$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: Uz9h+/zQLr3qDvKc0XEzdIrBbzWa7oHb4dvZE1/dZ1o= Subject key identifier: 92:FB:FC:0A:1D:2D:76:48:CD:41:2F:FC:BB:19:66:E9:5F:52:E5:27 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05A0 Signing time: Mon 30 Jun 2025 23:34:11 +0000 Manifest this update: Mon 30 Jun 2025 23:34:11 +0000 Manifest next update: Mon 07 Jul 2025 23:34:11 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: GeNZupkcUSHVwFPb9sjrM4JqOPGOTNqvppagNNHRT40=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: Vy6NYC5JIjZxR2Zo1j1YR7/JfYdq8GexI/1xooXpvMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1444 (0x5a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Jun 30 23:34:11 2025 GMT Not After : Jul 7 23:34:11 2025 GMT Subject: CN=68631ef3-6bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:57:6a:3c:a8:78:dd:16:9b:8e:47:71:b0: e4:63:dd:24:6a:fb:0c:f9:90:cd:19:73:ad:ed:f3: 6a:a4:32:db:98:43:75:90:27:90:f3:d2:6e:98:e4: c7:35:d8:07:3d:03:14:fa:e9:bb:08:05:64:3b:3e: f5:68:ac:9c:8f:1c:69:3f:a6:24:62:aa:bc:da:bb: 10:e0:ca:61:b8:ba:e2:3b:f8:b0:3b:7d:77:86:bc: 45:b5:f3:f9:89:1d:5a:d2:21:84:0b:2b:79:1d:8d: fc:b3:f4:cc:90:41:49:f5:b7:03:ed:50:ec:7c:3d: 66:31:1b:10:5a:98:24:48:33:36:bf:53:35:15:58: 3b:55:23:94:33:a6:f7:26:b9:8b:6a:d1:0c:7a:db: bc:6f:1a:8a:5c:21:05:46:1a:eb:07:01:f0:7e:24: 4d:d8:64:09:f6:d5:4a:6d:31:23:13:f3:0f:89:b5: 71:76:7e:f3:09:4e:07:52:3f:79:3d:96:a0:6d:ee: 10:d6:75:25:4d:2a:f7:b5:91:1b:cf:7f:8b:9a:ac: 7b:cc:76:3f:4a:a8:5b:01:35:46:60:e2:9b:32:44: 6e:4a:ad:8e:08:2d:3b:9a:98:7a:99:f8:39:b6:b7: 30:f9:76:12:f3:6a:b1:2a:6b:fc:1b:43:37:25:89: ba:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:FC:0A:1D:2D:76:48:CD:41:2F:FC:BB:19:66:E9:5F:52:E5:27 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:72:35:56:7f:38:4c:9b:04:1d:e1:22:6e:fc:e3:3e:4b:bb: e8:71:df:ef:d1:60:a8:a5:0f:a9:f6:de:5c:8e:b3:93:b3:48: 97:e4:12:3a:42:ad:fc:66:c4:fb:50:aa:b4:c5:31:11:93:ae: 8d:40:ad:93:83:7e:42:e8:3c:d6:ce:f3:9c:c4:5a:eb:e0:90: 01:9c:7f:c6:af:53:a4:b3:82:0c:ca:d5:b0:5d:3e:e4:d7:b6: fc:4c:1b:32:34:02:8f:d6:76:2a:95:64:9f:1d:88:38:ff:94: cd:1a:fc:35:76:50:0f:f3:a3:b5:fc:14:5c:9a:e6:06:06:c1: 9c:57:3b:e0:5a:b0:c3:97:1b:31:e7:b0:d8:fb:04:c4:fc:2a: 2c:b2:1d:ce:ee:ab:2f:0d:51:fd:21:49:45:6b:d8:40:8c:fd: 2d:66:fa:b2:f4:8c:b7:72:63:a0:97:38:fe:01:e3:7c:36:2b: e8:07:68:4c:05:9d:57:3a:73:00:d4:e8:9d:dc:0c:5a:eb:b4: 63:b2:4f:4d:c6:87:67:3e:e9:1c:97:87:db:7a:52:3e:23:60: a4:5f:20:42:bb:b4:bc:9e:6d:ec:3f:1b:da:91:41:b3:ca:b3: 8a:98:2b:f6:4a:35:8f:31:2f:83:52:6b:3e:25:27:b3:3a:af: b6:c4:3d:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUwNjMwMjMzNDExWhcNMjUwNzA3MjMzNDExWjAYMRYwFAYD VQQDEw02ODYzMWVmMy02YmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMhXajyoeN0Wm45HcbDkY90kavsM+ZDNGXOt7fNqpDLbmEN1kCeQ89JumOTH NdgHPQMU+um7CAVkOz71aKycjxxpP6YkYqq82rsQ4MphuLriO/iwO313hrxFtfP5 iR1a0iGECyt5HY38s/TMkEFJ9bcD7VDsfD1mMRsQWpgkSDM2v1M1FVg7VSOUM6b3 JrmLatEMetu8bxqKXCEFRhrrBwHwfiRN2GQJ9tVKbTEjE/MPibVxdn7zCU4HUj95 PZagbe4Q1nUlTSr3tZEbz3+Lmqx7zHY/SqhbATVGYOKbMkRuSq2OCC07mph6mfg5 trcw+XYS82qxKmv8G0M3JYm6RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJL7/Aod LXZIzUEv/LsZZulfUuUnMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdcjVWfzhMmwQd4SJu/OM+S7vocd/v0WCopQ+p9t5cjrOTs0iX5BI6 Qq38ZsT7UKq0xTERk66NQK2Tg35C6DzWzvOcxFrr4JABnH/Gr1Oks4IMytWwXT7k 17b8TBsyNAKP1nYqlWSfHYg4/5TNGvw1dlAP86O1/BRcmuYGBsGcVzvgWrDDlxsx 57DY+wTE/Cossh3O7qsvDVH9IUlFa9hAjP0tZvqy9Iy3cmOglzj+AeN8NivoB2hM BZ1XOnMA1Oid3Axa67Rjsk9NxodnPukcl4fbelI+I2CkXyBCu7S8nm3sPxvakUGz yrOKmCv2SjWPMS+DUms+JSezOq+2xD2p -----END CERTIFICATE-----Generated at Wed Jul 2 19:24:33 2025 by rpki-client