$ rpki-client -vvf rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft File: gp2nBxh7qgC6hmJHVioV_n23Vyo.mft (raw, json) Hash identifier: CNQ+IBji4iyghiJrSX3Tk00oJjabnC+7XytDr8zeJ7s= Subject key identifier: 10:7D:97:A0:A4:A5:C5:6B:A8:AE:59:70:DA:02:F4:62:D5:C7:CA:71 Authority key identifier: 82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A Certificate issuer: /CN=A9183CF9/serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft Manifest number: 07E7 Signing time: Wed 20 Aug 2025 21:05:07 +0000 Manifest this update: Wed 20 Aug 2025 21:05:07 +0000 Manifest next update: Wed 27 Aug 2025 21:05:07 +0000 Files and hashes: 1: gp2nBxh7qgC6hmJHVioV_n23Vyo.crl (hash: 7iJrp5IMJnjbCCC9kttzYETKsT/DTGLRwAHgujimN9E=) 2: AE77A386F80211EAAA7CE76CC4F9AE02.roa (hash: WPstyTH/RqPNgoRiwZcnrVNZ6rFbCif3q2kc7ftnDKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183CF9, serialNumber=829DA707187BAA00BA866247562A15FE7DB7572A Validity Not Before: Aug 20 21:05:07 2025 GMT Not After : Aug 27 21:05:07 2025 GMT Subject: CN=68a63883-a348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:11:f4:9f:cc:88:1b:8d:3f:da:14:76:fe: 96:66:93:c6:7d:9f:ea:5e:8b:82:8d:a7:5d:dc:7b: ab:b9:96:78:9c:5c:50:c2:78:8c:f4:be:0b:b0:c9: 8d:f3:aa:46:55:c1:a3:23:c9:df:4f:2c:6f:d1:f1: 5c:57:1b:bd:11:46:9c:9e:34:49:09:1b:69:e5:87: 60:bb:12:27:42:12:a6:ea:85:eb:11:73:16:35:5b: 57:b2:7c:3b:fe:90:81:7c:d3:f9:15:7c:ad:bf:f4: b5:32:ea:bf:e2:10:92:d2:f0:fd:d8:c8:4e:d7:95: 2b:b3:86:75:64:7a:65:6e:6c:b7:14:26:46:3e:59: f3:40:a5:50:e5:d0:a6:d3:0a:ce:49:84:fe:50:fa: 31:ec:82:36:d1:70:ec:b6:a5:b3:8b:18:f0:5d:73: 69:ef:eb:23:1d:77:fc:fa:2f:a1:9f:79:e3:03:69: 8d:3b:31:8b:82:70:3d:75:9e:0a:f2:71:96:61:82: 35:3a:aa:bb:f3:06:cb:f6:2e:2e:4c:cf:07:70:c6: 83:29:20:7e:29:10:23:3a:00:5d:98:df:02:a5:bf: ad:67:b2:33:91:2d:2e:fc:6c:03:48:59:ca:5f:d6: 23:4f:63:a6:52:6b:67:ef:63:2c:62:86:82:2e:bb: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7D:97:A0:A4:A5:C5:6B:A8:AE:59:70:DA:02:F4:62:D5:C7:CA:71 X509v3 Authority Key Identifier: keyid:82:9D:A7:07:18:7B:AA:00:BA:86:62:47:56:2A:15:FE:7D:B7:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp2nBxh7qgC6hmJHVioV_n23Vyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183CF9/EC62EC94F7FF11EA835ECC64C4F9AE02/gp2nBxh7qgC6hmJHVioV_n23Vyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cc:cb:c0:31:db:82:53:01:2b:7a:57:3a:68:24:4b:b2:65: 