$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: rSC27zlf2tjhAt73zGIJjbvhbEsey85TOU98z3wnsZw= Subject key identifier: F3:CF:26:70:1C:06:B6:9B:99:85:01:1F:10:1C:3F:22:E3:90:56:CD Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07A9 Signing time: Fri 18 Apr 2025 21:14:54 +0000 Manifest this update: Fri 18 Apr 2025 21:14:54 +0000 Manifest next update: Fri 25 Apr 2025 21:14:54 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: Bgg5WsQDZSp6PCGnHRcdXREkbzdANA2dvsatrnWeovc=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 21:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1965 (0x7ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Apr 18 21:14:54 2025 GMT Not After : Apr 25 21:14:54 2025 GMT Subject: CN=6802c0ce-070d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:be:09:34:35:bb:1d:63:3f:6e:b9:df:d2: 5a:c6:c9:f7:d5:ac:b2:0b:c6:08:4e:96:fe:5d:c9: 60:df:0b:a3:e2:fc:36:c0:df:ff:f6:b3:db:b0:2d: 2b:21:63:b2:eb:ae:d8:11:ec:99:49:c8:9d:4d:0b: 10:d5:e1:2a:0b:32:7c:37:e2:e7:c3:80:d6:4f:8d: e4:1f:61:b7:86:13:37:6d:7e:f9:e8:5b:80:80:6b: d8:27:2f:67:96:e6:65:b6:f1:d9:67:1e:8e:1f:82: 0a:73:1e:fe:b9:a8:7f:ee:24:e1:29:cb:35:e9:f9: df:3c:59:6b:21:e7:5b:4a:40:39:c5:7c:b0:df:74: 98:b7:30:77:79:bd:3e:d8:8f:c3:1c:0d:e0:81:57: 57:e2:92:a1:86:c6:5a:dc:e5:40:5e:ea:0b:85:77: 53:c2:4c:9a:e2:a9:e8:f7:33:db:7a:a3:23:2e:d2: c9:ed:9b:26:c2:30:a2:4b:f6:ec:50:70:ba:4f:52: e0:11:4a:aa:86:ae:0a:aa:d7:92:f3:7f:eb:43:00: 46:de:e9:10:2b:3c:7e:3a:13:21:c4:0e:28:0b:68: e0:43:e6:e7:df:90:bf:7d:a6:d4:2c:c9:23:b4:ac: 3f:f4:12:7c:3d:77:ca:9a:b6:c2:cb:f7:5a:3a:05: d6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CF:26:70:1C:06:B6:9B:99:85:01:1F:10:1C:3F:22:E3:90:56:CD X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:bb:6e:c7:cd:b3:83:3c:5d:7a:1a:ac:34:f3:66:82:91:46: 2f:3d:ae:68:b1:7d:79:ca:f0:a8:f3:59:13:60:c2:dc:5d:97: 02:ab:64:1b:ab:cf:b7:89:2a:2d:1c:56:ab:0c:69:ef:f8:12: ac:a1:2e:5e:ce:b0:a4:a7:17:21:eb:49:b2:d4:99:8e:59:54: 03:93:f5:24:51:d3:5c:b7:57:9c:7f:cb:72:e7:35:bd:df:13: ac:45:f3:1b:13:42:09:ba:62:d8:97:f8:89:4c:51:43:7d:c3: c5:90:52:9d:4c:aa:be:16:50:34:00:c5:35:39:7a:6f:4d:44: 09:9d:8b:92:4b:75:74:b5:93:00:ab:bc:7c:09:29:49:2f:4f: 17:35:ba:4e:85:84:19:dc:a7:7c:ce:f9:43:c9:cd:3c:79:0d: 42:e6:82:17:f9:a1:3a:4d:26:df:eb:e9:20:05:d2:6c:32:d0: 18:7a:c5:24:5c:d2:2f:53:3b:7d:3c:30:ff:48:9f:bb:15:c0: 51:40:6b:a1:7f:6c:71:74:62:35:f1:92:14:df:43:16:e5:14: 63:10:16:5d:ce:3c:69:53:fd:b8:3a:25:f1:1b:a8:0f:f4:94: bc:8c:c6:6c:25:d0:20:5a:cb:34:57:d9:18:2f:41:3b:46:31: 75:67:f6:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwNDE4MjExNDU0WhcNMjUwNDI1MjExNDU0WjAYMRYwFAYD VQQDEw02ODAyYzBjZS0wNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfi+CTQ1ux1jP26539Jaxsn31ayyC8YITpb+Xclg3wuj4vw2wN//9rPbsC0r IWOy667YEeyZScidTQsQ1eEqCzJ8N+Lnw4DWT43kH2G3hhM3bX756FuAgGvYJy9n luZltvHZZx6OH4IKcx7+uah/7iThKcs16fnfPFlrIedbSkA5xXyw33SYtzB3eb0+ 2I/DHA3ggVdX4pKhhsZa3OVAXuoLhXdTwkya4qno9zPbeqMjLtLJ7ZsmwjCiS/bs UHC6T1LgEUqqhq4KqteS83/rQwBG3ukQKzx+OhMhxA4oC2jgQ+bn35C/fabULMkj tKw/9BJ8PXfKmrbCy/daOgXW6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPPJnAc BrabmYUBHxAcPyLjkFbNMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBku27HzbODPF16Gqw082aCkUYvPa5osX15yvCo81kTYMLcXZcCq2Qb q8+3iSotHFarDGnv+BKsoS5ezrCkpxch60my1JmOWVQDk/UkUdNct1ecf8ty5zW9 3xOsRfMbE0IJumLYl/iJTFFDfcPFkFKdTKq+FlA0AMU1OXpvTUQJnYuSS3V0tZMA q7x8CSlJL08XNbpOhYQZ3Kd8zvlDyc08eQ1C5oIX+aE6TSbf6+kgBdJsMtAYesUk XNIvUzt9PDD/SJ+7FcBRQGuhf2xxdGI18ZIU30MW5RRjEBZdzjxpU/24OiXxG6gP 9JS8jMZsJdAgWss0V9kYL0E7RjF1Z/YD -----END CERTIFICATE-----Generated at Sat Apr 19 07:58:00 2025 by rpki-client