$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: FcLh+ucfHpdMKNGahkmy+ozo4+xzD/hsOTQ093+K+sU= Subject key identifier: 04:35:F0:A9:3C:C9:0E:9A:B3:9D:4E:A2:69:DF:A7:E1:76:7B:05:45 Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 1F Signing time: Sat 19 Jul 2025 08:10:24 +0000 Manifest this update: Sat 19 Jul 2025 08:10:24 +0000 Manifest next update: Sat 26 Jul 2025 08:10:24 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: WLuhN6VSa0IhZj/SAMoWZxqqHq+qyyrSx1c+DJ4yyPg=) 2: 2EA48F06569A11F0A878F309C4F9AE02.roa (hash: ltjHOrlAjkCkglGzdBBO2Uhk0ROczxbCjOMO75HWhtA=) 3: CE88C72C569911F08E21CF87C4F9AE02.roa (hash: P3ICOOzdYod03YP+DW4znK40K0YlnGffnVKfr18TLD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Jul 19 08:10:24 2025 GMT Not After : Jul 26 08:10:24 2025 GMT Subject: CN=687b52f0-bcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:b0:20:2f:c5:06:01:20:8b:c0:2f:6e:4e: 90:9b:e3:b7:0d:01:a1:c7:ae:cc:c2:6b:a9:28:1f: 2b:60:cf:5c:d0:61:58:90:84:6e:c0:91:cf:b6:61: 0a:b0:ba:a6:b6:51:9f:d5:55:34:bc:e9:18:c4:6d: 54:f6:df:9e:04:9f:15:4e:15:76:41:fd:0f:93:f5: 77:fc:dd:8a:bd:95:f1:eb:71:ce:b3:2b:bd:0f:e3: 96:93:d0:c2:ba:23:57:8c:4e:bc:bf:4f:56:95:95: d1:0e:d8:b8:bf:6a:e0:59:80:fa:e8:0e:0e:70:d9: 1e:13:49:ac:f2:80:9e:56:8f:4c:ae:c0:e6:68:3f: af:12:50:5a:5b:5a:dc:47:79:0a:fb:e4:31:5e:b5: 65:a2:77:56:06:3e:75:55:cf:59:e6:eb:7d:09:0a: 5c:48:cd:5a:67:4b:4e:76:95:5a:cf:19:f8:6c:ff: 0b:a2:23:f6:6d:b1:b8:72:a7:2d:8d:49:c0:eb:0a: 6e:b3:c0:ce:df:1b:1b:37:f3:d5:7f:ee:56:62:64: c8:8d:04:f6:50:93:c7:ce:9a:61:ad:55:61:37:6b: 48:a4:fe:44:ab:64:91:de:a4:8c:63:f0:38:26:17: 18:4a:56:98:ba:2c:b7:33:71:b6:1e:66:a1:37:98: 5f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:F0:A9:3C:C9:0E:9A:B3:9D:4E:A2:69:DF:A7:E1:76:7B:05:45 X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:7c:4f:1e:bd:55:3e:b4:34:0c:1a:88:15:d1:92:d6:1c:9f: ac:01:84:a6:27:e6:3a:01:a6:e7:c2:50:1e:08:cb:af:dd:ea: 14:53:76:3d:bd:14:d4:fb:f6:ef:a3:fe:52:99:46:54:79:a0: eb:35:34:ae:63:01:a4:7e:ab:cd:63:bb:a1:02:93:09:23:8c: c4:23:2a:02:cf:6a:77:e9:49:69:09:d9:d0:6b:14:f4:c7:9a: f2:19:21:29:28:02:f4:c4:47:eb:24:fd:c0:7f:c5:9b:dd:f2: 71:cb:ec:eb:98:91:a5:88:6d:6f:28:2c:cb:13:c3:50:cf:a9: 13:33:1a:18:b8:92:e9:71:27:54:fe:a7:e5:8a:d4:1e:0f:b9: c4:42:bd:ee:f5:3d:1b:46:a0:ae:be:9d:76:72:bf:eb:65:e3: 2d:11:03:90:9e:e1:b1:a9:88:3f:e6:0c:cc:8f:1b:ae:2f:16: 01:37:40:8c:ce:52:dc:8d:c3:dc:1d:07:a1:cd:4d:cb:43:70: 82:0e:f4:a2:f4:48:9e:c2:fc:9f:e2:be:c8:be:5c:0d:ec:e6: 06:5e:a2:ce:eb:b6:9d:8e:b7:23:fa:d2:1b:b8:c1:6a:1b:fd: 65:24:d0:90:e9:d7:2b:4f:a7:53:0a:b0:37:83:0f:3c:9b:f7: 1b:01:b4:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTA3MTkwODEwMjRaFw0yNTA3MjYwODEwMjRaMBgxFjAUBgNV BAMTDTY4N2I1MmYwLWJjYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDio7AgL8UGASCLwC9uTpCb47cNAaHHrszCa6koHytgz1zQYViQhG7Akc+2YQqw uqa2UZ/VVTS86RjEbVT2354EnxVOFXZB/Q+T9Xf83Yq9lfHrcc6zK70P45aT0MK6 I1eMTry/T1aVldEO2Li/auBZgProDg5w2R4TSazygJ5Wj0yuwOZoP68SUFpbWtxH eQr75DFetWWid1YGPnVVz1nm630JClxIzVpnS052lVrPGfhs/wuiI/Ztsbhypy2N ScDrCm6zwM7fGxs389V/7lZiZMiNBPZQk8fOmmGtVWE3a0ik/kSrZJHepIxj8Dgm FxhKVpi6LLczcbYeZqE3mF+hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBDXwqTzJ DpqznU6iad+n4XZ7BUUwHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMp8Tx69VT60NAwaiBXRktYcn6wBhKYn5joBpufCUB4Iy6/d6hRTdj29 FNT79u+j/lKZRlR5oOs1NK5jAaR+q81ju6ECkwkjjMQjKgLPanfpSWkJ2dBrFPTH mvIZISkoAvTER+sk/cB/xZvd8nHL7OuYkaWIbW8oLMsTw1DPqRMzGhi4kulxJ1T+ p+WK1B4PucRCve71PRtGoK6+nXZyv+tl4y0RA5Ce4bGpiD/mDMyPG64vFgE3QIzO UtyNw9wdB6HNTctDcIIO9KL0SJ7C/J/ivsi+XA3s5gZeos7rtp2OtyP60hu4wWob /WUk0JDp1ytPp1MKsDeDDzyb9xsBtP8= -----END CERTIFICATE-----Generated at Mon Jul 21 03:26:29 2025 by rpki-client