56:1d:3c:33:bb:1a:fe:a7:b4:6a:4f:18:6f:e0:aa:7a:2d:5b: 25:46:86:a2:68:4a:08:ae:e6:32:84:ce:2d:f3:1f:30:be:80: c5:e0:3a:4d:ae:c5:97:e3:78:22:67:35:43:d9:59:aa:80:50: a8:05:19:01:79:37:40:d4:66:ca:a5:4e:81:58:94:64:77:0e: 86:14:81:05:3a:57:e8:f9:22:c8:76:37:82:4c:ff:39:63:46: c3:a1:04:4d:c7:08:84:8c:b3:6b:b9:e1:66:ea:0f:53:9d:9b: 1a:dc:a8:ca:31:7e:b8:52:ca:c4:9d:26:06:44:b6:c5:c7:08: 78:87:49:b8:e4:f4:e5:49:5e:71:b0:1b:5c:57:5a:4e:12:bb: 94:70:90:08:5a:21:f4:6a:db:9f:6c:77:76:6c:21:d9:50:0c: 69:3b:08:42:e7:5e:21:bf:91:be:47:e9:8d:f7:5d:89:60:98: 3c:4d:bd:6d:e6:3d:24:fd:92:06:06:59:4a:f3:4a:e4:97:32: ae:97:15:e5:bb:6e:81:e1:ac:a3:08:94:a3:8b:01:d7:29:eb: 3a:43:85:98:f2:3d:e0:da:f8:16:2f:d7:12:12:83:3f:4e:f6: 29:f9:53:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNDRjkxMTAvBgNVBAUTKDgyOURBNzA3MTg3QkFBMDBCQTg2NjI0NzU2MkExNUZF N0RCNzU3MkEwHhcNMjUwODIwMjEwNTA3WhcNMjUwODI3MjEwNTA3WjAYMRYwFAYD VQQDEw02OGE2Mzg4My1hMzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqP8R9J/MiBuNP9oUdv6WZpPGfZ/qXouCjadd3HuruZZ4nFxQwniM9L4LsMmN 86pGVcGjI8nfTyxv0fFcVxu9EUacnjRJCRtp5YdguxInQhKm6oXrEXMWNVtXsnw7 /pCBfNP5FXytv/S1Muq/4hCS0vD92MhO15Urs4Z1ZHplbmy3FCZGPlnzQKVQ5dCm 0wrOSYT+UPox7II20XDstqWzixjwXXNp7+sjHXf8+i+hn3njA2mNOzGLgnA9dZ4K 8nGWYYI1Oqq78wbL9i4uTM8HcMaDKSB+KRAjOgBdmN8Cpb+tZ7IzkS0u/GwDSFnK X9YjT2OmUmtn72MsYoaCLruTTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB9l6Ck pcVrqK5ZcNoC9GLVx8pxMB8GA1UdIwQYMBaAFIKdpwcYe6oAuoZiR1YqFf59t1cq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0NGOS9FQzYyRUM5NEY3 RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3FnQzZobUpIVmlvVl9uMjNW eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwMm5CeGg3cWdDNmhtSkhWaW9WX24yM1Z5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0NGOS9FQzYyRUM5NEY3RkYxMUVBODM1RUNDNjRDNEY5QUUwMi9ncDJuQnhoN3Fn QzZobUpIVmlvVl9uMjNWeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARzMvAMduCUwErelc6aCRLsmVWHTwzuxr+p7RqTxhv4Kp6LVslRoai aEoIruYyhM4t8x8wvoDF4DpNrsWX43giZzVD2VmqgFCoBRkBeTdA1GbKpU6BWJRk dw6GFIEFOlfo+SLIdjeCTP85Y0bDoQRNxwiEjLNrueFm6g9TnZsa3KjKMX64UsrE nSYGRLbFxwh4h0m45PTlSV5xsBtcV1pOEruUcJAIWiH0atufbHd2bCHZUAxpOwhC 514hv5G+R+mN912JYJg8Tb1t5j0k/ZIGBllK80rklzKulxXlu26B4ayjCJSjiwHX Kes6Q4WY8j3g2vgWL9cSEoM/TvYp+VOR -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:41 2025 by rpki-client