$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: eH3qCIblT+ZndH0MPjDy/AEiLHwE7e0e4zdd+PaCwYw= Subject key identifier: 59:63:D4:BF:07:1C:62:4C:39:EA:31:FF:EF:A6:FA:07:F3:49:F5:B0 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1174 Signing time: Fri 22 Aug 2025 17:21:39 +0000 Manifest this update: Fri 22 Aug 2025 17:21:39 +0000 Manifest next update: Fri 29 Aug 2025 17:21:39 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: 1oP68NhInDNF2yuKBh7Z4Ay5oe3lVXDZcViMCSj2LCY=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4480 (0x1180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Aug 22 17:21:39 2025 GMT Not After : Aug 29 17:21:39 2025 GMT Subject: CN=68a8a723-e6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e2:ea:fc:a3:1f:6f:17:1f:78:09:06:5c:7b: 82:35:f5:f0:8b:4f:46:5a:85:06:2e:a2:db:13:70: 3b:98:7c:8d:0c:6b:f2:b9:1b:87:ae:35:e4:e9:2c: 20:f5:cc:1a:42:d0:f2:9f:fa:d0:12:7f:81:96:3c: 0b:e5:c1:10:cd:a0:d4:fb:73:87:84:5c:37:26:b8: 18:77:95:2a:23:39:bf:a3:30:ce:e8:6e:53:14:0a: f0:98:00:6f:44:d3:96:e2:95:6a:e1:4e:2b:66:8f: de:bb:58:d6:ee:36:61:dd:a5:ac:95:a0:26:9a:7f: 98:ef:00:a1:36:dc:47:73:3e:e5:f2:48:31:b8:61: 16:19:11:51:40:e5:1f:35:d8:65:9c:37:d1:f7:0e: e1:ef:23:4c:53:3c:da:ba:db:27:1f:e2:79:60:59: e2:6d:ff:61:04:42:55:0b:55:84:91:10:9a:f7:f8: 6a:6a:18:2a:f2:8a:fc:89:8b:1f:18:9a:6e:43:9a: 20:c2:9d:b8:35:0d:01:32:e2:31:b0:ad:97:69:b2: 6a:c7:0b:b7:1a:95:56:09:2e:18:2f:12:25:d3:20: 83:a0:4a:ca:e3:2c:d1:b8:d7:7e:4f:df:de:26:2d: a7:0e:14:44:13:75:47:50:04:a9:85:19:70:85:2e: df:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:63:D4:BF:07:1C:62:4C:39:EA:31:FF:EF:A6:FA:07:F3:49:F5:B0 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:59:6e:84:48:0b:6f:0f:13:d8:10:7d:f2:42:1c:ea:81:90: 65:91:f1:03:a4:51:be:2a:28:2a:a1:43:3a:43:d9:3c:29:c9: 80:0f:3d:3b:f8:1e:39:28:ef:e8:f1:7e:fe:bf:63:e5:18:ec: 46:7c:1e:1d:9d:29:a2:be:67:28:99:1d:14:dc:96:aa:e0:d4: a5:4d:ad:a5:4d:93:9c:69:54:19:f1:c7:c7:75:43:9f:db:ef: 5d:7a:d3:fe:dc:cb:84:56:2f:dc:72:59:cb:2c:a1:49:1b:12: e0:5e:df:f2:eb:af:25:89:27:e6:fc:89:7c:4b:15:6e:86:19: 3d:0a:45:46:d9:8c:34:84:08:09:8f:2e:27:9f:13:da:75:6c: fe:ce:d7:9a:d5:70:59:62:01:53:a7:45:34:8d:c6:13:55:fb: 41:0d:aa:f8:8c:0e:fe:4d:c7:6f:92:af:d6:52:2f:6d:e5:7a: 9c:63:6a:ab:d2:d4:f6:79:f6:46:23:3a:bb:1c:b8:35:78:3b: fa:89:31:0f:42:0f:ca:e9:13:3e:26:b8:1b:49:71:a9:0c:30: 9d:1c:8e:12:d6:e4:f6:cf:1d:80:d8:0f:5c:e2:9e:2a:de:34: 41:d6:7d:df:41:15:6c:64:a2:41:48:8f:fe:95:b8:bc:58:ba: af:db:4f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwODIyMTcyMTM5WhcNMjUwODI5MTcyMTM5WjAYMRYwFAYD VQQDEw02OGE4YTcyMy1lNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOLq/KMfbxcfeAkGXHuCNfXwi09GWoUGLqLbE3A7mHyNDGvyuRuHrjXk6Swg 9cwaQtDyn/rQEn+BljwL5cEQzaDU+3OHhFw3JrgYd5UqIzm/ozDO6G5TFArwmABv RNOW4pVq4U4rZo/eu1jW7jZh3aWslaAmmn+Y7wChNtxHcz7l8kgxuGEWGRFRQOUf NdhlnDfR9w7h7yNMUzzautsnH+J5YFnibf9hBEJVC1WEkRCa9/hqahgq8or8iYsf GJpuQ5ogwp24NQ0BMuIxsK2XabJqxwu3GpVWCS4YLxIl0yCDoErK4yzRuNd+T9/e Ji2nDhREE3VHUASphRlwhS7fcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlj1L8H HGJMOeox/++m+gfzSfWwMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkWW6ESAtvDxPYEH3yQhzqgZBlkfEDpFG+KigqoUM6Q9k8KcmADz07 +B45KO/o8X7+v2PlGOxGfB4dnSmivmcomR0U3Jaq4NSlTa2lTZOcaVQZ8cfHdUOf 2+9detP+3MuEVi/cclnLLKFJGxLgXt/y668liSfm/Il8SxVuhhk9CkVG2Yw0hAgJ jy4nnxPadWz+ztea1XBZYgFTp0U0jcYTVftBDar4jA7+Tcdvkq/WUi9t5XqcY2qr 0tT2efZGIzq7HLg1eDv6iTEPQg/K6RM+JrgbSXGpDDCdHI4S1uT2zx2A2A9c4p4q 3jRB1n3fQRVsZKJBSI/+lbi8WLqv2081 -----END CERTIFICATE-----Generated at Sat Aug 23 21:26:27 2025 by rpki-client