$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json) Hash identifier: DKR2z5FBhsfdnU8BAtsH5pd+PTzuBGRLI+jz+5nZuw0= Subject key identifier: 28:B4:F6:4E:C6:36:56:08:9E:F5:46:8B:8E:91:0C:56:E8:9E:36:69 Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft Manifest number: 02C1 Signing time: Thu 03 Jul 2025 01:48:13 +0000 Manifest this update: Thu 03 Jul 2025 01:48:13 +0000 Manifest next update: Thu 10 Jul 2025 01:48:13 +0000 Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: PMo/rsqcjuBW7mZOV/1GPgyltdq+WQHP5Fc7GUY8ewU=) 2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Validity Not Before: Jul 3 01:48:13 2025 GMT Not After : Jul 10 01:48:13 2025 GMT Subject: CN=6865e15d-366c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:99:c1:2d:db:bf:3e:74:2c:c2:b9:6a:f0:9a: 0a:71:9a:b0:e9:d7:ae:bd:40:ab:b7:8b:e0:4c:15: ca:41:eb:1a:4e:44:f2:50:97:6e:00:23:3e:a0:c2: 66:28:d3:97:c4:7c:67:b3:9f:48:61:72:ac:d8:da: 29:c2:c2:df:51:96:d0:80:8d:29:59:e4:91:12:55: dd:d8:c6:50:05:6e:79:e3:1e:a9:3b:70:02:8c:a1: 6a:3e:a6:05:14:2d:5a:f3:ac:13:e6:18:5f:25:29: 6d:25:50:bc:3d:e6:9c:8e:19:44:0f:f5:57:cf:b8: 53:85:a1:81:cb:94:2b:fd:ff:d3:ca:89:13:56:35: 62:1e:19:d7:01:08:77:2d:2b:bb:ba:a9:bf:0b:c8: 65:98:2a:83:3a:3d:b4:1d:8c:d4:11:75:3e:ba:96: c2:5f:b0:c6:28:e5:84:56:e9:ef:a3:a7:c1:2f:51: 4c:6e:3f:df:2e:2b:f4:34:ce:b8:28:d2:16:b9:58: 74:c9:b4:2f:1d:dd:fb:9e:27:58:d6:5a:76:a3:53: 0e:03:25:bf:22:19:76:90:81:2d:f3:5c:0a:71:b2: 90:35:70:32:1f:3e:e5:ce:dc:9a:1e:63:49:02:f7: 18:d6:8d:7c:93:90:24:6f:07:b4:9b:42:36:f8:5d: 86:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:F6:4E:C6:36:56:08:9E:F5:46:8B:8E:91:0C:56:E8:9E:36:69 X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:2a:87:4a:f6:50:f6:77:ea:92:10:d5:1d:87:63:68:32:23: 09:45:33:49:92:ed:d7:19:73:99:bc:be:1e:39:ba:3e:f4:c2: c5:37:e0:a0:22:4b:27:54:57:d4:c6:95:e1:2b:27:4e:71:3e: 69:cf:f1:60:4b:52:a9:7b:a5:26:d4:83:a9:e0:17:fc:5c:82: 95:0b:e0:70:da:63:d8:78:11:60:d5:ef:68:1c:e2:89:59:ff: 33:28:89:3b:32:74:6e:50:d3:a9:09:df:d8:3f:5c:41:a4:37: 6d:9d:cc:b0:9f:cb:a0:ff:0e:00:f9:71:68:4c:7e:a7:34:fa: 95:4e:8f:36:6a:f7:11:1c:00:35:1a:2b:54:85:bc:93:0a:d6: cc:30:0e:53:36:f8:64:b8:02:b0:26:fb:87:68:fe:2b:5c:9e: 5b:e6:7f:72:1f:a3:f8:23:a8:18:35:25:6c:c8:5b:90:5e:d5: cf:fb:f2:e9:d8:73:36:c7:5a:2c:27:9f:f9:c1:b7:48:94:8c: 8d:e7:7a:a7:de:74:d6:e6:a1:f7:3b:f4:06:27:28:b5:7c:56: cd:92:76:60:a8:ef:f8:92:53:d9:63:db:38:32:41:56:19:00: 36:55:1e:12:19:59:ab:24:e4:f0:e6:09:d9:99:eb:2f:87:1c: 14:79:30:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwNzAzMDE0ODEzWhcNMjUwNzEwMDE0ODEzWjAYMRYwFAYD VQQDEw02ODY1ZTE1ZC0zNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZnBLdu/PnQswrlq8JoKcZqw6deuvUCrt4vgTBXKQesaTkTyUJduACM+oMJm KNOXxHxns59IYXKs2NopwsLfUZbQgI0pWeSRElXd2MZQBW554x6pO3ACjKFqPqYF FC1a86wT5hhfJSltJVC8PeacjhlED/VXz7hThaGBy5Qr/f/TyokTVjViHhnXAQh3 LSu7uqm/C8hlmCqDOj20HYzUEXU+upbCX7DGKOWEVunvo6fBL1FMbj/fLiv0NM64 KNIWuVh0ybQvHd37nidY1lp2o1MOAyW/Ihl2kIEt81wKcbKQNXAyHz7lztyaHmNJ AvcY1o18k5Akbwe0m0I2+F2GFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi09k7G NlYInvVGi46RDFbonjZpMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwKodK9lD2d+qSENUdh2NoMiMJRTNJku3XGXOZvL4eObo+9MLFN+Cg IksnVFfUxpXhKydOcT5pz/FgS1Kpe6Um1IOp4Bf8XIKVC+Bw2mPYeBFg1e9oHOKJ Wf8zKIk7MnRuUNOpCd/YP1xBpDdtncywn8ug/w4A+XFoTH6nNPqVTo82avcRHAA1 GitUhbyTCtbMMA5TNvhkuAKwJvuHaP4rXJ5b5n9yH6P4I6gYNSVsyFuQXtXP+/Lp 2HM2x1osJ5/5wbdIlIyN53qn3nTW5qH3O/QGJyi1fFbNknZgqO/4klPZY9s4MkFW GQA2VR4SGVmrJOTw5gnZmesvhxwUeTDb -----END CERTIFICATE-----Generated at Thu Jul 3 06:11:54 2025 by rpki-client