$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: 5tCj1axHItcXhOmjYP7D96VsFPkdWkSs75Zj5W5KmH0= Subject key identifier: 38:E9:C9:AB:43:CC:F1:CF:C9:F1:95:89:76:34:48:D3:48:5F:82:6C Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 38 Signing time: Fri 05 Sep 2025 08:06:15 +0000 Manifest this update: Fri 05 Sep 2025 08:06:15 +0000 Manifest next update: Fri 12 Sep 2025 08:06:15 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: bNTJDzZw27cuTT8/WbJX1hxxUf8J6L1UKVjyyUBO2MA=) 2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=) 3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Sep 5 08:06:15 2025 GMT Not After : Sep 12 08:06:15 2025 GMT Subject: CN=68ba99f7-123d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6f:04:31:ba:6e:69:ce:a4:f3:ee:93:07:c3: 1a:8d:36:fa:1f:a1:60:a8:cc:31:79:e0:47:8f:8c: 86:9b:a5:c3:a0:d8:0c:3a:4c:fe:41:f5:99:c5:a3: d4:9c:73:87:ee:55:5a:de:9c:08:09:3f:44:71:a0: 73:23:07:3d:cc:8c:8f:38:a5:02:43:b7:0e:45:95: b2:18:e8:f2:93:88:21:de:d4:ab:c1:78:3f:9a:46: 7d:28:d9:0b:18:02:f1:20:55:20:fb:38:7d:43:58: cb:e0:60:db:c2:5f:df:0b:b2:54:ae:51:d0:dd:e7: b0:fe:b2:e6:f4:57:27:c7:b6:31:07:32:06:5a:ff: c2:ff:49:21:35:04:de:8e:5d:0d:6d:62:3c:58:65: 08:bf:3d:26:64:24:0c:c0:4a:5b:6a:61:36:de:18: 55:80:28:03:67:f5:f2:a9:b4:bb:ea:6c:ae:56:79: ed:bb:48:07:df:4c:8b:d8:54:4e:a4:02:6e:67:83: fc:cb:c3:dc:f0:4a:0e:a8:e9:74:79:6b:b8:e2:80: 39:cc:b4:99:3e:b2:82:3f:ec:67:18:5d:e1:75:51: 67:f5:bc:7d:38:72:de:65:7f:2b:e0:42:08:0e:03: 00:02:5f:8f:5d:fe:f3:7b:81:95:83:56:ad:03:f5: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E9:C9:AB:43:CC:F1:CF:C9:F1:95:89:76:34:48:D3:48:5F:82:6C X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:69:d9:50:f4:8d:f0:6c:50:bc:f2:01:c6:bb:30:42:3f:a1: 15:e7:a1:7a:7c:87:4a:28:e1:50:2f:c9:14:d4:da:53:eb:a2: 76:e3:a2:19:30:0c:bd:fe:cf:3e:4d:03:ca:96:4f:9e:2a:d1: b4:6c:d5:1a:fc:96:d5:5e:8e:74:65:20:9c:a2:87:1e:06:1e: 8f:6d:67:d6:ac:eb:9f:58:ce:c4:3c:82:2e:71:28:5d:9f:84: 28:3c:9d:bb:2f:d3:e8:91:2b:93:cc:bf:43:bd:76:9c:2f:f4: db:51:0f:23:51:99:ad:85:16:32:65:fc:f5:60:27:f5:50:7d: 5f:fe:fc:2e:81:4c:cf:a7:b9:cd:3e:f8:73:e1:9b:cc:2b:6c: 44:0a:9f:db:7a:69:74:54:b5:ae:af:9a:40:50:26:a8:da:7e: e9:73:43:ec:75:27:51:16:d6:37:6b:c0:b7:ea:cc:b4:03:f3: 3a:47:30:65:c6:13:ca:d5:5f:b5:d6:54:e7:9e:fa:5d:fe:93: 33:c4:6d:0c:e1:e4:f7:93:94:ec:9a:63:04:5b:11:d5:56:36: 49:2a:7b:49:a2:e9:35:60:52:d3:88:70:6c:29:c6:b2:dc:14: 9e:40:92:ed:c0:a4:3b:e2:e5:9b:f8:c1:e8:c4:78:37:b7:7a: df:91:f1:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTA5MDUwODA2MTVaFw0yNTA5MTIwODA2MTVaMBgxFjAUBgNV BAMTDTY4YmE5OWY3LTEyM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDpbwQxum5pzqTz7pMHwxqNNvofoWCozDF54EePjIabpcOg2Aw6TP5B9ZnFo9Sc c4fuVVrenAgJP0RxoHMjBz3MjI84pQJDtw5FlbIY6PKTiCHe1KvBeD+aRn0o2QsY AvEgVSD7OH1DWMvgYNvCX98LslSuUdDd57D+sub0VyfHtjEHMgZa/8L/SSE1BN6O XQ1tYjxYZQi/PSZkJAzASltqYTbeGFWAKANn9fKptLvqbK5Wee27SAffTIvYVE6k Am5ng/zLw9zwSg6o6XR5a7jigDnMtJk+soI/7GcYXeF1UWf1vH04ct5lfyvgQggO AwACX49d/vN7gZWDVq0D9VbTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOOnJq0PM 8c/J8ZWJdjRI00hfgmwwHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdp2VD0jfBsULzyAca7MEI/oRXnoXp8h0oo4VAvyRTU2lPronbjohkw DL3+zz5NA8qWT54q0bRs1Rr8ltVejnRlIJyihx4GHo9tZ9as659YzsQ8gi5xKF2f hCg8nbsv0+iRK5PMv0O9dpwv9NtRDyNRma2FFjJl/PVgJ/VQfV/+/C6BTM+nuc0+ +HPhm8wrbEQKn9t6aXRUta6vmkBQJqjafulzQ+x1J1EW1jdrwLfqzLQD8zpHMGXG E8rVX7XWVOee+l3+kzPEbQzh5PeTlOyaYwRbEdVWNkkqe0mi6TVgUtOIcGwpxrLc FJ5Aku3ApDvi5Zv4wejEeDe3et+R8W0= -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:12 2025 by rpki-client