$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft File: mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json) Hash identifier: puGkVnVPPYB0UV32Gf1mxRLixbwC8L68xi2Kt60LG4A= Subject key identifier: DC:DB:21:0A:72:AD:13:9D:43:1F:A2:9F:81:CF:1A:17:9F:93:0E:D8 Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 Certificate issuer: /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft Manifest number: 0295 Signing time: Sat 05 Apr 2025 01:41:33 +0000 Manifest this update: Sat 05 Apr 2025 01:41:33 +0000 Manifest next update: Sat 12 Apr 2025 01:41:33 +0000 Files and hashes: 1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: xrIgzR/MxJcXzRUVCST0UT4i5uMnyhnv/qEMfGTZyvI=) 2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121348 Validity Not Before: Apr 5 01:41:33 2025 GMT Not After : Apr 12 01:41:33 2025 GMT Subject: CN=67f08a4d-6147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:7c:a9:19:78:d2:4a:6f:0a:3d:55:5f:6e: be:89:aa:36:9f:c2:9c:59:9a:b2:4d:42:d8:90:70: 6b:c2:ca:59:e2:c1:7d:11:9c:b4:eb:46:80:6e:96: 7b:ae:c5:9f:5f:27:68:37:92:b3:ab:be:09:2c:11: c2:d8:6f:a0:02:ca:ca:a5:37:d4:6f:67:bc:f5:0f: 10:bc:52:c0:64:b0:ea:bb:1f:20:f9:7e:2b:4f:6e: 7e:51:47:66:89:23:1a:58:db:9f:f9:2e:36:c4:68: ee:d6:69:3f:aa:dd:9e:21:57:e0:66:62:33:3a:9c: a0:e8:b7:c3:97:b0:77:65:f6:ed:83:ba:2a:8f:0c: 64:f0:14:09:a2:8c:27:94:e5:a4:17:a4:03:5d:61: 48:4d:32:5b:99:a2:ad:28:d2:58:54:f1:bc:e3:16: 5b:28:8a:4d:15:af:6c:e2:e1:6c:f2:01:6e:a3:2e: 8f:3f:0f:98:4d:6e:12:09:4f:0b:83:12:ea:8d:89: bd:88:aa:9f:d9:6a:b2:89:c7:e8:f9:08:b3:6f:58: 3e:28:f8:0b:89:6b:3d:85:16:74:c4:ae:21:b0:09: fc:39:b3:ae:ea:ac:74:82:10:05:b4:89:4a:ea:36: 3b:81:af:b4:6c:dd:b1:d6:60:b2:15:ee:23:2f:19: 1b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:21:0A:72:AD:13:9D:43:1F:A2:9F:81:CF:1A:17:9F:93:0E:D8 X509v3 Authority Key Identifier: keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:56:77:c3:d4:51:12:5f:08:32:b4:d3:71:54:d8:bb:96:04: 3b:41:90:6f:99:1a:78:72:f2:8a:87:02:f5:95:68:f7:63:0c: e8:ab:42:32:b7:f3:4e:e6:17:6b:f2:0d:a2:5d:10:94:07:20: 86:f9:14:89:f4:0b:cc:e9:40:7a:c0:76:e9:dc:41:99:9c:7b: 93:14:18:a0:8d:ed:af:f5:05:b6:5d:8b:94:26:f5:9e:4b:da: ce:48:ee:a1:94:fb:e8:3d:1a:ff:7c:37:82:3b:8f:a6:39:ea: 3f:cc:27:a5:3a:da:e7:17:a1:5a:c7:df:d4:ad:36:56:f0:a4: e0:ae:12:4b:fb:71:61:cc:7e:41:f6:d5:1a:d6:72:6b:30:91: 57:07:ff:30:02:c7:d5:82:06:65:f6:34:9e:a9:f4:c7:bc:17: a7:64:a5:81:3e:95:5a:8f:b3:76:05:4b:d7:61:46:f9:ce:3f: dd:f3:54:b7:1a:07:0a:c2:30:53:51:ff:60:b3:fd:91:75:53: f1:dd:a6:79:51:d9:53:d2:71:f6:d0:b9:fc:26:3e:f5:27:e5: 5a:73:ad:ea:54:d6:e1:69:37:74:19:64:71:69:03:15:ee:a7: 1b:7f:ed:ce:66:86:6c:95:2b:7e:40:9c:9d:3c:c6:9f:ba:36: aa:9e:9f:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC RTdBMjM4QzUwHhcNMjUwNDA1MDE0MTMzWhcNMjUwNDEyMDE0MTMzWjAYMRYwFAYD VQQDEw02N2YwOGE0ZC02MTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbF8qRl40kpvCj1VX26+iao2n8KcWZqyTULYkHBrwspZ4sF9EZy060aAbpZ7 rsWfXydoN5Kzq74JLBHC2G+gAsrKpTfUb2e89Q8QvFLAZLDqux8g+X4rT25+UUdm iSMaWNuf+S42xGju1mk/qt2eIVfgZmIzOpyg6LfDl7B3Zfbtg7oqjwxk8BQJoown lOWkF6QDXWFITTJbmaKtKNJYVPG84xZbKIpNFa9s4uFs8gFuoy6PPw+YTW4SCU8L gxLqjYm9iKqf2Wqyicfo+Qizb1g+KPgLiWs9hRZ0xK4hsAn8ObOu6qx0ghAFtIlK 6jY7ga+0bN2x1mCyFe4jLxkbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzbIQpy rROdQx+in4HPGhefkw7YMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4 MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3VnfD1FESXwgytNNxVNi7lgQ7QZBvmRp4cvKKhwL1lWj3Ywzoq0Iy t/NO5hdr8g2iXRCUByCG+RSJ9AvM6UB6wHbp3EGZnHuTFBigje2v9QW2XYuUJvWe S9rOSO6hlPvoPRr/fDeCO4+mOeo/zCelOtrnF6Fax9/UrTZW8KTgrhJL+3FhzH5B 9tUa1nJrMJFXB/8wAsfVggZl9jSeqfTHvBenZKWBPpVaj7N2BUvXYUb5zj/d81S3 GgcKwjBTUf9gs/2RdVPx3aZ5UdlT0nH20Ln8Jj71J+Vac63qVNbhaTd0GWRxaQMV 7qcbf+3OZoZslSt+QJydPMafujaqnp/2 -----END CERTIFICATE-----Generated at Sat Apr 5 19:48:46 2025 by rpki-client