$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json) Hash identifier: BTNDP9DkEYFzRLMBaWuQDEf+HjBdg04E7sAkmDeZ2t8= Subject key identifier: D3:58:93:7E:02:BE:2B:45:46:63:27:D4:ED:74:C1:0A:C8:8C:F3:52 Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft Manifest number: 02D5 Signing time: Mon 11 Aug 2025 01:34:24 +0000 Manifest this update: Mon 11 Aug 2025 01:34:24 +0000 Manifest next update: Mon 18 Aug 2025 01:34:24 +0000 Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: GGrkgBRhGYW3f5BxxIvxEri3wX8A8uuaog1wu2QHd9c=) 2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Validity Not Before: Aug 11 01:34:24 2025 GMT Not After : Aug 18 01:34:24 2025 GMT Subject: CN=689948a0-6058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:40:6e:ea:cd:7b:db:9e:37:87:90:5d:7e:c0: 6b:de:09:88:f7:05:61:1d:18:24:ce:c1:53:4b:6e: c8:f1:89:9a:f0:98:27:93:d9:4a:8c:83:9a:32:65: 7a:21:e8:e9:ff:fc:86:6f:fd:bb:45:e3:a1:98:d8: b1:35:e3:8c:b1:f5:39:fc:d4:66:87:2a:6a:c1:88: 93:82:16:3b:99:2e:83:cf:1c:94:e7:fe:5d:f8:50: da:17:2f:dd:5d:30:a1:04:51:06:ba:7b:d5:20:3f: 5f:96:3b:81:8b:92:2c:8b:eb:62:8c:56:d3:f7:30: 95:28:a0:91:d6:1e:d4:82:35:54:bd:ad:e8:64:ab: de:b9:21:28:d7:61:25:19:6a:69:e2:a3:80:42:bf: b4:ce:76:c5:64:b7:21:cd:fd:9e:86:5c:38:b6:2b: d8:6c:f8:8e:8e:83:04:3c:6c:3d:43:05:c3:53:f0: bc:fa:87:26:ef:20:d6:bb:3f:33:10:2e:23:be:0f: da:d0:32:4e:e0:74:f4:34:7f:74:45:b4:ff:b5:47: cb:96:58:8b:be:3e:b1:7d:90:ef:d6:00:d3:46:18: 26:17:c3:f6:c1:ef:22:0b:41:ea:55:00:42:f4:45: 5c:62:74:5d:c5:82:cc:24:8f:29:20:bb:9c:98:38: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:58:93:7E:02:BE:2B:45:46:63:27:D4:ED:74:C1:0A:C8:8C:F3:52 X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:3e:bf:35:f8:95:3e:43:e7:9e:bc:68:ca:23:f3:a8:28: a5:86:41:0f:42:49:34:3d:e1:5c:61:cf:86:fc:7d:68:c6:80: 79:6c:f2:11:76:80:a1:34:44:3b:ed:ef:55:cc:13:8e:b5:97: c9:c8:35:de:1f:ca:77:9c:72:e3:f4:c8:ce:cc:32:82:75:fa: 17:fb:b8:ec:35:1e:53:dc:4d:7f:3c:0e:14:57:9a:97:15:d6: 35:ff:11:8f:1e:df:54:2a:a2:ea:8b:35:0a:a4:0a:b7:dd:56: 65:69:fa:a0:1d:90:d2:b7:c5:df:2f:98:fb:09:fc:db:3e:13: b9:0b:4c:4a:73:95:6c:3e:80:52:e0:f0:e2:3a:49:7c:ae:81: 79:f1:34:1a:bd:0c:06:e4:20:ea:c9:da:dc:6b:a4:97:4f:db: 18:6b:ba:2a:fb:8a:79:9a:ad:1e:ff:d6:68:31:97:7f:21:11: 4c:6b:10:b9:cd:e0:8a:34:77:13:66:2b:14:41:1f:67:b3:ce: 27:5c:b2:3e:f1:7b:e7:3b:82:96:a8:ac:06:0b:76:e5:4a:50: 2d:dd:1b:7f:81:a9:50:5c:ae:6f:cc:f7:d0:35:f6:ee:fd:fb: f2:f0:0b:0f:33:76:97:5a:64:57:af:78:9a:2d:75:65:7b:c9: ee:e4:d3:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwODExMDEzNDI0WhcNMjUwODE4MDEzNDI0WjAYMRYwFAYD VQQDEw02ODk5NDhhMC02MDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kBu6s172543h5BdfsBr3gmI9wVhHRgkzsFTS27I8Yma8Jgnk9lKjIOaMmV6 Iejp//yGb/27ReOhmNixNeOMsfU5/NRmhypqwYiTghY7mS6DzxyU5/5d+FDaFy/d XTChBFEGunvVID9fljuBi5Isi+tijFbT9zCVKKCR1h7UgjVUva3oZKveuSEo12El GWpp4qOAQr+0znbFZLchzf2ehlw4tivYbPiOjoMEPGw9QwXDU/C8+ocm7yDWuz8z EC4jvg/a0DJO4HT0NH90RbT/tUfLlliLvj6xfZDv1gDTRhgmF8P2we8iC0HqVQBC 9EVcYnRdxYLMJI8pILucmDikvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNYk34C vitFRmMn1O10wQrIjPNSMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA/z6/NfiVPkPnnrxoyiPzqCilhkEPQkk0PeFcYc+G/H1oxoB5bPIR doChNEQ77e9VzBOOtZfJyDXeH8p3nHLj9MjOzDKCdfoX+7jsNR5T3E1/PA4UV5qX FdY1/xGPHt9UKqLqizUKpAq33VZlafqgHZDSt8XfL5j7CfzbPhO5C0xKc5VsPoBS 4PDiOkl8roF58TQavQwG5CDqydrca6SXT9sYa7oq+4p5mq0e/9ZoMZd/IRFMaxC5 zeCKNHcTZisUQR9ns84nXLI+8XvnO4KWqKwGC3blSlAt3Rt/galQXK5vzPfQNfbu /fvy8AsPM3aXWmRXr3iaLXVle8nu5NMM -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:03 2025 by rpki-client