$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: 6yHwt9kSTeNqDTNhQScnhWBmkDvtPWDzjORV3IQ8uRQ= Subject key identifier: 4F:BB:2D:A0:ED:AB:81:29:83:C5:72:81:3F:79:65:A2:84:EF:F7:4A Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07B5 Signing time: Mon 12 May 2025 20:57:28 +0000 Manifest this update: Mon 12 May 2025 20:57:28 +0000 Manifest next update: Mon 19 May 2025 20:57:28 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: lb9Qt0f6U5k58uF4UPhAEE58t3yU/bhLgId/P5+fOmI=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1977 (0x7b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: May 12 20:57:28 2025 GMT Not After : May 19 20:57:28 2025 GMT Subject: CN=682260b8-6391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:bd:7d:4f:41:ba:4d:ff:0c:32:24:bb:e5: e4:c6:76:92:9e:6e:63:3a:2c:d2:ac:2a:c0:47:50: 17:c4:49:e5:c4:8e:66:e8:5b:05:a4:45:98:d8:d0: ba:e5:b6:be:a0:cc:ff:63:98:d7:51:22:f1:8e:17: 53:2b:a5:a9:91:a9:57:fe:f5:ba:57:2c:19:b7:0d: 5b:9f:68:0c:18:87:af:2d:82:b4:37:a5:13:e9:3d: 6c:db:73:ec:4f:8a:a7:0f:36:78:c9:5f:76:54:05: 8a:15:27:6a:38:49:5b:72:65:e8:a1:26:e7:eb:04: 1f:2f:bc:7e:fd:5e:d8:7e:f3:17:b7:e2:a2:ca:4a: 92:68:ee:23:12:4f:d9:f5:4f:67:30:49:a9:24:14: 2d:72:64:80:63:eb:03:0a:bd:ec:3a:fe:67:8d:fe: a7:00:a2:9f:98:33:9a:52:d4:18:9e:bd:7f:62:0f: 21:d8:be:2e:e2:8d:13:eb:3e:fc:c4:ce:95:6e:95: 04:f5:7e:af:bd:69:88:51:b4:f8:ca:3d:06:ae:b4: 9e:ba:13:ae:57:b2:6f:77:80:9f:bf:16:d3:ab:aa: 7a:a3:6a:cf:fe:40:d4:4c:ed:8b:a9:11:7a:f2:4b: f8:18:8f:e5:38:6a:8d:87:7c:6c:93:c0:db:c7:98: 80:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BB:2D:A0:ED:AB:81:29:83:C5:72:81:3F:79:65:A2:84:EF:F7:4A X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c8:07:30:57:e0:84:b5:bf:db:c5:c3:57:ed:ee:60:72:58: b5:67:19:b2:11:a5:2e:e2:35:34:f8:dd:7d:4d:66:fe:d4:c7: 28:6d:03:42:61:9c:8f:91:d4:05:32:c1:32:38:6b:2a:7d:90: a2:33:f8:61:1a:b4:af:cc:2f:cf:95:32:fa:41:39:33:8c:75: df:12:08:64:4c:61:9a:6d:1c:6a:b0:10:ea:3a:bc:de:7f:9d: e7:dc:71:00:df:8f:0d:4d:ab:5f:fe:d2:27:72:eb:3a:2d:1f: f2:4b:de:41:f0:42:f7:2b:1a:f0:4f:e8:94:85:29:bb:4e:9f: 50:b4:00:75:da:99:61:42:1c:9d:98:96:8e:23:c7:3c:e7:fb: be:23:e8:a8:5f:9d:ba:82:b6:e5:1e:32:4f:4c:e3:1d:f7:34: b3:82:98:9f:b0:51:7c:bd:aa:f2:12:a8:c7:98:b6:3b:3d:41: f9:93:9b:1f:6c:86:22:48:2e:38:54:e3:1e:e6:80:c0:84:e4: 7c:b0:69:77:33:58:ea:d2:0c:5a:ee:8d:43:bc:90:ea:3c:02: 0e:52:bf:ec:8a:d0:20:d3:91:6b:c4:3d:71:c7:9f:55:44:0b: 49:b3:e8:7f:99:9f:09:b3:a4:36:f6:b3:75:69:d3:70:45:36: cd:29:6e:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwNTEyMjA1NzI4WhcNMjUwNTE5MjA1NzI4WjAYMRYwFAYD VQQDEw02ODIyNjBiOC02MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGe9fU9Buk3/DDIku+XkxnaSnm5jOizSrCrAR1AXxEnlxI5m6FsFpEWY2NC6 5ba+oMz/Y5jXUSLxjhdTK6WpkalX/vW6VywZtw1bn2gMGIevLYK0N6UT6T1s23Ps T4qnDzZ4yV92VAWKFSdqOElbcmXooSbn6wQfL7x+/V7YfvMXt+KiykqSaO4jEk/Z 9U9nMEmpJBQtcmSAY+sDCr3sOv5njf6nAKKfmDOaUtQYnr1/Yg8h2L4u4o0T6z78 xM6VbpUE9X6vvWmIUbT4yj0GrrSeuhOuV7Jvd4CfvxbTq6p6o2rP/kDUTO2LqRF6 8kv4GI/lOGqNh3xsk8Dbx5iAfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE+7LaDt q4Epg8VygT95ZaKE7/dKMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuyAcwV+CEtb/bxcNX7e5gcli1ZxmyEaUu4jU0+N19TWb+1McobQNC YZyPkdQFMsEyOGsqfZCiM/hhGrSvzC/PlTL6QTkzjHXfEghkTGGabRxqsBDqOrze f53n3HEA348NTatf/tIncus6LR/yS95B8EL3KxrwT+iUhSm7Tp9QtAB12plhQhyd mJaOI8c85/u+I+ioX526grblHjJPTOMd9zSzgpifsFF8varyEqjHmLY7PUH5k5sf bIYiSC44VOMe5oDAhOR8sGl3M1jq0gxa7o1DvJDqPAIOUr/sitAg05FrxD1xx59V RAtJs+h/mZ8Js6Q29rN1adNwRTbNKW7a -----END CERTIFICATE-----Generated at Wed May 14 19:37:01 2025 by rpki-client