$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: cT53x//FWk8OPMZ7j5c8Nl+qOS2JYAdb4bhWunaVV8E= Subject key identifier: B5:3C:02:36:B1:71:CA:9C:5A:14:12:63:7F:E9:08:7D:9E:75:EE:D1 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 113E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1134 Signing time: Thu 24 Apr 2025 17:16:23 +0000 Manifest this update: Thu 24 Apr 2025 17:16:22 +0000 Manifest next update: Thu 01 May 2025 17:16:22 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: 1/U1HErT+zR17rEQOpO/KuxP3e2TQ/7EMvW3cQpKh0o=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: i6cJunhUx1IUyrSi+spBz4Du5zWwhOZp61t1jw1sa98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4414 (0x113e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 24 17:16:22 2025 GMT Not After : May 1 17:16:22 2025 GMT Subject: CN=680a71e6-4447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:cc:09:19:75:72:a3:64:08:73:69:ff:99: 49:4c:14:78:08:b3:71:4d:94:28:dc:8b:78:94:58: fa:d1:29:b7:ea:ea:bd:eb:be:e6:7d:39:a7:ae:74: bd:14:bd:35:79:9f:4b:9e:99:47:e4:9d:38:ab:bf: af:10:67:cc:c6:f6:b4:04:49:ed:44:9c:54:3b:5f: d6:7a:df:35:e0:a6:8a:2a:ad:14:da:b9:d5:dd:43: 88:9a:4b:0b:33:97:86:ba:84:dc:b8:e2:77:9c:3f: e3:62:82:ab:c5:84:96:73:11:9b:f9:d5:88:66:7d: 64:fb:0f:79:d5:8f:5d:cd:9d:21:5a:76:56:f1:21: ec:78:5c:05:dd:36:9e:38:32:19:a1:2f:b7:18:c4: bc:86:a9:3b:b5:f5:3e:96:65:61:58:b6:ce:2f:35: 76:1b:69:6a:99:0c:4e:dd:b8:5d:3c:83:ac:f8:b7: e5:c4:13:d4:7c:37:01:17:c7:45:72:3c:1e:35:0b: 80:7b:33:d8:b1:02:2d:4a:5f:7b:f3:46:86:5d:3b: 84:7a:7b:23:11:10:7e:16:f1:ed:e6:23:d2:6e:92: a7:8b:5f:d5:5d:2d:57:ef:7d:87:ed:d1:6c:71:99: 24:88:47:35:8f:ad:83:82:86:f3:14:5d:35:e1:59: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3C:02:36:B1:71:CA:9C:5A:14:12:63:7F:E9:08:7D:9E:75:EE:D1 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:41:30:32:8b:95:fc:d5:88:b2:ac:07:7c:0f:6c:33:b5:b7: 22:d6:44:14:16:c3:51:10:47:c1:ce:0c:1f:d3:de:54:52:a0: 3d:35:41:e3:ad:e2:c0:04:6a:1c:1d:a6:aa:af:4c:c3:24:03: 33:33:39:1e:7c:bd:f2:d8:c1:e3:3d:7b:0a:78:28:9a:6b:0d: fc:66:b4:bf:3b:b3:a3:8c:5a:77:c5:05:82:ed:12:62:70:64: 3a:dc:33:ba:ec:c7:ff:05:e1:71:45:5e:05:0c:b4:12:17:3d: 7c:b9:55:59:46:02:b7:f5:c4:cb:23:df:19:35:ce:d8:d7:03: 56:b0:45:39:94:dc:e1:5b:22:98:0f:96:29:b0:1c:fb:49:e0: 90:a8:ae:6b:f9:0e:73:46:81:28:f3:ce:95:92:1f:45:f0:79: 7a:d8:5b:c8:d9:89:84:32:9e:42:d1:dd:d9:1f:50:d0:53:6e: e7:5b:3d:8c:a8:f0:c7:7a:7c:5f:8f:20:37:8d:d6:5c:3f:2b: 2b:ec:fe:b7:8a:65:5b:75:cd:db:f8:dd:52:1e:a7:3d:c6:10: 19:59:99:04:6b:73:26:63:32:36:f9:44:a9:0c:18:92:c7:3b: fe:70:cf:73:41:18:0b:62:fa:67:41:f1:b8:19:24:7f:36:7e: 90:f4:f0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICET4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNDI0MTcxNjIyWhcNMjUwNTAxMTcxNjIyWjAYMRYwFAYD VQQDEw02ODBhNzFlNi00NDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OrMCRl1cqNkCHNp/5lJTBR4CLNxTZQo3It4lFj60Sm36uq9677mfTmnrnS9 FL01eZ9LnplH5J04q7+vEGfMxva0BEntRJxUO1/Wet814KaKKq0U2rnV3UOImksL M5eGuoTcuOJ3nD/jYoKrxYSWcxGb+dWIZn1k+w951Y9dzZ0hWnZW8SHseFwF3Tae ODIZoS+3GMS8hqk7tfU+lmVhWLbOLzV2G2lqmQxO3bhdPIOs+LflxBPUfDcBF8dF cjweNQuAezPYsQItSl9780aGXTuEensjERB+FvHt5iPSbpKni1/VXS1X732H7dFs cZkkiEc1j62DgobzFF014VnV8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLU8Ajax ccqcWhQSY3/pCH2ede7RMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARQTAyi5X81YiyrAd8D2wztbci1kQUFsNREEfBzgwf095UUqA9NUHj reLABGocHaaqr0zDJAMzMzkefL3y2MHjPXsKeCiaaw38ZrS/O7OjjFp3xQWC7RJi cGQ63DO67Mf/BeFxRV4FDLQSFz18uVVZRgK39cTLI98ZNc7Y1wNWsEU5lNzhWyKY D5YpsBz7SeCQqK5r+Q5zRoEo886Vkh9F8Hl62FvI2YmEMp5C0d3ZH1DQU27nWz2M qPDHenxfjyA3jdZcPysr7P63imVbdc3b+N1SHqc9xhAZWZkEa3MmYzI2+USpDBiS xzv+cM9zQRgLYvpnQfG4GSR/Nn6Q9PBa -----END CERTIFICATE-----Generated at Sat Apr 26 14:02:01 2025 by rpki-client