$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: nG5US2sAEQmTXHA7izGH0lX9sEhWv95CYYkkIFAJPFw= Subject key identifier: A8:AC:64:F2:1C:11:A6:D5:90:08:72:D7:C0:05:D5:DC:B0:44:18:01 Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 0610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 08F9 Signing time: Sat 14 Jun 2025 22:38:26 +0000 Manifest this update: Sat 14 Jun 2025 22:38:25 +0000 Manifest next update: Sat 21 Jun 2025 22:38:25 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: 42s0SrhpwRkybBxnusyJRzp1zO7/h2X0F1c9/Sya2DQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1552 (0x610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Jun 14 22:38:25 2025 GMT Not After : Jun 21 22:38:25 2025 GMT Subject: CN=684df9e2-3953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:99:72:da:93:bd:b6:e0:30:b7:36:5c:cd:7b: 65:e2:e4:0d:b9:34:3f:b6:c9:32:c0:0b:cd:0a:d4: 05:e2:1b:af:a1:bb:57:6c:4f:75:b2:05:33:73:36: b6:2d:0d:ba:0d:37:50:a4:77:1b:1e:93:ca:b0:12: 52:e0:a3:79:fd:08:e1:94:72:c7:44:15:3d:b2:d7: 08:0e:61:07:8f:27:e3:9c:0c:30:83:b5:17:ea:e8: 90:7b:75:42:3e:ed:ad:19:69:a5:03:bd:e2:16:4a: 0b:35:b9:ec:6e:16:ca:6a:0b:5a:a5:ea:d9:56:ce: e7:53:b9:09:45:d4:3c:db:a0:c2:f3:f1:04:c3:a6: 7f:5d:72:87:a8:a5:1a:c3:da:5c:61:86:a9:01:6b: 55:cf:b3:40:90:15:62:ef:66:49:ad:23:f0:c2:c3: 7f:25:03:d1:3a:34:6b:5e:95:d1:ed:ac:dd:8b:09: db:2f:76:09:5d:59:86:4f:11:60:96:55:77:98:ce: 4d:ea:4f:6a:0b:20:6b:f4:52:b1:ac:fc:fb:d7:a2: 89:be:39:f9:9f:12:1a:f4:27:ad:21:95:3a:4c:00: 0e:89:6e:65:94:dd:e2:20:1a:7e:bd:d7:85:44:c5: 91:2a:16:9d:52:98:2e:f1:39:4d:1e:cb:b4:a7:4b: b4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:64:F2:1C:11:A6:D5:90:08:72:D7:C0:05:D5:DC:B0:44:18:01 X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:20:a3:cc:79:e2:c4:f2:eb:24:68:0d:17:c2:39:79:7e:c3: e5:75:29:64:60:91:d5:c9:ec:4f:3f:3a:84:52:19:a0:8f:19: 32:43:2a:5d:66:89:ad:6c:18:55:5c:e3:f7:28:e2:c7:e3:a3: e3:c5:73:10:e4:5f:7f:f5:64:a1:ce:ea:fe:54:c4:b5:c3:86: 1b:f4:26:fc:b4:1e:5a:0a:e5:03:d4:0f:94:ba:03:76:08:6c: bd:ea:e0:e5:41:f6:32:db:a4:11:c8:c5:b7:a5:65:d7:0b:ab: 5c:7f:fa:56:33:87:26:3b:58:3a:bf:89:28:a7:5b:0a:01:90: ac:38:9d:87:70:d1:80:74:f2:95:b6:09:fe:bf:eb:8a:54:ea: 4f:dc:00:a2:1f:e3:61:07:ec:2c:c4:21:97:bd:d7:f5:d6:b6: f2:2b:0f:bf:36:f7:34:58:0c:fb:fa:47:66:de:1d:66:70:e7: 65:41:20:30:f6:ae:69:dd:cc:16:e8:17:54:c5:53:3a:47:fb: 81:4f:25:70:56:53:a9:aa:c8:ed:ba:14:74:d5:e4:6e:0b:3d: f5:af:6f:10:62:27:e0:1e:b2:92:f9:8f:c0:6f:8f:b3:a6:64: 96:4f:56:fa:1a:5b:ba:0e:f6:cc:75:50:1f:2b:ef:9e:59:74: 19:7f:26:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwNjE0MjIzODI1WhcNMjUwNjIxMjIzODI1WjAYMRYwFAYD VQQDEw02ODRkZjllMi0zOTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5ly2pO9tuAwtzZczXtl4uQNuTQ/tskywAvNCtQF4huvobtXbE91sgUzcza2 LQ26DTdQpHcbHpPKsBJS4KN5/QjhlHLHRBU9stcIDmEHjyfjnAwwg7UX6uiQe3VC Pu2tGWmlA73iFkoLNbnsbhbKagtaperZVs7nU7kJRdQ826DC8/EEw6Z/XXKHqKUa w9pcYYapAWtVz7NAkBVi72ZJrSPwwsN/JQPROjRrXpXR7azdiwnbL3YJXVmGTxFg llV3mM5N6k9qCyBr9FKxrPz716KJvjn5nxIa9CetIZU6TAAOiW5llN3iIBp+vdeF RMWRKhadUpgu8TlNHsu0p0u0zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKisZPIc EabVkAhy18AF1dywRBgBMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0IKPMeeLE8uskaA0Xwjl5fsPldSlkYJHVyexPPzqEUhmgjxkyQypd ZomtbBhVXOP3KOLH46PjxXMQ5F9/9WShzur+VMS1w4Yb9Cb8tB5aCuUD1A+UugN2 CGy96uDlQfYy26QRyMW3pWXXC6tcf/pWM4cmO1g6v4kop1sKAZCsOJ2HcNGAdPKV tgn+v+uKVOpP3ACiH+NhB+wsxCGXvdf11rbyKw+/Nvc0WAz7+kdm3h1mcOdlQSAw 9q5p3cwW6BdUxVM6R/uBTyVwVlOpqsjtuhR01eRuCz31r28QYifgHrKS+Y/Ab4+z pmSWT1b6Glu6DvbMdVAfK++eWXQZfybD -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:40 2025 by rpki-client