$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: NqpY8F2/t//LI1GpNr90H9sRz+i+MjJWg9iNM2WpIis= Subject key identifier: C2:09:10:59:4A:02:5A:3F:0C:05:A7:76:FC:7A:43:4E:16:D5:49:F9 Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07E3 Signing time: Tue 12 Aug 2025 21:20:39 +0000 Manifest this update: Tue 12 Aug 2025 21:20:38 +0000 Manifest next update: Tue 19 Aug 2025 21:20:38 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: YaF5jrznQUq9aLLiPK5UpLpDqEdos/TBBrOiE+Q6TL8=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 21:20:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2023 (0x7e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Aug 12 21:20:38 2025 GMT Not After : Aug 19 21:20:38 2025 GMT Subject: CN=689bb026-70df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:fc:a8:15:46:2b:3d:fd:bf:fc:39:52:9e:ad: 16:ab:eb:e4:79:79:87:8b:19:4c:84:0f:67:9e:69: d3:3c:1f:cc:9f:a0:70:21:38:42:9d:86:de:e1:c8: f0:4e:70:97:90:c7:69:d4:2e:27:09:a4:c9:a4:e5: ae:94:a3:a3:5c:3b:04:f5:86:dc:3e:cb:a3:32:82: 76:ba:8a:5c:96:d0:41:45:8f:d0:41:95:91:39:d6: d5:59:f4:79:79:e6:8c:73:09:d4:f9:8b:fa:9c:08: 8b:09:82:01:0a:1a:a5:af:59:40:54:55:d8:bb:d6: 62:24:1f:8b:fb:f0:a2:81:13:22:3d:34:92:d8:ee: 80:6a:2d:9e:2d:07:99:ac:03:3b:69:be:9f:a2:1f: 89:54:6a:63:2d:2b:22:29:5e:35:1c:f7:95:cc:6d: 17:a7:10:ee:03:14:8c:85:51:d0:33:1a:07:7a:a5: 51:08:e8:c8:11:06:64:50:10:4b:e6:89:04:4b:e1: 03:f7:d7:f7:a5:97:98:05:5f:57:ae:30:02:47:36: ce:f2:f3:70:86:c0:f0:98:7e:94:aa:33:28:77:62: 26:22:ad:b6:74:71:e7:f1:fb:74:ae:f7:9f:a7:f3: ad:5e:d9:bc:fd:29:14:b1:1c:2c:7f:1f:a0:a7:88: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:10:59:4A:02:5A:3F:0C:05:A7:76:FC:7A:43:4E:16:D5:49:F9 X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e1:4c:a2:f3:97:5a:26:c9:f1:dc:8c:0f:ad:e1:cb:23:84:dc: 9a:18:ca:6e:1a:80:08:e3:fd:aa:ad:ee:34:fe:2e:ce:49:a9: b2:b2:b5:ff:40:5e:61:57:c7:6b:e3:36:86:ed:12:2b:30:46: b8:35:68:35:79:72:89:dd:85:0f:11:39:f7:da:69:8f:bc:4d: d5:ca:27:0a:cb:87:06:f8:f4:62:00:1c:53:53:a3:10:58:2a: ca:1e:4c:e8:96:73:f7:d7:fd:ac:1b:6e:45:ea:60:55:64:78: 3c:4d:88:c3:3a:a1:b8:50:2b:be:b8:9a:b6:05:f9:62:04:e5: 8a:49:ee:31:21:f4:3a:01:63:b4:cf:07:23:1a:8d:05:9d:e4: aa:3a:69:9e:7a:26:21:1f:b6:1c:60:2c:1e:9c:08:70:5d:50: 9e:7a:c0:23:a7:13:9b:92:32:a6:8a:40:91:09:1c:d0:0d:48: 70:fa:82:68:00:16:2f:54:f6:9a:c3:4a:df:9f:ec:0f:0a:92: 15:4c:7e:88:29:82:80:f6:68:99:af:5f:cd:35:09:86:4b:eb: 8c:98:5d:73:d0:a8:2f:df:6a:aa:6e:e2:b7:18:8f:57:27:f0: 8e:77:ae:a5:f7:1c:d4:74:19:59:8d:e8:29:c6:eb:09:92:43: 3b:ea:5a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwODEyMjEyMDM4WhcNMjUwODE5MjEyMDM4WjAYMRYwFAYD VQQDEw02ODliYjAyNi03MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/fyoFUYrPf2//DlSnq0Wq+vkeXmHixlMhA9nnmnTPB/Mn6BwIThCnYbe4cjw TnCXkMdp1C4nCaTJpOWulKOjXDsE9YbcPsujMoJ2uopcltBBRY/QQZWROdbVWfR5 eeaMcwnU+Yv6nAiLCYIBChqlr1lAVFXYu9ZiJB+L+/CigRMiPTSS2O6Aai2eLQeZ rAM7ab6foh+JVGpjLSsiKV41HPeVzG0XpxDuAxSMhVHQMxoHeqVRCOjIEQZkUBBL 5okES+ED99f3pZeYBV9XrjACRzbO8vNwhsDwmH6UqjMod2ImIq22dHHn8ft0rvef p/OtXtm8/SkUsRwsfx+gp4jeNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMIJEFlK Alo/DAWndvx6Q04W1Un5MB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDhTKLzl1omyfHcjA+t4csjhNyaGMpuGoAI4/2qre40/i7OSamysrX/ QF5hV8dr4zaG7RIrMEa4NWg1eXKJ3YUPETn32mmPvE3VyicKy4cG+PRiABxTU6MQ WCrKHkzolnP31/2sG25F6mBVZHg8TYjDOqG4UCu+uJq2BfliBOWKSe4xIfQ6AWO0 zwcjGo0FneSqOmmeeiYhH7YcYCwenAhwXVCeesAjpxObkjKmikCRCRzQDUhw+oJo ABYvVPaaw0rfn+wPCpIVTH6IKYKA9miZr1/NNQmGS+uMmF1z0Kgv32qqbuK3GI9X J/COd66l9xzUdBlZjegpxusJkkM76lqJ -----END CERTIFICATE-----Generated at Wed Aug 13 07:39:24 2025 by rpki-client