$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: lz3b3s4NZSVlVAH/8vVhgtJc11RfSoIh6y2zhBH5U9c= Subject key identifier: 1A:BA:1C:2A:74:8E:9F:4B:AF:54:B6:F9:F1:0D:4C:BE:C3:A8:10:B1 Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07E8 Signing time: Fri 22 Aug 2025 21:08:53 +0000 Manifest this update: Fri 22 Aug 2025 21:08:53 +0000 Manifest next update: Fri 29 Aug 2025 21:08:53 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: aDf7C+gVxhN4Zm6QN/ki0vrI57evFsudFv59dHS8U1k=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Aug 22 21:08:53 2025 GMT Not After : Aug 29 21:08:53 2025 GMT Subject: CN=68a8dc65-29fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:57:71:9c:b7:7c:14:7b:a6:38:1b:ea:b8:c5: 5f:07:a3:98:e0:29:25:01:d7:f8:1b:09:c8:6f:7e: 93:84:5d:c1:86:4a:64:de:62:b6:01:af:22:1a:39: 4e:1e:94:2d:da:6a:9d:e6:99:f5:9a:c1:3b:7d:a2: d9:b2:f9:40:da:ed:d5:5e:60:d9:a5:53:4f:64:f5: d3:aa:68:b9:a2:c2:52:50:35:9b:65:f3:84:12:9e: 6a:9e:cc:73:a4:5e:66:98:b7:a8:fe:82:5a:40:0e: e5:31:a9:ee:b8:30:c9:61:a1:53:6f:12:7c:21:12: a1:39:9c:d2:a6:c5:0e:0c:3b:f1:ef:15:18:0d:d1: 35:64:83:f0:55:38:a4:93:6b:71:cd:cd:e7:3b:9b: 48:c5:5d:93:7a:10:6c:f0:7a:5f:1f:5d:cd:82:94: b6:d9:de:e7:63:29:76:cf:30:c6:ab:44:f7:15:c5: 29:f8:38:bd:37:93:40:32:58:8b:ae:8a:be:43:d5: 3a:38:38:51:a6:b5:45:1c:b6:65:ff:bc:d0:a0:1e: bd:a1:36:46:c1:59:f8:14:6e:b5:b7:81:d8:20:d3: e6:d8:5e:a4:44:cd:62:f5:90:08:1f:17:d4:98:55: c4:af:c5:8d:d0:db:01:40:37:f0:67:78:90:de:5b: 16:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BA:1C:2A:74:8E:9F:4B:AF:54:B6:F9:F1:0D:4C:BE:C3:A8:10:B1 X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:01:98:67:bc:74:80:8d:0f:4a:4a:8e:12:51:f6:07:aa:05: 4e:58:82:2f:79:04:64:a8:72:53:da:94:2d:81:3d:89:b7:9b: f0:f2:07:00:3c:b8:12:d3:25:25:4e:d5:13:a1:01:3b:6e:98: b4:fb:75:0b:61:d0:12:8b:11:5c:87:05:ef:fb:d5:df:f6:bd: a7:9d:0a:04:a3:0a:45:b5:e4:79:39:0b:23:8a:bb:45:c5:84: 43:c1:9e:13:5c:38:82:31:04:0a:a5:21:c2:fe:bd:67:56:ee: 5a:3e:1c:33:78:3b:8b:c8:26:a5:0a:5d:6e:d1:21:d3:da:e8: cc:68:13:75:b7:d7:d4:b5:86:26:98:af:34:bd:15:07:8f:86: f4:b9:90:22:ee:0d:77:26:7d:7d:b9:82:e6:22:d8:92:d7:83: 85:26:3a:5f:89:e4:22:7a:fe:0a:21:95:fe:71:ad:3d:c7:54: e9:fe:65:0b:2e:f6:3a:ac:66:4f:c4:6b:68:2c:5d:01:62:16: b7:c0:99:d5:e9:39:65:c2:c6:1d:0a:e5:2d:69:6d:fd:ea:7e: 92:7e:fc:f4:5b:1d:9f:41:01:7f:11:b7:a1:3c:c5:e1:f6:f3: b5:ba:6b:bf:33:12:83:db:b4:06:d6:ec:87:68:b2:83:10:f7: 63:e8:78:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwODIyMjEwODUzWhcNMjUwODI5MjEwODUzWjAYMRYwFAYD VQQDEw02OGE4ZGM2NS0yOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzldxnLd8FHumOBvquMVfB6OY4CklAdf4GwnIb36ThF3Bhkpk3mK2Aa8iGjlO HpQt2mqd5pn1msE7faLZsvlA2u3VXmDZpVNPZPXTqmi5osJSUDWbZfOEEp5qnsxz pF5mmLeo/oJaQA7lManuuDDJYaFTbxJ8IRKhOZzSpsUODDvx7xUYDdE1ZIPwVTik k2txzc3nO5tIxV2TehBs8HpfH13NgpS22d7nYyl2zzDGq0T3FcUp+Di9N5NAMliL roq+Q9U6ODhRprVFHLZl/7zQoB69oTZGwVn4FG61t4HYINPm2F6kRM1i9ZAIHxfU mFXEr8WN0NsBQDfwZ3iQ3lsWTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBq6HCp0 jp9Lr1S2+fENTL7DqBCxMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLAZhnvHSAjQ9KSo4SUfYHqgVOWIIveQRkqHJT2pQtgT2Jt5vw8gcA PLgS0yUlTtUToQE7bpi0+3ULYdASixFchwXv+9Xf9r2nnQoEowpFteR5OQsjirtF xYRDwZ4TXDiCMQQKpSHC/r1nVu5aPhwzeDuLyCalCl1u0SHT2ujMaBN1t9fUtYYm mK80vRUHj4b0uZAi7g13Jn19uYLmItiS14OFJjpfieQiev4KIZX+ca09x1Tp/mUL LvY6rGZPxGtoLF0BYha3wJnV6TllwsYdCuUtaW396n6Sfvz0Wx2fQQF/EbehPMXh 9vO1umu/MxKD27QG1uyHaLKDEPdj6Hha -----END CERTIFICATE-----Generated at Sun Aug 24 00:17:23 2025 by rpki-client