$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: y85ovisi97Jz73cXVtl0LnhYGOjeuubpeMwAUhrZkH0= Subject key identifier: E6:30:64:55:74:FE:14:EE:17:F2:BB:3E:A7:69:B0:2D:83:37:A0:1B Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07C4 Signing time: Thu 12 Jun 2025 20:49:54 +0000 Manifest this update: Thu 12 Jun 2025 20:49:53 +0000 Manifest next update: Thu 19 Jun 2025 20:49:53 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: jnVpktKRPjGGge4jlFjupbJ0xeb/4NWhtzUQM5zB0hE=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1992 (0x7c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Jun 12 20:49:53 2025 GMT Not After : Jun 19 20:49:53 2025 GMT Subject: CN=684b3d71-379a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:6c:8e:d1:87:93:11:87:3c:50:36:c4:8c: 46:f3:91:69:9b:6a:f8:09:fc:ff:0c:58:4d:83:a3: e2:9b:3e:03:9e:3b:2f:6d:1f:97:e2:e1:2d:d7:af: 44:db:ed:e3:41:06:ab:d3:78:a9:59:f8:a6:cf:2d: df:23:c8:f1:8b:f6:cc:bf:e7:58:8b:01:64:ee:cb: 37:bd:45:56:01:79:71:bf:69:c5:d9:5e:9f:51:c1: de:98:3a:59:0e:73:4f:a8:fc:30:32:48:46:27:02: 18:c5:61:60:9a:e2:27:1e:e6:c8:8d:ea:e7:82:e8: 80:d7:d4:6d:30:45:27:ba:68:43:0a:27:ab:1e:76: 7d:ea:88:50:cd:f5:dd:81:27:91:d4:ee:99:29:8f: 82:f7:dd:c7:9f:9d:a6:0c:11:80:f1:fb:f8:a1:d1: 44:41:45:94:40:5a:5b:8c:d3:0c:a8:e6:23:f9:df: b4:f0:01:6f:1f:eb:b1:d1:1a:03:f3:8c:35:40:c1: f8:59:22:23:9b:02:c2:84:7b:0d:c7:9e:1b:25:73: 9e:72:6e:6d:30:3b:e3:f5:7d:0b:47:d4:f3:94:1a: a9:3b:87:2e:5f:9d:fb:2a:92:87:6f:b6:86:93:7a: 82:4e:51:21:c2:9f:6b:c7:e1:57:27:ad:a7:97:db: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:30:64:55:74:FE:14:EE:17:F2:BB:3E:A7:69:B0:2D:83:37:A0:1B X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:65:69:04:96:b1:20:71:8f:66:16:42:93:05:8e:10:cb: fe:1a:17:f0:16:c9:06:5c:09:48:02:80:98:84:53:da:35:01: 49:27:1f:0a:97:ae:63:4c:6f:3e:75:3e:72:e4:3d:9d:69:6d: 67:d1:c7:13:e3:ed:e8:95:ff:bd:eb:5e:43:76:f4:33:49:ca: 0b:86:81:77:f6:8e:cf:ab:ec:e7:22:5d:f8:93:c9:f5:ba:4d: d8:6e:9e:df:e3:b4:22:7e:08:94:6e:cf:7e:3e:eb:cc:87:a3: bf:a6:2e:1b:6c:b1:57:fb:e3:f9:2d:ea:f3:cc:c4:09:de:38: cd:ce:2b:2d:f3:e5:33:f6:9a:b8:eb:fc:07:5b:f9:d2:ec:99: d2:14:ec:eb:66:bc:72:be:7a:e8:2b:6d:7d:7a:a8:54:4e:5e: 32:7c:d6:a1:aa:53:a1:2d:21:b8:a0:1b:95:ab:ec:2e:48:04: ba:74:d5:8b:1b:0a:95:f9:46:84:17:f9:57:b6:43:94:1d:46: d3:d4:8f:b2:b2:0f:d2:c4:9d:95:1e:00:d6:a6:0d:20:6b:12: 05:78:6f:f9:25:ee:7c:f1:f0:56:4f:04:59:c8:8a:5c:e4:df: 0c:50:43:7f:84:b3:54:d2:0c:b1:ec:5e:a0:9e:95:51:e4:78: 65:5d:3b:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwNjEyMjA0OTUzWhcNMjUwNjE5MjA0OTUzWjAYMRYwFAYD VQQDEw02ODRiM2Q3MS0zNzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyVsjtGHkxGHPFA2xIxG85Fpm2r4Cfz/DFhNg6Pimz4DnjsvbR+X4uEt169E 2+3jQQar03ipWfimzy3fI8jxi/bMv+dYiwFk7ss3vUVWAXlxv2nF2V6fUcHemDpZ DnNPqPwwMkhGJwIYxWFgmuInHubIjernguiA19RtMEUnumhDCierHnZ96ohQzfXd gSeR1O6ZKY+C993Hn52mDBGA8fv4odFEQUWUQFpbjNMMqOYj+d+08AFvH+ux0RoD 84w1QMH4WSIjmwLChHsNx54bJXOecm5tMDvj9X0LR9TzlBqpO4cuX537KpKHb7aG k3qCTlEhwp9rx+FXJ62nl9v5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYwZFV0 /hTuF/K7PqdpsC2DN6AbMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJTWVpBJaxIHGPZhZCkwWOEMv+GhfwFskGXAlIAoCYhFPaNQFJJx8K l65jTG8+dT5y5D2daW1n0ccT4+3olf+9615DdvQzScoLhoF39o7Pq+znIl34k8n1 uk3Ybp7f47QifgiUbs9+PuvMh6O/pi4bbLFX++P5LerzzMQJ3jjNzist8+Uz9pq4 6/wHW/nS7JnSFOzrZrxyvnroK219eqhUTl4yfNahqlOhLSG4oBuVq+wuSAS6dNWL GwqV+UaEF/lXtkOUHUbT1I+ysg/SxJ2VHgDWpg0gaxIFeG/5Je588fBWTwRZyIpc 5N8MUEN/hLNU0gyx7F6gnpVR5HhlXTvN -----END CERTIFICATE-----Generated at Sat Jun 14 19:22:32 2025 by rpki-client