$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: NaNERr83xjpIkaKoXVORCzsuiFA5+fQPzl/+IBrIBSA= Subject key identifier: E9:2C:90:3B:C8:00:16:78:8E:AF:32:2C:D0:20:E7:B0:FB:A8:5F:22 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 115A Signing time: Wed 02 Jul 2025 17:26:33 +0000 Manifest this update: Wed 02 Jul 2025 17:26:33 +0000 Manifest next update: Wed 09 Jul 2025 17:26:33 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: RT0x2G+b2otVqy9+rlzy5JrypX8ydBQfMU7CSNKRwIo=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4454 (0x1166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Jul 2 17:26:33 2025 GMT Not After : Jul 9 17:26:33 2025 GMT Subject: CN=68656bc9-fb2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:f8:7b:c8:f3:19:88:fa:2f:fb:3e:01:eb: 67:9f:92:06:6e:7e:28:e2:50:4d:0d:7b:5e:82:67: b8:db:93:6f:59:74:a2:c1:f1:08:d5:24:62:f4:21: d3:33:de:c6:83:0f:01:ad:fd:ff:41:37:5d:92:58: b2:1e:be:06:95:cb:9d:58:c1:32:5b:15:5c:e2:0e: 6c:fc:e9:28:f6:a0:6f:86:3e:6c:a8:bf:d2:d0:69: 37:33:22:49:90:f1:9f:56:3f:90:05:d2:48:b3:e7: 68:c4:72:04:4f:45:3c:e6:e1:58:ae:15:1f:19:a8: 4d:07:3b:36:14:4c:9a:47:bf:17:ee:be:8d:f0:f1: 3d:ec:b1:6b:3a:ca:fe:32:1d:cd:76:4a:cf:b4:70: f4:8f:76:95:94:4d:9c:75:78:47:37:c1:95:a0:e6: 3d:14:a2:d8:23:5e:fc:9c:10:4f:0f:d9:13:5e:f8: 76:ae:c1:31:b4:d7:0f:86:29:b6:59:fb:0e:92:15: 08:81:34:1f:3e:28:df:6f:aa:29:e0:52:a6:7f:31: 7d:1b:85:aa:53:41:8c:8f:ac:7a:47:b5:51:92:ef: 49:cc:d9:98:30:8c:b8:6b:d0:e4:6c:ec:d2:5b:47: 9d:66:07:42:20:00:35:40:f2:ac:84:8a:28:fc:70: 3f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:90:3B:C8:00:16:78:8E:AF:32:2C:D0:20:E7:B0:FB:A8:5F:22 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:99:b6:d4:aa:16:d8:87:67:fc:f5:91:7f:02:43:99:c5:0e: aa:92:57:bd:00:14:5c:aa:b0:29:cb:7c:ac:97:ff:60:e9:37: 35:b1:d9:11:63:40:d3:cd:cf:4d:61:b5:84:cb:95:54:df:82: 96:4c:6e:8e:57:a0:eb:ba:9b:f5:31:db:d5:05:41:6b:fb:16: ca:03:f2:21:18:d4:8c:ed:44:eb:f9:17:fd:3f:d4:36:98:9b: 19:63:c6:03:c5:11:7e:b3:78:b7:f8:35:f9:59:02:b7:f1:b3: 39:6f:70:85:27:76:b2:ff:e7:1b:e7:85:d1:8d:0f:55:38:1a: 9a:e9:70:2d:4a:ae:26:4e:f0:56:21:47:71:a9:ad:50:1f:93: 67:4c:34:1a:ed:4d:0e:f2:38:b0:33:01:10:a2:9a:be:8b:6e: c7:92:a0:1d:ff:9f:59:eb:ed:35:cd:cf:7c:e3:7e:09:c8:57: b7:78:ff:4b:bb:a6:a5:d2:9a:ad:39:1e:d3:0c:8c:46:8a:96: 69:89:bd:70:cf:e6:f9:f6:86:ee:56:fd:9a:dc:db:47:30:b9: 73:a5:c2:f7:ad:9e:b7:dd:69:04:dd:a4:27:c1:28:ef:bb:86: 07:da:6d:e2:27:35:28:90:b4:4d:57:94:25:52:16:82:c7:ee: 6c:bc:75:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNzAyMTcyNjMzWhcNMjUwNzA5MTcyNjMzWjAYMRYwFAYD VQQDEw02ODY1NmJjOS1mYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgH4e8jzGYj6L/s+Aetnn5IGbn4o4lBNDXtegme425NvWXSiwfEI1SRi9CHT M97Ggw8Brf3/QTddkliyHr4GlcudWMEyWxVc4g5s/Oko9qBvhj5sqL/S0Gk3MyJJ kPGfVj+QBdJIs+doxHIET0U85uFYrhUfGahNBzs2FEyaR78X7r6N8PE97LFrOsr+ Mh3NdkrPtHD0j3aVlE2cdXhHN8GVoOY9FKLYI178nBBPD9kTXvh2rsExtNcPhim2 WfsOkhUIgTQfPijfb6op4FKmfzF9G4WqU0GMj6x6R7VRku9JzNmYMIy4a9DkbOzS W0edZgdCIAA1QPKshIoo/HA/7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkskDvI ABZ4jq8yLNAg57D7qF8iMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTmbbUqhbYh2f89ZF/AkOZxQ6qkle9ABRcqrApy3ysl/9g6Tc1sdkR Y0DTzc9NYbWEy5VU34KWTG6OV6Drupv1MdvVBUFr+xbKA/IhGNSM7UTr+Rf9P9Q2 mJsZY8YDxRF+s3i3+DX5WQK38bM5b3CFJ3ay/+cb54XRjQ9VOBqa6XAtSq4mTvBW IUdxqa1QH5NnTDQa7U0O8jiwMwEQopq+i27HkqAd/59Z6+01zc98434JyFe3eP9L u6al0pqtOR7TDIxGipZpib1wz+b59obuVv2a3NtHMLlzpcL3rZ633WkE3aQnwSjv u4YH2m3iJzUokLRNV5QlUhaCx+5svHUU -----END CERTIFICATE-----Generated at Thu Jul 3 04:26:05 2025 by rpki-client