$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft File: 8ue_m6mnxEF7217_IXMMXshAJA0.mft (raw, json) Hash identifier: II6bGDpGh58ZlH5l3+jv00tdGy8d1y6oi8HVyMf6k00= Subject key identifier: 5F:6F:35:41:75:3A:89:A4:7A:16:22:46:B9:1E:95:22:33:3E:7B:22 Authority key identifier: F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D Certificate issuer: /CN=A914E6AA/serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft Manifest number: 08D9 Signing time: Fri 30 May 2025 23:07:32 +0000 Manifest this update: Fri 30 May 2025 23:07:32 +0000 Manifest next update: Fri 06 Jun 2025 23:07:32 +0000 Files and hashes: 1: 8ue_m6mnxEF7217_IXMMXshAJA0.crl (hash: 6MyArhJRySXNkoGSV5G1rYzv7NVIJEtIkbxN+IRQgyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=F2E7BF9BA9A7C4417BDB5EFF21730C5EC840240D Validity Not Before: May 30 23:07:32 2025 GMT Not After : Jun 6 23:07:32 2025 GMT Subject: CN=683a3a34-211a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:a8:86:f7:7d:f6:5a:a4:73:92:80:62:c4: b2:0d:65:60:f4:e5:02:1f:1d:5e:0a:be:ed:4c:d3: 5a:ed:76:5c:7e:dc:55:ab:69:bd:3f:6a:60:36:95: a5:53:18:2c:1f:41:04:63:dc:bc:4b:4e:dc:1a:06: 74:71:82:04:04:84:10:75:2f:02:94:f3:8c:78:b0: 3d:71:15:41:d6:4f:6a:3d:24:41:62:09:b8:f6:6e: 65:49:87:c5:b1:5a:4e:b1:df:02:a9:5f:30:a1:a6: 19:66:dd:3f:01:25:7d:d7:e3:36:2e:e8:9a:8f:8e: 3c:30:4a:04:2b:37:d3:0a:b4:43:a4:af:c7:9a:24: 2e:64:28:a0:51:5c:ac:ed:f8:9a:cb:c8:10:cd:d8: 43:22:3f:f1:a0:64:d5:c9:96:db:46:b8:f1:e5:3f: 17:31:19:57:f4:30:71:e8:a2:52:7d:a2:6e:47:cf: d0:2a:c9:1f:7e:56:1a:f0:82:ba:0a:23:e4:39:b6: 15:02:c2:7a:07:70:f4:84:a6:08:2c:6d:29:2d:75: df:33:fe:24:c6:ad:cd:05:aa:a2:b5:37:b6:dd:d5: 27:82:58:04:28:d6:92:09:0d:25:a4:36:e6:07:00: 24:42:38:31:9e:da:38:b5:83:d5:c2:57:5b:b9:c7: 2f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6F:35:41:75:3A:89:A4:7A:16:22:46:B9:1E:95:22:33:3E:7B:22 X509v3 Authority Key Identifier: keyid:F2:E7:BF:9B:A9:A7:C4:41:7B:DB:5E:FF:21:73:0C:5E:C8:40:24:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ue_m6mnxEF7217_IXMMXshAJA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/8ue_m6mnxEF7217_IXMMXshAJA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:67:a9:c2:b2:7e:bf:8e:63:ea:61:b1:41:3d:e6:82:92:ff: ce:da:bc:f0:fc:d0:a9:7c:ef:be:05:e7:f9:ff:49:5b:c0:b2: 6a:6f:43:60:3d:73:9e:ae:a1:65:f0:da:ea:dd:7b:67:b5:42: c4:88:63:e7:3a:21:88:02:d8:1e:f5:49:d8:8b:67:b6:d1:a7: 58:4d:68:30:15:e1:9d:c9:42:71:cf:c6:d3:85:16:c6:eb:76: 38:c6:70:4b:5b:d2:48:23:34:d1:5a:6b:23:63:cd:d9:8a:60: d0:42:e8:31:15:9a:73:a2:26:bb:91:f5:97:51:e2:0e:39:3f: 92:19:bb:7b:65:de:b4:01:bc:fc:6b:58:8f:99:d2:2e:ac:3a: 11:8f:6f:8a:a0:3b:7e:b1:ab:f3:e4:0a:e2:12:b9:03:c5:5c: 9c:17:8c:b9:d9:46:77:df:51:5f:ea:a8:6c:ef:2f:17:91:40: 6c:dc:97:f9:2d:10:a9:9d:66:49:e5:6d:25:37:36:dc:e5:b4: 19:bf:e9:8b:4a:b9:eb:fe:de:2d:38:05:a7:2b:b9:45:f4:35: ae:31:57:06:00:39:2d:00:02:3c:73:4c:87:b9:de:9a:e1:cc: b0:1e:ef:e8:f5:73:2e:e9:e8:0c:48:f0:18:d1:d0:8d:8e:b6: b5:ef:9e:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKEYyRTdCRjlCQTlBN0M0NDE3QkRCNUVGRjIxNzMwQzVF Qzg0MDI0MEQwHhcNMjUwNTMwMjMwNzMyWhcNMjUwNjA2MjMwNzMyWjAYMRYwFAYD VQQDEw02ODNhM2EzNC0yMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTGohvd99lqkc5KAYsSyDWVg9OUCHx1eCr7tTNNa7XZcftxVq2m9P2pgNpWl UxgsH0EEY9y8S07cGgZ0cYIEBIQQdS8ClPOMeLA9cRVB1k9qPSRBYgm49m5lSYfF sVpOsd8CqV8woaYZZt0/ASV91+M2Luiaj448MEoEKzfTCrRDpK/HmiQuZCigUVys 7fiay8gQzdhDIj/xoGTVyZbbRrjx5T8XMRlX9DBx6KJSfaJuR8/QKskfflYa8IK6 CiPkObYVAsJ6B3D0hKYILG0pLXXfM/4kxq3NBaqitTe23dUnglgEKNaSCQ0lpDbm BwAkQjgxnto4tYPVwldbuccvQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9vNUF1 OomkehYiRrkelSIzPnsiMB8GA1UdIwQYMBaAFPLnv5upp8RBe9te/yFzDF7IQCQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhFRjcyMTdfSVhNTVhzaEFK QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1ZV9tNm1ueEVGNzIxN19JWE1NWHNoQUpBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi84dWVfbTZtbnhF RjcyMTdfSVhNTVhzaEFKQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZ6nCsn6/jmPqYbFBPeaCkv/O2rzw/NCpfO++Bef5/0lbwLJqb0Ng PXOerqFl8Nrq3XtntULEiGPnOiGIAtge9UnYi2e20adYTWgwFeGdyUJxz8bThRbG 63Y4xnBLW9JIIzTRWmsjY83ZimDQQugxFZpzoia7kfWXUeIOOT+SGbt7Zd60Abz8 a1iPmdIurDoRj2+KoDt+savz5AriErkDxVycF4y52UZ331Ff6qhs7y8XkUBs3Jf5 LRCpnWZJ5W0lNzbc5bQZv+mLSrnr/t4tOAWnK7lF9DWuMVcGADktAAI8c0yHud6a 4cywHu/o9XMu6egMSPAY0dCNjra1757F -----END CERTIFICATE-----Generated at Sat May 31 17:09:00 2025 by rpki-client