$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft File: MxG_l-IbcmqcAFa75KhbH38pXzU.mft (raw, json) Hash identifier: hd4T9BbOIzw8+V9sqFbQNT1aLJko+Eov3ZOZ4+bMlN4= Subject key identifier: FA:BE:97:1E:5E:09:C7:ED:F8:51:8C:A2:F7:23:29:8B:75:1C:D5:FF Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 113B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft Manifest number: 1131 Signing time: Fri 18 Apr 2025 17:22:47 +0000 Manifest this update: Fri 18 Apr 2025 17:22:47 +0000 Manifest next update: Fri 25 Apr 2025 17:22:47 +0000 Files and hashes: 1: MxG_l-IbcmqcAFa75KhbH38pXzU.crl (hash: Zf+I0I/aKpF0MeG+7N3II4DE3x/DcQAvm8I30Nlxk3Y=) 2: 51273D9A08EE11E99E30172AC4F9AE02.roa (hash: i6cJunhUx1IUyrSi+spBz4Du5zWwhOZp61t1jw1sa98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 17:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4411 (0x113b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 18 17:22:47 2025 GMT Not After : Apr 25 17:22:47 2025 GMT Subject: CN=68028a67-ee89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:2a:9d:a6:7f:ce:a1:11:27:e0:9c:52:d5: 9c:16:f4:df:2e:36:c8:b8:55:c6:fe:21:13:6a:3d: e1:97:dc:88:38:d8:76:8b:a7:bf:9a:a2:f2:b3:98: be:60:54:53:2d:fb:98:f1:27:2e:b2:6d:eb:fb:26: 0c:12:8c:d7:2e:8a:65:cf:a1:05:78:68:3b:d1:10: 38:c1:96:7b:d6:48:08:31:95:20:7e:a0:3d:94:dd: 8a:cc:82:e4:46:2d:b3:0b:51:b1:48:7d:d6:c5:4f: 65:5f:b1:3b:6b:ce:34:98:8b:12:51:46:72:9c:f5: 26:33:39:18:87:f8:b8:b1:fe:9a:cf:f9:ed:eb:01: 3a:89:0f:ae:3b:c0:b8:69:ae:57:36:98:12:26:64: 69:25:56:cd:fb:05:5e:fe:df:b8:ab:69:28:ca:b7: fe:ba:83:cb:b5:ac:3a:a2:e7:5c:89:d4:3c:30:da: b3:c7:5d:b9:15:c7:d4:10:df:7f:85:9c:58:ee:74: 98:86:f1:c8:34:84:1d:ce:98:78:43:a1:3e:df:b9: 2e:14:22:86:9c:b9:de:1c:49:50:5d:49:c1:d6:e2: 7c:fd:f9:05:a1:e7:2f:0f:82:ad:ec:43:87:53:03: 56:8a:24:84:6b:4a:96:eb:00:51:fd:ba:fe:f2:44: 90:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BE:97:1E:5E:09:C7:ED:F8:51:8C:A2:F7:23:29:8B:75:1C:D5:FF X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:04:0c:14:58:41:4e:55:2e:a2:ed:26:2a:a7:18:b0:a4:e1: c4:60:be:a3:dc:27:7b:45:8c:fb:e4:ca:74:55:5f:72:64:ca: f1:78:35:f1:83:63:c3:63:f7:01:86:c4:97:16:cc:a5:7f:ea: 31:4d:e2:f8:e5:99:5f:c3:a0:96:a4:a6:2f:e0:8f:70:5e:60: 0b:69:90:19:a9:94:f0:e5:f9:9f:80:89:a2:ac:68:7a:7d:62: 9e:6f:d2:51:af:5c:dd:ea:e3:52:25:5d:80:98:9c:24:e8:9a: cc:5b:c2:5e:f7:f4:be:5e:06:69:22:73:5f:e9:c5:6e:69:03: b1:cd:66:ba:bb:30:21:46:00:1d:c8:13:f1:6f:4b:6a:1c:50: 85:80:6b:53:8f:4d:02:1f:eb:96:c3:62:96:1a:4b:29:f5:d8: 94:31:1d:6b:11:a5:9f:d4:8a:31:8a:b9:cb:c7:d7:94:16:02: f3:8a:54:88:9e:f6:9b:68:0e:a0:da:16:07:de:fa:5f:5a:e7: f1:37:b0:df:9f:6e:df:d0:8f:22:68:b8:c8:70:5d:d1:9a:1e: 98:36:3f:69:a4:71:fd:22:c7:97:c7:17:f9:5e:30:e1:00:5b: 67:a5:e2:92:60:b6:24:51:76:e6:b2:63:a0:41:40:9f:54:a2: 30:94:90:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICETswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNDE4MTcyMjQ3WhcNMjUwNDI1MTcyMjQ3WjAYMRYwFAYD VQQDEw02ODAyOGE2Ny1lZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuecqnaZ/zqERJ+CcUtWcFvTfLjbIuFXG/iETaj3hl9yIONh2i6e/mqLys5i+ YFRTLfuY8Scusm3r+yYMEozXLoplz6EFeGg70RA4wZZ71kgIMZUgfqA9lN2KzILk Ri2zC1GxSH3WxU9lX7E7a840mIsSUUZynPUmMzkYh/i4sf6az/nt6wE6iQ+uO8C4 aa5XNpgSJmRpJVbN+wVe/t+4q2koyrf+uoPLtaw6oudcidQ8MNqzx125FcfUEN9/ hZxY7nSYhvHINIQdzph4Q6E+37kuFCKGnLneHElQXUnB1uJ8/fkFoecvD4Kt7EOH UwNWiiSEa0qW6wBR/br+8kSQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPq+lx5e Ccft+FGMovcjKYt1HNX/MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzQ1NC83OUM2MUU3QzA4RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNt cWNBRmE3NUtoYkgzOHBYelUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDBAwUWEFOVS6i7SYqpxiwpOHEYL6j3Cd7RYz75Mp0VV9yZMrxeDXx g2PDY/cBhsSXFsylf+oxTeL45Zlfw6CWpKYv4I9wXmALaZAZqZTw5fmfgImirGh6 fWKeb9JRr1zd6uNSJV2AmJwk6JrMW8Je9/S+XgZpInNf6cVuaQOxzWa6uzAhRgAd yBPxb0tqHFCFgGtTj00CH+uWw2KWGksp9diUMR1rEaWf1IoxirnLx9eUFgLzilSI nvabaA6g2hYH3vpfWufxN7Dfn27f0I8iaLjIcF3Rmh6YNj9ppHH9IseXxxf5XjDh AFtnpeKSYLYkUXbmsmOgQUCfVKIwlJBm -----END CERTIFICATE-----Generated at Sat Apr 19 08:26:15 2025 by rpki-client