$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: 9axwND62FrfJc0VZT/6wYlmvYdrgFWsp0mUPVNVoIfQ= Subject key identifier: 6B:3A:2D:D1:17:85:32:3C:CE:FC:AA:02:C3:38:F7:01:87:1A:8D:98 Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 0969 Signing time: Fri 08 Aug 2025 23:13:54 +0000 Manifest this update: Fri 08 Aug 2025 23:13:53 +0000 Manifest next update: Fri 15 Aug 2025 23:13:53 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: 1RiSzkQf+q5ThWbTvaS/dcs1Ez+sGtjdrKK1ojoYBRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Aug 8 23:13:53 2025 GMT Not After : Aug 15 23:13:53 2025 GMT Subject: CN=689684b1-faeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9d:7e:f9:77:2f:d1:eb:d8:39:d9:bb:49:99: 2e:37:86:06:04:d7:10:30:2f:b5:21:cd:3c:38:7b: 5e:a1:d7:81:40:13:e4:8c:5c:20:9b:ad:0e:7b:be: ee:b5:44:e2:16:71:91:e7:15:2e:da:ed:5c:f4:9b: 5a:fb:f6:67:61:02:be:cd:94:7d:a5:c0:91:f4:cb: 26:8b:f5:de:07:c0:6b:e0:4f:46:17:b8:9d:0a:0e: 48:76:9b:3b:91:8e:3b:86:3e:94:48:68:92:3f:4f: c9:54:a7:3d:4a:47:46:12:d6:4f:27:60:bb:3a:2f: 50:60:21:e2:b3:a0:21:8f:75:97:1a:3a:68:5a:fb: 46:96:69:d7:7f:92:f1:0a:27:16:cb:cf:ee:f1:c1: 2a:4a:0c:b6:21:c7:d6:56:53:36:61:1d:20:be:94: a6:9b:94:cb:80:15:d1:7a:8f:8b:05:fc:aa:ec:fd: dd:69:a4:c2:cd:35:12:46:9d:b6:2c:9f:26:48:0d: 98:62:32:f7:82:95:92:93:46:5c:e6:34:ac:7d:8f: 83:67:f4:d7:15:2b:69:43:1c:4a:26:08:16:78:19: 20:74:f5:11:6b:d5:a3:33:ba:0e:84:2f:eb:bb:b8: 99:3e:6b:ca:ab:71:ff:84:ec:2c:79:01:9c:5d:90: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3A:2D:D1:17:85:32:3C:CE:FC:AA:02:C3:38:F7:01:87:1A:8D:98 X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:da:7d:76:fd:63:5c:3c:de:b7:e5:3a:74:73:df:4c:0c:be: a4:54:e8:1c:b5:cb:bd:53:66:e7:a7:32:ca:5b:c4:23:89:ee: 71:d8:e0:43:9e:4f:c4:e4:01:6d:8e:2f:02:c4:3c:72:6f:52: e6:83:52:fa:ce:46:71:5c:64:92:7b:44:98:02:cd:7d:e2:50: b7:f6:05:f2:37:86:91:a4:1b:46:4e:8c:9e:94:41:55:09:8f: 72:02:38:90:68:b8:d5:eb:27:21:03:44:c6:00:c8:e8:ae:01: 6d:2a:cb:01:52:e3:28:68:e2:7a:39:6a:8d:bf:c1:a1:43:5c: 12:37:cb:33:82:8e:af:29:36:67:db:6f:2b:88:26:bf:fb:64: da:72:52:bb:44:56:be:15:f6:f2:ed:71:b3:14:f9:43:fa:d7: 98:9c:c5:2d:5a:e8:c4:13:a5:70:d8:4a:3d:95:d3:cb:f8:e0: 64:f8:ef:9f:63:ea:b3:9d:86:2d:10:a2:1f:7b:a9:a6:62:9d: b2:e7:17:ff:11:26:d6:07:69:3c:31:e6:0d:ad:cb:3f:9c:42: 02:bd:0f:49:e7:7b:16:23:e5:ce:e7:eb:71:f1:85:ea:d5:25: 47:e3:09:89:e9:01:85:01:b3:e0:09:29:37:4d:fc:2b:b5:92: 08:b5:c6:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwODA4MjMxMzUzWhcNMjUwODE1MjMxMzUzWjAYMRYwFAYD VQQDEw02ODk2ODRiMS1mYWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJ1++Xcv0evYOdm7SZkuN4YGBNcQMC+1Ic08OHteodeBQBPkjFwgm60Oe77u tUTiFnGR5xUu2u1c9Jta+/ZnYQK+zZR9pcCR9Msmi/XeB8Br4E9GF7idCg5Idps7 kY47hj6USGiSP0/JVKc9SkdGEtZPJ2C7Oi9QYCHis6Ahj3WXGjpoWvtGlmnXf5Lx CicWy8/u8cEqSgy2IcfWVlM2YR0gvpSmm5TLgBXReo+LBfyq7P3daaTCzTUSRp22 LJ8mSA2YYjL3gpWSk0Zc5jSsfY+DZ/TXFStpQxxKJggWeBkgdPURa9WjM7oOhC/r u7iZPmvKq3H/hOwseQGcXZBGrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs6LdEX hTI8zvyqAsM49wGHGo2YMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu2n12/WNcPN635Tp0c99MDL6kVOgctcu9U2bnpzLKW8Qjie5x2OBD nk/E5AFtji8CxDxyb1Lmg1L6zkZxXGSSe0SYAs194lC39gXyN4aRpBtGToyelEFV CY9yAjiQaLjV6ychA0TGAMjorgFtKssBUuMoaOJ6OWqNv8GhQ1wSN8szgo6vKTZn 228riCa/+2TaclK7RFa+Ffby7XGzFPlD+teYnMUtWujEE6Vw2Eo9ldPL+OBk+O+f Y+qznYYtEKIfe6mmYp2y5xf/ESbWB2k8MeYNrcs/nEICvQ9J53sWI+XO5+tx8YXq 1SVH4wmJ6QGFAbPgCSk3TfwrtZIItcbw -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:53 2025 by rpki-client