$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: f89uxzU8m3M8X8qYXM/4FiZ9WvCrCFPQ4NZ5ssJOUXM= Subject key identifier: AA:BB:98:77:8F:CB:06:99:9E:37:E9:40:C9:BA:87:B8:73:27:AE:3A Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 116D Signing time: Fri 08 Aug 2025 17:25:26 +0000 Manifest this update: Fri 08 Aug 2025 17:25:26 +0000 Manifest next update: Fri 15 Aug 2025 17:25:26 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: QbN/ee17g2yiYMyFPKnW6J8Lwsy8AquwjdJCVcicoAM=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4473 (0x1179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Aug 8 17:25:26 2025 GMT Not After : Aug 15 17:25:26 2025 GMT Subject: CN=68963306-6ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:23:95:fd:1e:cc:28:9a:27:7c:78:6a:1f: d9:b3:17:29:4d:c1:0b:5e:73:90:0d:51:c6:31:cd: f6:c1:a0:d8:fe:04:99:a5:3f:51:b1:47:99:06:d7: c5:2c:6a:86:82:9e:4a:86:b6:ee:58:fe:be:ad:f3: 89:bd:25:e2:07:53:8b:98:96:b9:dc:71:ae:4b:ad: 85:5c:d3:81:21:8c:4c:8e:98:a2:aa:90:01:9d:d4: b8:3c:9a:14:1e:40:99:b8:f4:d2:cf:a7:18:5a:60: f1:ec:b3:d8:bf:e9:65:21:2f:06:2f:3b:f0:ea:98: 80:0e:f8:50:10:18:f3:3f:54:6b:a2:fd:43:79:4e: 7c:d8:50:71:5b:75:ee:2f:3f:e0:c0:27:c5:fe:18: f1:b1:f1:d7:74:16:87:1e:8f:b3:1b:04:ea:93:7f: 76:5e:f6:4a:af:53:e1:4d:0f:cb:a7:fd:d2:e7:b7: c8:59:f3:aa:b0:ef:9e:b9:68:d7:9c:86:00:27:10: 09:1e:8d:a9:7b:be:32:b3:77:ac:8d:d1:2b:1f:2f: 15:d2:6b:d1:d1:e3:69:be:fe:43:b0:52:81:ca:63: fd:69:23:0e:f1:d8:3e:9c:47:a0:67:6d:ba:84:cd: d3:d1:b9:81:8c:a6:8f:70:1e:c0:f3:51:d7:1b:2a: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:98:77:8F:CB:06:99:9E:37:E9:40:C9:BA:87:B8:73:27:AE:3A X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:5c:5a:38:74:fc:a9:01:bc:52:ee:7f:a1:a6:13:78:db:ae: 13:97:62:28:59:ef:0c:f0:42:96:44:14:05:8a:5d:01:f4:92: 8c:c4:cd:49:a6:c1:fd:1f:30:9e:fc:88:bf:bd:75:c4:1a:c8: 1a:0e:16:98:49:cd:ab:af:08:d7:69:61:48:8d:ff:d3:fe:cb: 54:a3:34:0e:89:3c:2a:5a:5b:75:a4:2c:ba:45:b0:1a:c7:d1: f6:d6:81:94:1e:a2:af:a2:2f:3b:4c:2b:bd:87:04:59:73:0a: 6b:98:10:54:51:f0:b9:db:0d:20:64:52:63:15:10:41:75:52: 2a:9f:95:c7:bd:59:d9:24:f6:ce:3f:f8:2f:b5:e8:aa:85:94: d8:ea:cd:30:60:13:a2:e5:a3:9d:6e:1e:9c:07:e7:0a:47:65: d8:ba:ab:6e:91:9d:ab:f4:9d:e8:77:ba:91:10:6f:49:d2:11: b8:06:23:a5:7f:13:f3:0b:82:d1:c7:6a:e7:1f:45:14:b2:4d: 14:ee:f2:de:a3:44:bc:b0:73:0f:36:4a:6c:49:5f:d0:cc:14: f0:98:59:9b:e8:f6:b7:77:33:3f:59:4e:87:2a:4c:de:44:d8: f7:27:03:b5:02:a6:16:e9:9e:80:2f:e1:b3:b6:d4:d2:0d:78: 15:cd:4a:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwODA4MTcyNTI2WhcNMjUwODE1MTcyNTI2WjAYMRYwFAYD VQQDEw02ODk2MzMwNi02ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+Ujlf0ezCiaJ3x4ah/ZsxcpTcELXnOQDVHGMc32waDY/gSZpT9RsUeZBtfF LGqGgp5KhrbuWP6+rfOJvSXiB1OLmJa53HGuS62FXNOBIYxMjpiiqpABndS4PJoU HkCZuPTSz6cYWmDx7LPYv+llIS8GLzvw6piADvhQEBjzP1Rrov1DeU582FBxW3Xu Lz/gwCfF/hjxsfHXdBaHHo+zGwTqk392XvZKr1PhTQ/Lp/3S57fIWfOqsO+euWjX nIYAJxAJHo2pe74ys3esjdErHy8V0mvR0eNpvv5DsFKBymP9aSMO8dg+nEegZ226 hM3T0bmBjKaPcB7A81HXGyolwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq7mHeP ywaZnjfpQMm6h7hzJ646MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpXFo4dPypAbxS7n+hphN4264Tl2IoWe8M8EKWRBQFil0B9JKMxM1J psH9HzCe/Ii/vXXEGsgaDhaYSc2rrwjXaWFIjf/T/stUozQOiTwqWlt1pCy6RbAa x9H21oGUHqKvoi87TCu9hwRZcwprmBBUUfC52w0gZFJjFRBBdVIqn5XHvVnZJPbO P/gvteiqhZTY6s0wYBOi5aOdbh6cB+cKR2XYuqtukZ2r9J3od7qREG9J0hG4BiOl fxPzC4LRx2rnH0UUsk0U7vLeo0S8sHMPNkpsSV/QzBTwmFmb6Pa3dzM/WU6HKkze RNj3JwO1AqYW6Z6AL+GzttTSDXgVzUrm -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:17 2025 by rpki-client