$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: e667PAmgVIQRYaETBiS05wD9grW9PmZBp7rcXIIgJcc= Subject key identifier: CE:9F:1F:70:0B:26:92:16:42:E1:B4:25:48:7D:C8:F6:83:90:4A:88 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 119D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1191 Signing time: Sat 18 Oct 2025 17:45:05 +0000 Manifest this update: Sat 18 Oct 2025 17:45:04 +0000 Manifest next update: Sat 25 Oct 2025 17:45:04 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: Wjfkr0idLkNBiq5w5+F+wGYw+9GACryyG+2ZMV5/ZJ8=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4509 (0x119d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Oct 18 17:45:04 2025 GMT Not After : Oct 25 17:45:04 2025 GMT Subject: CN=68f3d220-2ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:a5:29:0a:25:bd:4f:a1:6b:b0:fc:e7:f7: 5c:1f:86:46:c8:1f:55:d7:03:61:b7:90:00:68:cb: fb:2f:75:43:d7:1a:83:ea:07:de:1e:3a:bb:1e:a5: 8b:8d:94:88:01:1e:35:53:d9:0e:51:2c:74:a1:0b: c2:8f:9d:d4:d0:28:16:e5:6d:62:09:e4:f5:d7:f8: b9:04:e7:6e:45:e0:cb:6f:ca:9e:e4:19:d5:b6:d3: 45:e8:3c:27:0c:82:e4:f7:12:77:12:02:14:f0:5a: 69:ea:e5:a2:74:85:2a:2e:28:c1:a2:44:17:26:10: 65:20:52:f3:bc:50:60:71:f0:9e:71:3f:63:bd:ef: 56:be:56:21:09:50:ca:16:71:6b:63:90:8e:9b:e7: aa:b9:e6:07:81:66:0f:8b:47:a0:b7:6e:f7:fd:02: 7a:cb:1d:97:e5:86:3b:ef:c8:36:5b:a5:29:36:f3: 1e:a7:d7:d1:7d:f3:39:75:07:0c:a3:92:d8:38:d7: df:95:8c:4c:55:b1:c5:25:c5:c3:ff:fc:c3:63:42: 43:96:f4:3d:b6:c5:95:80:66:7e:1c:ce:bf:b6:88: 6e:c6:7b:e6:4f:fe:e1:ec:88:e7:12:13:70:01:96: 68:66:15:a4:39:cd:47:f4:10:bf:90:83:bf:22:dc: 09:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9F:1F:70:0B:26:92:16:42:E1:B4:25:48:7D:C8:F6:83:90:4A:88 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ff:43:1a:ea:36:21:22:1a:08:5b:67:e9:18:92:cc:08:3c: 22:f5:8a:e1:6c:f7:69:d0:64:2f:f8:34:1b:26:f0:3c:8d:e8: 3b:15:5f:40:25:88:1a:1f:e9:1c:95:32:d9:21:06:35:7a:3a: 51:40:a3:8d:d4:94:5a:4f:f1:cd:86:67:cb:b0:b1:25:27:69: cf:e7:91:0e:a2:6b:9f:26:cd:f2:3d:70:61:74:29:13:89:8a: fa:41:ab:49:5d:0e:e4:82:8d:c3:37:3f:b9:aa:82:48:41:3e: 06:ef:7b:1f:3e:c0:11:45:6d:bc:65:f6:fe:41:a7:f3:b3:99: e0:48:07:03:5b:99:f3:46:54:be:6b:18:1b:51:8a:56:a1:e8: ff:af:b8:91:f6:ab:37:ca:9a:57:c5:2f:df:62:da:d8:6e:d7: 41:f1:0c:7b:3c:a2:1c:1b:c2:37:64:29:78:71:a8:86:a4:11: 92:01:ab:7d:c5:41:57:e5:1e:a1:4d:a5:c8:94:bc:af:d3:8d: 8e:af:d6:d8:b0:29:cd:40:fb:31:06:32:b4:7b:6e:53:c6:92: 4d:4f:7e:b4:fd:a4:e9:42:13:07:db:5a:f5:d8:6f:ef:4a:d5: 59:aa:95:17:1b:96:dd:38:a2:51:ad:56:2c:ee:6b:ad:17:f0: bd:53:12:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUxMDE4MTc0NTA0WhcNMjUxMDI1MTc0NTA0WjAYMRYwFAYD VQQDEw02OGYzZDIyMC0yYWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP6lKQolvU+ha7D85/dcH4ZGyB9V1wNht5AAaMv7L3VD1xqD6gfeHjq7HqWL jZSIAR41U9kOUSx0oQvCj53U0CgW5W1iCeT11/i5BOduReDLb8qe5BnVttNF6Dwn DILk9xJ3EgIU8Fpp6uWidIUqLijBokQXJhBlIFLzvFBgcfCecT9jve9WvlYhCVDK FnFrY5COm+equeYHgWYPi0egt273/QJ6yx2X5YY778g2W6UpNvMep9fRffM5dQcM o5LYONfflYxMVbHFJcXD//zDY0JDlvQ9tsWVgGZ+HM6/tohuxnvmT/7h7IjnEhNw AZZoZhWkOc1H9BC/kIO/ItwJ2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6fH3AL JpIWQuG0JUh9yPaDkEqIMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN/0Ma6jYhIhoIW2fpGJLMCDwi9YrhbPdp0GQv+DQbJvA8jeg7FV9A JYgaH+kclTLZIQY1ejpRQKON1JRaT/HNhmfLsLElJ2nP55EOomufJs3yPXBhdCkT iYr6QatJXQ7kgo3DNz+5qoJIQT4G73sfPsARRW28Zfb+Qafzs5ngSAcDW5nzRlS+ axgbUYpWoej/r7iR9qs3yppXxS/fYtrYbtdB8Qx7PKIcG8I3ZCl4caiGpBGSAat9 xUFX5R6hTaXIlLyv042Or9bYsCnNQPsxBjK0e25TxpJNT360/aTpQhMH21r12G/v StVZqpUXG5bdOKJRrVYs7mutF/C9UxJC -----END CERTIFICATE-----Generated at Mon Oct 20 08:53:57 2025 by rpki-client