$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: X6UMZ6Jt5Y2h8CvKABXxbHhlaQT2qm0n7nuWLIldAJU= Subject key identifier: D7:20:40:BF:19:CF:63:17:74:2B:08:74:D1:C2:33:A2:17:C5:6A:BF Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 0633 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 0985 Signing time: Fri 22 Aug 2025 22:57:49 +0000 Manifest this update: Fri 22 Aug 2025 22:57:48 +0000 Manifest next update: Fri 29 Aug 2025 22:57:48 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: FFugKkx03ZZUvEK2bWa6LDuhV2F5A/tsoGZmkTtxVu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1587 (0x633) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: Aug 22 22:57:48 2025 GMT Not After : Aug 29 22:57:48 2025 GMT Subject: CN=68a8f5ec-12ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:d9:98:f8:e7:56:ff:e3:23:b7:93:da:6e: 8c:57:04:c1:4d:87:70:d5:e5:06:66:cf:72:f6:ec: 5c:54:d8:48:26:8d:e5:cb:89:a3:00:ce:ad:3a:17: 84:45:75:a1:ee:da:5d:1b:d4:6c:8c:af:47:25:f4: 8b:d2:79:0f:b3:31:80:bd:35:16:e0:58:a8:8b:92: bb:c5:64:d4:7e:f8:be:2a:44:48:8e:48:ab:8e:7a: fd:33:31:bf:59:8d:98:b8:90:3e:75:89:47:88:c9: e2:b9:cf:90:06:e9:98:ad:da:78:36:8e:4c:11:21: 26:19:c3:b8:69:a5:fa:64:ee:15:cb:0c:f8:4e:21: 9a:d0:e9:e9:fd:0e:a7:ce:f5:3c:47:95:0a:b0:5c: 0b:4f:a8:27:78:7b:2d:32:e0:5f:d5:f7:62:9d:b6: af:44:c6:96:85:47:25:87:e5:92:c8:11:7e:3b:85: 23:42:de:3d:c7:43:c3:bf:93:19:a5:b5:6b:7f:f3: 3e:7d:a7:9c:e0:5f:1f:b8:8b:5b:96:e5:54:16:94: b2:6a:13:3b:74:65:a0:65:bb:54:15:14:7a:3b:cb: 61:39:c9:62:b6:bb:b9:e8:f3:70:27:a4:68:65:66: 0a:83:85:a5:7d:01:73:75:e7:a1:1e:76:ce:c2:f3: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:40:BF:19:CF:63:17:74:2B:08:74:D1:C2:33:A2:17:C5:6A:BF X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:3c:d4:12:03:c8:9a:37:21:a4:07:65:4d:de:6f:63:fe:15: 64:5d:b6:83:78:00:77:23:29:56:e0:32:5f:dd:50:fc:fd:d8: 6a:80:72:a7:34:42:e2:a7:58:f3:68:44:fc:e8:e3:7e:36:3d: e9:7d:6c:44:56:1a:cc:a9:7a:e6:1e:a9:41:ab:c8:79:36:7d: e0:d5:7c:06:18:2d:0a:4e:56:30:11:e2:3c:4f:1b:d7:ea:78: f6:d1:49:0b:29:fb:88:b5:74:5a:87:8c:7f:81:56:3f:37:f7: de:a8:35:2e:34:0c:d6:a1:fb:e3:1a:5b:c4:0a:97:d5:41:53: 16:d0:d3:ce:43:40:a3:53:40:7f:6d:9c:f1:6a:83:14:3d:ee: 38:bc:9a:6d:79:ce:77:d6:c7:ca:b7:7e:c2:b3:49:2e:0f:9b: 8c:92:e5:09:cf:0a:84:77:e7:4e:41:79:10:79:af:52:17:1b: f6:57:4f:ef:73:22:90:b9:5d:f9:95:6b:da:2e:82:47:23:78: db:87:ac:31:75:98:15:e8:36:74:f4:ed:4c:3d:d4:14:59:c0: 7b:f7:b0:5e:85:db:11:09:33:7b:8c:47:3e:a9:90:66:eb:c3: 38:46:c1:3c:7e:72:db:f5:17:dc:71:c8:8a:86:f5:d6:f6:0a: da:cd:51:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwODIyMjI1NzQ4WhcNMjUwODI5MjI1NzQ4WjAYMRYwFAYD VQQDEw02OGE4ZjVlYy0xMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3NbZmPjnVv/jI7eT2m6MVwTBTYdw1eUGZs9y9uxcVNhIJo3ly4mjAM6tOheE RXWh7tpdG9RsjK9HJfSL0nkPszGAvTUW4Fioi5K7xWTUfvi+KkRIjkirjnr9MzG/ WY2YuJA+dYlHiMniuc+QBumYrdp4No5MESEmGcO4aaX6ZO4Vywz4TiGa0Onp/Q6n zvU8R5UKsFwLT6gneHstMuBf1fdinbavRMaWhUclh+WSyBF+O4UjQt49x0PDv5MZ pbVrf/M+faec4F8fuItbluVUFpSyahM7dGWgZbtUFRR6O8thOclitru56PNwJ6Ro ZWYKg4WlfQFzdeehHnbOwvNK5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcgQL8Z z2MXdCsIdNHCM6IXxWq/MB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkPNQSA8iaNyGkB2VN3m9j/hVkXbaDeAB3IylW4DJf3VD8/dhqgHKn NELip1jzaET86ON+Nj3pfWxEVhrMqXrmHqlBq8h5Nn3g1XwGGC0KTlYwEeI8TxvX 6nj20UkLKfuItXRah4x/gVY/N/feqDUuNAzWofvjGlvECpfVQVMW0NPOQ0CjU0B/ bZzxaoMUPe44vJptec531sfKt37Cs0kuD5uMkuUJzwqEd+dOQXkQea9SFxv2V0/v cyKQuV35lWvaLoJHI3jbh6wxdZgV6DZ09O1MPdQUWcB797BehdsRCTN7jEc+qZBm 68M4RsE8fnLb9RfccciKhvXW9grazVEr -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:19 2025 by rpki-client