$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json) Hash identifier: +uAg3nJDXEJ2i3EXiIS6fOxhomfDCSG7fFX8BgveHEU= Subject key identifier: F6:83:A7:CB:E4:3D:B1:86:F8:23:87:45:8E:DA:CE:70:B3:BD:C4:2F Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft Manifest number: 02DB Signing time: Sat 23 Aug 2025 01:34:52 +0000 Manifest this update: Sat 23 Aug 2025 01:34:51 +0000 Manifest next update: Sat 30 Aug 2025 01:34:51 +0000 Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: A8R7cjgtJhDmROgT7dOy+nT5vnvOrDaB3TqxPYI2x+Q=) 2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Validity Not Before: Aug 23 01:34:51 2025 GMT Not After : Aug 30 01:34:51 2025 GMT Subject: CN=68a91abb-bd40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:a5:3c:61:82:6f:aa:6f:3c:52:5d:d8:15: 8a:65:3a:c9:dc:1d:f6:57:57:62:20:8d:88:6c:12: 51:2a:56:3c:82:c4:aa:8a:2a:d4:d4:83:f9:a9:7b: 79:b9:90:ae:13:a8:ed:fa:f6:f4:0a:56:15:57:5f: 8a:1e:b4:47:73:ff:b7:89:b6:82:bc:f6:44:59:c8: a0:29:7d:ce:b9:7b:a0:57:a1:49:0d:c2:a9:fd:79: 4e:bc:bf:e9:8a:43:25:60:ce:82:ef:ce:e2:9c:14: be:c7:0c:f9:88:1d:00:97:68:74:2e:dc:d1:46:80: 08:c5:33:db:7f:c6:e6:81:91:cd:d6:df:65:bf:d9: 28:6a:37:fe:89:0c:1f:7c:70:dc:6f:58:75:44:c5: c8:29:8b:75:30:d5:a5:12:f3:b1:10:55:f7:e4:0d: cf:c1:b2:b3:68:0d:dd:ab:01:38:23:a4:99:23:44: d9:df:70:f6:60:2c:a6:ae:1b:2e:55:93:f6:11:60: 21:35:ee:ac:c1:07:50:66:f5:e5:c9:47:16:2e:72: b6:70:f6:ed:09:be:ff:fc:de:7f:13:4a:fa:d4:dc: ae:a2:e6:ca:ba:1c:71:d8:df:e0:9b:1e:47:95:40: 38:f9:ce:53:0c:95:b8:50:5c:9e:a9:65:ec:ec:08: 85:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:83:A7:CB:E4:3D:B1:86:F8:23:87:45:8E:DA:CE:70:B3:BD:C4:2F X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:40:86:60:f3:ac:98:19:25:e7:1c:48:24:47:9a:88:a2:20: 16:60:7b:d0:80:64:4f:f2:aa:74:cc:4e:42:98:97:75:2a:9d: 1c:f1:e6:da:44:97:94:82:92:8e:b9:43:bf:35:9f:cb:82:f2: 47:d4:b4:8f:70:44:87:1e:39:37:9e:64:ea:3e:2b:59:3d:29: 49:1a:9d:8e:9a:71:a9:8c:e1:f7:d6:3b:6f:1d:e1:2b:b8:94: fe:97:3b:09:56:ef:f2:e5:8e:92:37:16:24:37:25:96:33:da: c2:cf:b7:49:fd:5c:d2:9b:88:bb:cc:37:f1:0c:0c:9f:d3:ec: 94:3f:61:3b:7f:cf:c3:44:94:b2:b4:68:df:66:62:07:43:13: fe:45:1a:a8:6b:53:88:67:31:0f:6f:12:fd:1a:fa:01:f7:66: b1:1d:30:4b:3f:14:24:3f:1c:66:86:be:04:c4:b8:4d:45:12: cb:dc:05:1d:0b:f7:83:ed:36:28:28:bc:56:a4:87:46:de:b5: 52:eb:3e:fb:ec:52:bd:73:8c:6b:40:8b:90:e6:0f:a8:9d:71: ac:16:e2:6b:a9:31:6e:48:85:07:35:e4:83:2f:99:28:38:e5: b2:c6:5e:fd:f5:54:57:ac:45:ad:8b:bf:67:08:13:e0:e2:47: 59:7d:85:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwODIzMDEzNDUxWhcNMjUwODMwMDEzNDUxWjAYMRYwFAYD VQQDEw02OGE5MWFiYi1iZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwelPGGCb6pvPFJd2BWKZTrJ3B32V1diII2IbBJRKlY8gsSqiirU1IP5qXt5 uZCuE6jt+vb0ClYVV1+KHrRHc/+3ibaCvPZEWcigKX3OuXugV6FJDcKp/XlOvL/p ikMlYM6C787inBS+xwz5iB0Al2h0LtzRRoAIxTPbf8bmgZHN1t9lv9koajf+iQwf fHDcb1h1RMXIKYt1MNWlEvOxEFX35A3PwbKzaA3dqwE4I6SZI0TZ33D2YCymrhsu VZP2EWAhNe6swQdQZvXlyUcWLnK2cPbtCb7//N5/E0r61NyuoubKuhxx2N/gmx5H lUA4+c5TDJW4UFyeqWXs7AiFvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPaDp8vk PbGG+COHRY7aznCzvcQvMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhQIZg86yYGSXnHEgkR5qIoiAWYHvQgGRP8qp0zE5CmJd1Kp0c8eba RJeUgpKOuUO/NZ/LgvJH1LSPcESHHjk3nmTqPitZPSlJGp2OmnGpjOH31jtvHeEr uJT+lzsJVu/y5Y6SNxYkNyWWM9rCz7dJ/VzSm4i7zDfxDAyf0+yUP2E7f8/DRJSy tGjfZmIHQxP+RRqoa1OIZzEPbxL9GvoB92axHTBLPxQkPxxmhr4ExLhNRRLL3AUd C/eD7TYoKLxWpIdG3rVS6z777FK9c4xrQIuQ5g+onXGsFuJrqTFuSIUHNeSDL5ko OOWyxl799VRXrEWti79nCBPg4kdZfYW6 -----END CERTIFICATE-----Generated at Sun Aug 24 09:04:46 2025 by rpki-client