$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: xBXmEmKoa4Of2IxmVx6EceVaxaA2TNBLBVn5UBjfm4I= Subject key identifier: 1B:0B:17:0D:CF:77:62:1C:97:A5:AB:35:24:F4:11:94:61:97:02:08 Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 2A Signing time: Sat 09 Aug 2025 08:16:53 +0000 Manifest this update: Sat 09 Aug 2025 08:16:52 +0000 Manifest next update: Sat 16 Aug 2025 08:16:52 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: tGXXe6cVHsfFYKKkEBDRs4qFRLiIhKNU/Yw1j7xPWH8=) 2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=) 3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Aug 9 08:16:52 2025 GMT Not After : Aug 16 08:16:52 2025 GMT Subject: CN=689703f4-1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:ce:ac:d4:d4:b6:30:73:2a:f6:19:77:0d: 4d:40:6b:da:ca:70:4a:cd:0b:c9:51:46:18:19:2d: fa:82:a2:f7:b0:6e:00:fc:f5:33:43:d4:98:f5:5b: 23:cf:c0:82:b7:70:68:e0:17:60:b1:ed:23:c7:a1: ec:a4:2d:77:de:e9:c2:e9:95:f9:3a:4f:e1:e1:ba: 61:9d:2a:73:1a:bf:b9:29:cf:c0:37:d4:08:d8:25: 4f:3d:61:b4:a0:e0:ef:ea:55:92:7c:1f:ff:64:34: a3:a6:2e:f2:f5:4c:cc:98:61:0c:f6:b7:88:a2:2d: dd:21:70:a4:de:33:77:09:b0:36:cc:da:2d:9c:8b: 3e:ed:b1:b6:8b:eb:28:7b:eb:2e:51:41:6b:86:f3: 80:18:93:86:d7:72:06:f3:76:2c:27:29:61:f4:34: 80:93:75:b0:16:5f:ff:e1:a8:44:b0:26:66:53:df: 9c:6a:2b:bc:7e:2a:93:3f:7d:31:72:e2:df:5b:5f: a8:52:d1:45:75:32:55:0c:c5:03:f7:8c:78:ba:07: 3c:60:bd:46:7f:80:a4:e7:96:a8:c9:83:94:33:3c: 17:ab:2e:fe:b9:c4:0c:99:9f:cc:96:a5:ac:ab:98: 30:ed:ce:b5:09:a8:83:e4:7f:e3:44:29:9c:f3:3a: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:0B:17:0D:CF:77:62:1C:97:A5:AB:35:24:F4:11:94:61:97:02:08 X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:71:4b:40:6b:df:44:a3:27:6f:09:67:cb:8b:68:85:10:26: 86:49:e8:b2:ca:3e:d5:f0:d2:bd:d5:53:8b:52:5f:3f:b5:e2: 61:a0:7d:26:b3:a5:47:da:6f:a2:f5:13:b2:44:67:8d:bc:58: d6:c1:a0:97:cd:18:7b:64:65:6a:76:ab:ee:78:40:18:a5:aa: 73:a0:02:d5:b2:d8:e4:fd:f4:5d:8b:ec:92:ed:c0:de:a0:81: 83:26:88:1c:1c:81:21:62:31:ae:5a:61:52:52:81:e1:e6:29: 52:41:68:7c:b0:ef:23:c8:c8:26:6e:ff:c4:71:29:ba:cc:d0: af:c3:01:cd:09:b1:4f:89:53:aa:86:b7:c5:2d:af:e7:a8:0d: d2:6f:a2:a6:fb:61:92:fb:d5:ea:80:cd:58:68:00:82:df:b1: f1:7f:eb:ad:25:27:20:21:c7:5b:7e:51:66:3b:7c:7b:6b:47: e3:d9:cc:d8:1c:57:d7:17:2f:bf:3c:02:d4:cb:aa:c9:07:32: be:3b:b6:19:95:8d:28:99:49:ce:67:3e:b0:c3:bb:4a:84:45: 82:ec:ff:46:48:58:16:4d:08:2f:2b:a0:83:3e:de:9e:83:92: 35:f0:da:b7:e2:9f:0c:78:c6:a1:63:e0:f3:45:76:a8:f6:8e: b8:d4:cb:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTA4MDkwODE2NTJaFw0yNTA4MTYwODE2NTJaMBgxFjAUBgNV BAMTDTY4OTcwM2Y0LTE4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcKc6s1NS2MHMq9hl3DU1Aa9rKcErNC8lRRhgZLfqCovewbgD89TND1Jj1WyPP wIK3cGjgF2Cx7SPHoeykLXfe6cLplfk6T+HhumGdKnMav7kpz8A31AjYJU89YbSg 4O/qVZJ8H/9kNKOmLvL1TMyYYQz2t4iiLd0hcKTeM3cJsDbM2i2ciz7tsbaL6yh7 6y5RQWuG84AYk4bXcgbzdiwnKWH0NICTdbAWX//hqESwJmZT35xqK7x+KpM/fTFy 4t9bX6hS0UV1MlUMxQP3jHi6BzxgvUZ/gKTnlqjJg5QzPBerLv65xAyZn8yWpayr mDDtzrUJqIPkf+NEKZzzOpgNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGwsXDc93 YhyXpas1JPQRlGGXAggwHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKVxS0Br30SjJ28JZ8uLaIUQJoZJ6LLKPtXw0r3VU4tSXz+14mGgfSaz pUfab6L1E7JEZ428WNbBoJfNGHtkZWp2q+54QBilqnOgAtWy2OT99F2L7JLtwN6g gYMmiBwcgSFiMa5aYVJSgeHmKVJBaHyw7yPIyCZu/8RxKbrM0K/DAc0JsU+JU6qG t8Utr+eoDdJvoqb7YZL71eqAzVhoAILfsfF/660lJyAhx1t+UWY7fHtrR+PZzNgc V9cXL788AtTLqskHMr47thmVjSiZSc5nPrDDu0qERYLs/0ZIWBZNCC8roIM+3p6D kjXw2rfinwx4xqFj4PNFdqj2jrjUywE= -----END CERTIFICATE-----Generated at Sun Aug 10 19:01:49 2025 by rpki-client