$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft File: 8eUBY6xQamLM-1qK9WURw48VBBQ.mft (raw, json) Hash identifier: VmFN8XYXwHNg9xpLES8WmGlyL7cNFb3ECv/F+FDH8Sg= Subject key identifier: 39:66:98:A2:62:F0:E3:2A:1D:1F:95:04:20:DC:0B:1E:36:D9:BD:89 Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 Certificate issuer: /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft Manifest number: 06 Signing time: Tue 03 Jun 2025 08:04:06 +0000 Manifest this update: Tue 03 Jun 2025 08:04:05 +0000 Manifest next update: Tue 10 Jun 2025 08:04:05 +0000 Files and hashes: 1: 8eUBY6xQamLM-1qK9WURw48VBBQ.crl (hash: 9KR7xhwDA7Dbm51JCnyJt1zYMlMx8tgrpdwNjdFYXPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414 Validity Not Before: Jun 3 08:04:05 2025 GMT Not After : Jun 10 08:04:05 2025 GMT Subject: CN=683eac76-2d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b2:87:3b:68:4b:2f:64:39:7e:6f:20:41:b0: 69:a8:22:e6:d4:96:6e:0e:62:c2:54:66:3e:0d:14: b0:2f:5c:d8:0e:a0:31:5e:54:7c:f0:08:4e:47:e9: b6:76:16:e6:e8:52:3c:f3:c6:0a:64:d2:13:65:1c: 01:1d:e0:eb:ab:eb:6c:d0:4c:22:46:4a:b2:6d:31: 54:53:8e:3f:61:be:41:6c:13:5f:8e:4d:0f:98:49: 56:02:de:80:b7:d2:3a:e0:3d:cd:c9:9a:cd:11:dc: c2:3f:e8:93:5b:fe:98:2f:e0:d7:5e:1e:9e:a9:a8: 7f:a4:33:bd:40:24:b2:da:0d:3b:1a:6c:08:05:65: d7:cf:a8:db:aa:cc:fc:18:23:d2:9e:36:b7:8c:2f: 45:c3:54:90:47:1e:50:3f:4a:5d:84:85:b2:d3:36: 0c:20:09:0b:1c:2b:0c:d5:9e:17:ef:31:39:5d:b0: b1:ea:1c:3a:09:18:13:3e:df:9d:91:50:b3:7c:33: 75:a1:85:af:ff:d6:62:ba:b4:af:1a:8b:9d:0c:c2: 8f:c2:c3:43:a8:da:61:48:1b:a1:dd:25:cc:7d:65: 1d:d7:0d:2a:61:44:93:98:5e:e1:00:86:0f:72:a7: 88:c6:13:89:bb:50:82:14:51:b8:06:e7:7c:35:62: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:66:98:A2:62:F0:E3:2A:1D:1F:95:04:20:DC:0B:1E:36:D9:BD:89 X509v3 Authority Key Identifier: keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:e7:d3:7c:22:d1:9c:9d:f4:ed:66:3d:ea:74:5d:e1:f5:e8: 3a:e0:4f:5a:ec:e6:e0:7e:6e:55:6c:95:b2:34:b6:b0:c4:40: 76:46:11:0b:07:0a:c0:e8:1e:d9:ec:d6:17:fa:ce:dd:f7:10: ec:79:ef:5f:7f:9d:d5:d3:de:e5:cd:2c:aa:f5:30:98:0e:cf: 06:2c:d9:cc:1b:cd:30:a0:70:a1:a8:7f:e3:9d:ef:54:1a:45: de:9d:eb:30:ab:b8:85:05:55:54:c9:8a:6f:2a:eb:90:e2:56: 5a:f3:f2:de:44:81:91:eb:e1:70:af:55:20:86:de:72:57:09: 17:82:5f:c8:ee:3d:a0:aa:de:a6:36:13:81:d2:67:7b:1b:80: 7b:d6:7d:72:33:28:24:36:18:7d:f8:20:ab:21:44:3c:e0:4f: d5:e6:7d:52:79:fb:07:b7:5c:b9:b2:50:5d:74:5c:ff:9a:81: 0d:c6:61:88:b6:e3:a9:19:25:6f:27:74:81:61:34:53:4e:5d: 5a:7f:eb:30:90:78:da:d6:7d:55:fd:d8:e5:3f:1c:55:86:46: ae:d0:67:e4:fa:50:11:d8:6e:a3:7e:2d:67:39:9c:1a:1c:19: 3d:5b:4b:e2:70:0c:e7:17:33:79:94:b2:83:aa:1f:5e:f3:7c: c3:f1:87:38 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoRjFFNTAxNjNBQzUwNkE2MkNDRkI1QThBRjU2NTExQzM4 RjE1MDQxNDAeFw0yNTA2MDMwODA0MDVaFw0yNTA2MTAwODA0MDVaMBgxFjAUBgNV BAMTDTY4M2VhYzc2LTJkOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJsoc7aEsvZDl+byBBsGmoIubUlm4OYsJUZj4NFLAvXNgOoDFeVHzwCE5H6bZ2 FuboUjzzxgpk0hNlHAEd4Our62zQTCJGSrJtMVRTjj9hvkFsE1+OTQ+YSVYC3oC3 0jrgPc3Jms0R3MI/6JNb/pgv4NdeHp6pqH+kM71AJLLaDTsabAgFZdfPqNuqzPwY I9KeNreML0XDVJBHHlA/Sl2EhbLTNgwgCQscKwzVnhfvMTldsLHqHDoJGBM+352R ULN8M3Whha//1mK6tK8ai50Mwo/Cw0Oo2mFIG6HdJcx9ZR3XDSphRJOYXuEAhg9y p4jGE4m7UIIUUbgG53w1Yn7tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOWaYomLw 4yodH5UEINwLHjbZvYkwHwYDVR0jBBgwFoAU8eUBY6xQamLM+1qK9WURw48VBBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0I2QkEwMTJDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOGVVQlk2eFFhbUxNLTFxSzlXVVJ3NDhWQkJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0I2QkEwMTJDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyLzhlVUJZNnhRYW1M TS0xcUs5V1VSdzQ4VkJCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO7n03wi0Zyd9O1mPep0XeH16DrgT1rs5uB+blVslbI0trDEQHZGEQsH CsDoHtns1hf6zt33EOx5719/ndXT3uXNLKr1MJgOzwYs2cwbzTCgcKGof+Od71Qa Rd6d6zCruIUFVVTJim8q65DiVlrz8t5EgZHr4XCvVSCG3nJXCReCX8juPaCq3qY2 E4HSZ3sbgHvWfXIzKCQ2GH34IKshRDzgT9XmfVJ5+we3XLmyUF10XP+agQ3GYYi2 46kZJW8ndIFhNFNOXVp/6zCQeNrWfVX92OU/HFWGRq7QZ+T6UBHYbqN+LWc5nBoc GT1bS+JwDOcXM3mUsoOqH17zfMPxhzg= -----END CERTIFICATE-----Generated at Wed Jun 4 00:21:09 2025 by rpki-client