$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: oplG3TVqkzyYAKFhbcJYoJSn+d9nHbPm7Fb99E2OUqA= Subject key identifier: 6B:B0:3D:35:A3:FA:F2:FF:F9:83:26:C6:B1:79:20:71:E5:6D:26:15 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 115D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1151 Signing time: Sat 14 Jun 2025 17:11:30 +0000 Manifest this update: Sat 14 Jun 2025 17:11:29 +0000 Manifest next update: Sat 21 Jun 2025 17:11:29 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: skx/yyqazi0JTu6xl4m8eGOl3UH4wXxXKymvKeRG7uM=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4445 (0x115d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Jun 14 17:11:29 2025 GMT Not After : Jun 21 17:11:29 2025 GMT Subject: CN=684dad41-03fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d6:82:76:3c:2d:19:89:21:5f:51:90:0d:6c: eb:f0:4b:2e:57:09:e6:3c:15:ee:28:61:32:a5:61: 18:1e:4d:2d:1f:b5:95:0b:37:a5:4a:d1:66:98:86: 44:e7:a6:8d:4e:fe:7e:be:e0:2d:79:1b:d6:ff:2c: 74:9b:f1:3a:fe:ae:00:5b:0b:85:d7:0c:d9:23:99: 17:f5:1b:8c:0c:6d:aa:7f:f3:1c:5a:2f:ea:5f:a8: 48:96:c8:ca:0d:5b:af:6e:02:7c:d8:af:b7:11:ff: f7:c3:f5:5e:c3:88:83:cb:70:74:91:fd:e3:69:54: d0:3e:9b:23:f3:cd:74:28:d4:96:44:64:6b:f5:2f: 13:5f:c8:4d:a5:4d:ee:2e:33:0f:ae:e2:f9:f0:08: 9a:47:77:1b:f5:7f:e9:46:f0:35:14:1b:43:f9:61: d0:74:76:3b:5f:34:3d:f5:ce:48:20:5f:5b:65:24: c5:bd:bb:bf:59:53:9f:ed:99:a9:a0:23:df:c0:02: d4:1c:fb:fb:c3:fc:ad:5a:3e:f8:9d:3a:72:a9:86: 87:4e:27:24:69:fa:52:62:01:d4:72:86:55:df:a4: 3a:a9:4f:91:89:b3:86:56:a2:df:14:1c:bd:27:9a: 0d:65:00:f0:cd:4c:b4:69:8e:11:44:08:ee:88:1f: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:3D:35:A3:FA:F2:FF:F9:83:26:C6:B1:79:20:71:E5:6D:26:15 X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:19:b7:8f:ff:63:19:a9:31:8a:47:36:ed:29:e5:11:3a:92: 6c:ee:e2:c8:8b:90:b5:8a:5c:6f:09:08:dd:2b:41:f3:96:11: 3e:27:aa:f8:55:30:e5:ad:da:f7:82:74:b5:42:10:62:a7:ff: 8a:0c:93:7d:50:6b:d8:20:cd:48:80:74:d3:99:07:08:14:0c: f3:d3:2c:0e:1f:61:ab:b5:f2:ad:4c:b4:26:1f:94:1d:47:c1: 44:56:e9:89:e9:e1:cc:ca:ab:65:11:b9:9b:7c:46:6b:f8:23: a0:7c:aa:b9:de:1f:b2:3a:c2:33:8c:04:46:eb:dd:31:9b:f9: 41:40:02:f9:e8:1d:32:de:16:b3:b4:bb:28:7d:21:b9:b3:0e: 4e:93:7e:29:b4:b2:80:ee:8a:99:dc:34:a5:03:e5:95:65:52: 96:c3:d4:5a:1c:86:db:3d:a0:ce:80:5c:6c:ac:11:b6:01:a6: ce:3b:27:c3:df:db:55:91:92:43:90:ba:ea:64:26:99:c3:e8: eb:2e:31:90:86:42:99:e0:e9:53:09:55:fa:6c:ef:44:81:f9: d2:e9:b2:e5:4a:70:17:69:e3:0b:9e:3b:0c:1f:48:f5:eb:1b: b8:18:42:23:07:2b:35:a6:3e:17:6d:bd:48:24:63:7a:0f:35: 32:68:5c:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNjE0MTcxMTI5WhcNMjUwNjIxMTcxMTI5WjAYMRYwFAYD VQQDEw02ODRkYWQ0MS0wM2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutaCdjwtGYkhX1GQDWzr8EsuVwnmPBXuKGEypWEYHk0tH7WVCzelStFmmIZE 56aNTv5+vuAteRvW/yx0m/E6/q4AWwuF1wzZI5kX9RuMDG2qf/McWi/qX6hIlsjK DVuvbgJ82K+3Ef/3w/Vew4iDy3B0kf3jaVTQPpsj8810KNSWRGRr9S8TX8hNpU3u LjMPruL58AiaR3cb9X/pRvA1FBtD+WHQdHY7XzQ99c5IIF9bZSTFvbu/WVOf7Zmp oCPfwALUHPv7w/ytWj74nTpyqYaHTickafpSYgHUcoZV36Q6qU+RibOGVqLfFBy9 J5oNZQDwzUy0aY4RRAjuiB9YGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuwPTWj +vL/+YMmxrF5IHHlbSYVMB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABGbeP/2MZqTGKRzbtKeUROpJs7uLIi5C1ilxvCQjdK0HzlhE+J6r4 VTDlrdr3gnS1QhBip/+KDJN9UGvYIM1IgHTTmQcIFAzz0ywOH2GrtfKtTLQmH5Qd R8FEVumJ6eHMyqtlEbmbfEZr+COgfKq53h+yOsIzjARG690xm/lBQAL56B0y3haz tLsofSG5sw5Ok34ptLKA7oqZ3DSlA+WVZVKWw9RaHIbbPaDOgFxsrBG2AabOOyfD 39tVkZJDkLrqZCaZw+jrLjGQhkKZ4OlTCVX6bO9EgfnS6bLlSnAXaeMLnjsMH0j1 6xu4GEIjBys1pj4Xbb1IJGN6DzUyaFy7 -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:15 2025 by rpki-client