$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: MayU611382lPI56alZ+wJSG3uxuAdavJwNQIuDJcrP4= Subject key identifier: 34:62:ED:AD:52:8C:10:A2:E3:0C:BB:FB:F5:41:E0:9C:DF:F5:01:E5 Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07CE Signing time: Wed 02 Jul 2025 21:21:21 +0000 Manifest this update: Wed 02 Jul 2025 21:21:21 +0000 Manifest next update: Wed 09 Jul 2025 21:21:21 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: j0vt7gpyAWEtDE9XhsMSApT2/bNHW3GhBTgWuNvoXmw=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Jul 2 21:21:21 2025 GMT Not After : Jul 9 21:21:21 2025 GMT Subject: CN=6865a2d1-efb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:3d:38:fc:26:a0:24:cd:ac:ef:3d:1c:23: 1c:fb:64:28:4d:df:79:bd:76:92:44:2a:b5:17:de: 9c:9c:16:97:55:72:33:c5:40:61:bc:84:3c:a1:20: 6e:ce:d5:78:1d:bf:ad:a0:8f:a7:6a:e0:cc:07:92: 81:85:25:70:9d:05:cc:42:fb:14:9e:d3:31:c2:61: 8b:30:d6:a4:f3:da:07:bd:1b:2f:2f:d6:3c:3a:a1: 9b:a1:7f:38:91:4e:f9:19:0e:7b:19:a4:a0:0c:3f: 94:15:a0:d2:b7:8e:f8:bb:65:34:6f:cf:00:9d:e3: cd:7d:ff:a7:c1:a8:b4:48:9f:56:6d:b0:ff:14:65: 5d:32:eb:1f:eb:04:82:29:82:65:5d:3c:fa:ff:dd: 6d:55:e5:19:70:3f:d1:fd:c5:a7:7a:8f:20:06:25: a9:2f:7f:c4:53:7e:cb:91:dd:c9:e4:19:1f:30:85: da:bf:8f:4e:4e:27:37:d0:04:36:55:39:65:f9:59: 88:07:54:0d:58:b0:a2:c3:2a:5b:bb:bd:37:80:9a: c1:75:84:7f:fc:14:6d:dc:f2:01:fc:a7:85:65:f6: 89:31:3a:8f:41:98:04:7b:cc:7f:84:a6:e1:8a:ed: d1:1c:25:5a:9d:e9:25:a4:82:45:f1:2e:48:d6:e7: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:62:ED:AD:52:8C:10:A2:E3:0C:BB:FB:F5:41:E0:9C:DF:F5:01:E5 X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:33:83:ed:32:6c:65:14:c1:c1:55:2f:90:73:1f:32:2a:66: 18:3e:00:97:9b:68:ce:09:d1:a2:8d:20:74:71:a3:75:6f:de: 7a:f1:ee:7e:e1:16:3c:b4:6b:f7:a3:d9:8f:a9:07:3e:60:8c: 77:08:e4:15:a6:b1:b7:33:ca:86:c5:70:a6:b8:41:dd:18:e3: e7:1b:63:95:f9:18:09:71:cf:19:b7:18:06:a5:c1:62:6c:a4: 9c:ea:cc:f8:dc:e8:56:04:c4:2a:87:80:ce:07:50:b3:83:ec: 77:4b:ba:27:89:76:3e:ef:6a:0f:ea:29:f4:53:42:18:41:79: a5:54:00:20:50:51:31:10:93:8e:b8:6c:b0:e9:07:60:29:dd: 32:60:3e:df:d3:9b:e0:d2:0f:6c:c9:f2:17:11:f0:49:d3:10: f7:93:e9:de:55:95:32:30:40:62:19:c0:7e:c6:cd:61:a2:f1: 20:d2:67:3d:1b:fa:18:b4:71:ed:a8:22:6a:18:4c:e1:dd:13: f9:74:2a:e3:d2:62:2b:4e:a1:1f:35:f2:e3:f1:dc:70:75:39: d1:8c:20:69:56:48:12:e7:16:be:51:b5:41:1b:d5:2b:dd:9d: 8a:48:77:f6:69:e3:71:45:e0:d9:00:f5:f2:42:03:77:43:8c: ed:26:28:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwNzAyMjEyMTIxWhcNMjUwNzA5MjEyMTIxWjAYMRYwFAYD VQQDEw02ODY1YTJkMS1lZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfY9OPwmoCTNrO89HCMc+2QoTd95vXaSRCq1F96cnBaXVXIzxUBhvIQ8oSBu ztV4Hb+toI+nauDMB5KBhSVwnQXMQvsUntMxwmGLMNak89oHvRsvL9Y8OqGboX84 kU75GQ57GaSgDD+UFaDSt474u2U0b88AnePNff+nwai0SJ9WbbD/FGVdMusf6wSC KYJlXTz6/91tVeUZcD/R/cWneo8gBiWpL3/EU37Lkd3J5BkfMIXav49OTic30AQ2 VTll+VmIB1QNWLCiwypbu703gJrBdYR//BRt3PIB/KeFZfaJMTqPQZgEe8x/hKbh iu3RHCVaneklpIJF8S5I1ufrVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRi7a1S jBCi4wy7+/VB4Jzf9QHlMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYM4PtMmxlFMHBVS+Qcx8yKmYYPgCXm2jOCdGijSB0caN1b9568e5+ 4RY8tGv3o9mPqQc+YIx3COQVprG3M8qGxXCmuEHdGOPnG2OV+RgJcc8ZtxgGpcFi bKSc6sz43OhWBMQqh4DOB1Czg+x3S7oniXY+72oP6in0U0IYQXmlVAAgUFExEJOO uGyw6QdgKd0yYD7f05vg0g9syfIXEfBJ0xD3k+neVZUyMEBiGcB+xs1hovEg0mc9 G/oYtHHtqCJqGEzh3RP5dCrj0mIrTqEfNfLj8dxwdTnRjCBpVkgS5xa+UbVBG9Ur 3Z2KSHf2aeNxReDZAPXyQgN3Q4ztJijy -----END CERTIFICATE-----Generated at Thu Jul 3 10:52:10 2025 by rpki-client