$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json) Hash identifier: pm2CSWv1ly8gS22uxFjiR9hJmojAvQpgdLNTF1FzWVU= Subject key identifier: 84:BF:5C:EF:BC:8A:FF:14:E5:3C:7B:C6:2D:96:1F:1B:CC:8E:63:CD Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft Manifest number: 02A9 Signing time: Thu 15 May 2025 01:29:56 +0000 Manifest this update: Thu 15 May 2025 01:29:56 +0000 Manifest next update: Thu 22 May 2025 01:29:56 +0000 Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: 9XBpaNbQHZc1cwRpcbge6pkQxw26Tpax9VTuGNbGKxg=) 2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Validity Not Before: May 15 01:29:56 2025 GMT Not After : May 22 01:29:56 2025 GMT Subject: CN=68254394-5f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:fe:f5:d7:01:11:b7:ea:ae:ef:98:6d:51: 45:e9:52:09:3b:00:5b:15:52:93:08:23:af:7f:c5: 02:6b:ff:34:f8:4f:6b:aa:70:21:a3:5b:f5:38:e8: d5:ee:1c:36:be:d6:3c:45:85:99:6b:e9:fd:69:31: f6:47:7a:d2:6d:90:ea:48:4a:78:f4:ec:49:e6:17: 2c:9c:8f:43:81:b4:8b:54:8d:3e:0a:a9:dd:7b:0e: 17:03:ae:95:ed:81:0a:2a:1f:33:f5:8a:41:dd:b5: 82:9f:41:9a:8a:12:1c:71:d0:1b:51:02:f1:73:89: e7:c4:a6:15:75:72:d2:65:f4:41:8b:37:07:a7:d9: 67:8b:98:3b:76:5f:23:35:97:b0:95:e8:a3:f9:67: 96:44:c7:c7:1e:a2:49:93:47:af:67:b4:0e:2f:1b: 38:65:7c:bd:1a:d6:84:aa:b6:17:92:94:74:09:77: 3f:75:95:63:4d:4b:15:1f:62:25:11:3a:b7:1b:f5: 02:8e:89:27:ad:0b:e2:d8:91:90:ca:23:51:d8:9e: 8d:7f:26:7e:23:37:b8:2a:65:33:6e:04:c2:d3:13: f0:c9:92:c2:ad:96:92:50:90:76:4f:7a:b1:b8:0e: 9b:80:5d:c0:48:f0:f0:af:53:2b:81:87:3b:23:a6: ea:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:5C:EF:BC:8A:FF:14:E5:3C:7B:C6:2D:96:1F:1B:CC:8E:63:CD X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c5:08:79:3a:d0:37:a2:06:75:14:cc:d9:ca:8f:40:ac:d0: 9a:2e:9f:cc:90:53:92:78:93:bb:2b:35:88:d7:57:de:2b:ad: 2a:d1:ef:4c:c6:c8:63:ef:aa:1d:ee:23:3e:ff:75:5b:c1:91: 79:1b:f7:4b:dd:7d:5e:78:6d:89:81:c6:43:b8:ff:1a:f5:80: cb:28:16:19:08:4e:7f:18:a6:02:bb:5c:e2:0a:fe:0a:d2:30: fd:80:14:47:ab:4c:f5:1e:5f:f9:9e:ec:fe:4d:36:2c:f1:f4: bc:15:03:ac:66:35:eb:27:d9:34:82:c8:ac:c6:a4:98:ae:56: 83:c7:62:1b:1e:6b:17:05:73:91:37:19:c5:a1:65:7a:a0:a6: 80:23:c2:5e:ac:37:f8:33:88:a6:7b:71:2d:9c:31:e4:08:0e: 5d:a3:f9:31:80:17:56:d3:6e:11:ac:ce:a8:22:de:f8:76:5d: 84:b8:d8:41:c8:03:3e:aa:46:91:df:2a:94:56:29:1a:af:d3: cf:00:e6:42:a6:04:3b:32:19:68:95:20:8d:ff:ff:47:27:ec: f2:27:19:5b:eb:d2:6f:29:ea:22:da:5c:13:07:9b:23:92:bf: 10:1b:98:ef:34:ea:95:8e:3c:f0:1c:04:6c:63:df:eb:b3:8d: 07:81:aa:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwNTE1MDEyOTU2WhcNMjUwNTIyMDEyOTU2WjAYMRYwFAYD VQQDEw02ODI1NDM5NC01ZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwD+9dcBEbfqru+YbVFF6VIJOwBbFVKTCCOvf8UCa/80+E9rqnAho1v1OOjV 7hw2vtY8RYWZa+n9aTH2R3rSbZDqSEp49OxJ5hcsnI9DgbSLVI0+Cqndew4XA66V 7YEKKh8z9YpB3bWCn0GaihIccdAbUQLxc4nnxKYVdXLSZfRBizcHp9lni5g7dl8j NZewleij+WeWRMfHHqJJk0evZ7QOLxs4ZXy9GtaEqrYXkpR0CXc/dZVjTUsVH2Il ETq3G/UCjoknrQvi2JGQyiNR2J6NfyZ+Ize4KmUzbgTC0xPwyZLCrZaSUJB2T3qx uA6bgF3ASPDwr1MrgYc7I6bqiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIS/XO+8 iv8U5Tx7xi2WHxvMjmPNMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYxQh5OtA3ogZ1FMzZyo9ArNCaLp/MkFOSeJO7KzWI11feK60q0e9M xshj76od7iM+/3VbwZF5G/dL3X1eeG2JgcZDuP8a9YDLKBYZCE5/GKYCu1ziCv4K 0jD9gBRHq0z1Hl/5nuz+TTYs8fS8FQOsZjXrJ9k0gsisxqSYrlaDx2IbHmsXBXOR NxnFoWV6oKaAI8JerDf4M4ime3EtnDHkCA5do/kxgBdW024RrM6oIt74dl2EuNhB yAM+qkaR3yqUVikar9PPAOZCpgQ7MhlolSCN//9HJ+zyJxlb69JvKeoi2lwTB5sj kr8QG5jvNOqVjjzwHARsY9/rs40Hgaox -----END CERTIFICATE-----Generated at Thu May 15 23:12:43 2025 by rpki-client