:84:22:c5:51:42:ce:27:05: 01:00:19:54:7d:cb:05:e1:5f:92:3f:ad:4d:35:e3:07:3a:6d: 24:1d:f3:5f:9d:a1:18:02:f5:c7:7c:e7:95:44:07:97:33:74: 23:6a:15:a9:88:07:47:bf:12:46:57:0a:01:9d:7b:05:1c:03: cb:41:72:74:91:4f:c2:b2:5d:fd:13:f3:2f:1e:78:bc:d8:cb: 04:e2:68:ed:99:47:ec:17:0b:5c:5e:2f:51:60:16:fb:c6:a8: 7d:d7:8e:07:77:92:6d:9f:e3:aa:f3:6b:dd:1b:fb:c4:0c:9b: 2a:73:b0:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTA3MDMwODE2MjJaFw0yNTA3MTAwODE2MjJaMBgxFjAUBgNV BAMTDTY4NjYzYzU2LWQ2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM6gyT/0HDelFCqeYZod7OLoh4Eq/YYUnZGoDisVXLFxuL28Nv1j8tMyLgXXFf zBLUAQpq3AahjPW6y25KthR8HuLf4+v5ctbDRxxJkAnItmNOVzGdokTIJPkQFfKU 7bOm+zIpOTJ2U1BeNQ7mly8gN6nASXSoJHOL2mIPob1mQYpwz9c7j5Qh9jpu02yV zJT2SKoTc2VbswAQXu+gF2/nXqXYMr1c11BWi8hZONtdBdPydPDP3ZcWvC2IIerU gi5ck1a6GhQd/sAZyJlXwolyjE2FBO4wYlGXxMxn6T+5HbqgvZuZgL7FTpuCkqkJ Dl2/9pRLpHHWu4npQ5AOxDhBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCH1mAkgK v4AmsuPW6s0CRgTHGk4wHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOhI3urV0/cr3aAAo+KKgWHW4XHPeOKlDdS36z7ycrJHflfjVwmLbxLE IsjSN/amZoYAPUAbfwteYYWJbuFmYiDtReyu8ldW6t9EYyCvdQZ+HYlIc6keAuTc Ba6Qwsv/6d8IHg4nnah5yTfRdHkNntabY1ClpOG6Tmm+fAYsLnrf0dvS4HRNdlSE IsVRQs4nBQEAGVR9ywXhX5I/rU014wc6bSQd81+doRgC9cd855VEB5czdCNqFamI B0e/EkZXCgGdewUcA8tBcnSRT8KyXf0T8y8eeLzYywTiaO2ZR+wXC1xeL1FgFvvG qH3Xjgd3km2f46rza90b+8QMmypzsJQ= -----END CERTIFICATE-----Generated at Fri Jul 4 15:14:37 2025 by rpki-client