$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: OotLBNF38zy8LoqSU3M/0z7NtwfT5HGNlEEELr/H2k8= Subject key identifier: 8F:FE:C1:AE:8D:40:7D:96:7C:7F:89:9D:47:17:FF:78:F5:7E:12:99 Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 05EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 0864 Signing time: Wed 02 Apr 2025 23:00:40 +0000 Manifest this update: Wed 02 Apr 2025 23:00:40 +0000 Manifest next update: Wed 09 Apr 2025 23:00:40 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: uBovu0CB99IOWIxt1Ioj+PCqJBPC6lM4R+smQ5NMKsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1515 (0x5eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA Validity Not Before: Apr 2 23:00:40 2025 GMT Not After : Apr 9 23:00:40 2025 GMT Subject: CN=67edc198-db40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:1a:8b:02:c5:c7:02:4b:26:ce:84:03:f0: 83:29:d7:a0:c3:e8:fd:de:4a:24:28:55:cd:fb:b6: 47:3a:d0:1c:1f:db:c3:b8:5c:d4:b3:67:c2:cd:e9: 74:17:04:e7:76:ba:10:22:5b:02:cb:29:b1:ac:cd: c4:7e:e1:d8:5f:b9:85:b1:c4:92:0d:e2:fa:df:59: a8:de:f7:bc:8e:95:5d:ad:03:b7:ef:ac:a1:44:84: 6e:4a:4a:03:e9:de:db:62:81:45:b9:a3:75:76:68: 44:dd:18:52:ab:13:84:d8:58:42:75:85:12:37:ce: a7:35:9c:36:51:e9:12:7b:98:33:c9:8c:93:4f:d2: 23:fc:89:08:9e:12:eb:96:1a:c0:96:85:f0:ba:78: 3f:f2:07:de:49:be:ae:06:63:a5:1f:18:35:50:9b: 39:a4:8b:52:3b:ed:c5:0e:f2:bf:59:d8:2a:61:9c: d4:c9:f6:5a:9d:2d:d9:4c:5e:ba:df:07:8e:7c:93: c7:69:75:db:ce:7a:39:15:e6:09:c9:f8:19:1c:45: 72:8c:5e:c4:28:6b:66:97:c0:9c:ec:ad:bb:3e:6b: 74:a4:4a:45:3a:54:46:41:64:32:88:49:bc:3c:12: bd:77:13:fb:1a:d9:13:e0:30:39:28:0a:f6:19:b5: b6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:C1:AE:8D:40:7D:96:7C:7F:89:9D:47:17:FF:78:F5:7E:12:99 X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:6a:10:18:b2:e0:d9:44:96:7d:0b:42:50:7f:ab:2f:0c:52: 9d:6f:73:7e:83:95:67:d6:76:8b:32:f0:3e:a9:c0:2b:7c:35: eb:20:04:c0:48:5b:80:b1:18:e5:47:54:12:54:1b:af:f7:5f: 8b:63:b1:8f:cd:27:8b:6f:98:52:8c:08:46:f3:22:88:43:a3: ed:fc:e3:a5:16:1e:af:72:08:e3:65:18:33:0e:7f:a1:09:36: 93:57:d6:d6:d5:e8:de:20:6c:8b:40:e5:c2:a9:58:9d:72:2d: fd:10:b1:1c:8e:eb:4e:85:28:97:45:7d:e0:41:8d:4d:65:d9: 39:37:c6:af:c7:79:b5:26:e5:35:89:25:17:2b:04:71:0a:a0: 1d:25:f4:2f:28:7b:af:50:5c:fb:98:b6:33:b9:99:13:75:18: ba:b2:0d:16:71:6a:0f:e0:e5:2b:a9:d1:fb:c6:9f:75:3f:27: e9:2f:1e:55:5a:71:b7:c0:bc:79:d1:96:b8:ce:17:12:e1:f1: f0:7d:b9:46:30:6b:c9:ed:96:6f:e9:bd:d9:a2:e0:4e:01:69: 29:47:61:13:77:19:c5:c2:76:cf:70:a3:96:12:c5:c4:af:40: 05:94:81:8f:1e:69:ca:98:99:60:c4:9f:81:d5:c0:19:fe:de: 40:dc:10:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwNDAyMjMwMDQwWhcNMjUwNDA5MjMwMDQwWjAYMRYwFAYD VQQDEw02N2VkYzE5OC1kYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyEaiwLFxwJLJs6EA/CDKdegw+j93kokKFXN+7ZHOtAcH9vDuFzUs2fCzel0 FwTndroQIlsCyymxrM3EfuHYX7mFscSSDeL631mo3ve8jpVdrQO376yhRIRuSkoD 6d7bYoFFuaN1dmhE3RhSqxOE2FhCdYUSN86nNZw2UekSe5gzyYyTT9Ij/IkInhLr lhrAloXwung/8gfeSb6uBmOlHxg1UJs5pItSO+3FDvK/WdgqYZzUyfZanS3ZTF66 3weOfJPHaXXbzno5FeYJyfgZHEVyjF7EKGtml8Cc7K27Pmt0pEpFOlRGQWQyiEm8 PBK9dxP7GtkT4DA5KAr2GbW2BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/+wa6N QH2WfH+JnUcX/3j1fhKZMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKahAYsuDZRJZ9C0JQf6svDFKdb3N+g5Vn1naLMvA+qcArfDXrIATA SFuAsRjlR1QSVBuv91+LY7GPzSeLb5hSjAhG8yKIQ6Pt/OOlFh6vcgjjZRgzDn+h CTaTV9bW1ejeIGyLQOXCqVidci39ELEcjutOhSiXRX3gQY1NZdk5N8avx3m1JuU1 iSUXKwRxCqAdJfQvKHuvUFz7mLYzuZkTdRi6sg0WcWoP4OUrqdH7xp91PyfpLx5V WnG3wLx50Za4zhcS4fHwfblGMGvJ7ZZv6b3ZouBOAWkpR2ETdxnFwnbPcKOWEsXE r0AFlIGPHmnKmJlgxJ+B1cAZ/t5A3BCu -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:51 2025 by rpki-client