$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: QAVB4IjQ9cxgOJZ2wMZoeO6VgX6fI63QfLfkF0y84Nc= Subject key identifier: 56:53:DD:DB:83:45:5E:F7:B5:F4:94:67:E7:AE:52:D9:D8:A7:BA:C2 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05BD Signing time: Fri 22 Aug 2025 23:16:53 +0000 Manifest this update: Fri 22 Aug 2025 23:16:52 +0000 Manifest next update: Fri 29 Aug 2025 23:16:52 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: 1OZ8E4GkHItwrq0TA5t/ofPqh7fSnPB0UnlSONAiFQA=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:16:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Aug 22 23:16:52 2025 GMT Not After : Aug 29 23:16:52 2025 GMT Subject: CN=68a8fa64-32f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:c5:13:e5:89:d5:8c:94:99:36:a0:67:36: 0d:a8:6d:fa:80:bb:56:57:d4:3d:36:4b:e9:c9:56: 8a:92:ad:43:df:0a:a2:7e:4b:fd:4b:fd:9d:14:1c: 94:70:43:f2:22:2e:97:5b:99:30:d8:88:68:f9:41: 9f:3b:d5:80:ab:4d:55:79:a6:90:5d:a8:25:7e:1a: a6:7b:10:b7:e2:bc:5f:2c:67:23:65:40:39:9a:48: 78:2e:e3:3a:93:b1:f7:c1:b3:42:60:be:17:d3:73: 36:a0:97:2a:89:f0:8b:51:db:82:99:16:33:79:3f: 34:1a:ec:d6:e9:4a:3a:2e:93:ee:9d:33:c2:1b:d9: d5:3f:8e:51:bf:a8:7c:d7:7a:c0:74:38:5f:c2:0a: c3:f4:2b:82:83:2d:f5:a6:9e:3a:7b:e1:52:61:f6: 80:55:bf:50:d4:67:73:0b:4a:39:3c:78:5a:16:50: f4:7d:f8:9b:50:f7:84:0e:0f:0d:92:c1:5a:87:f9: 84:1b:ba:95:13:ef:e5:a0:63:c7:18:db:8a:a1:c1: 85:a3:0d:2b:69:87:5a:4e:d7:b2:33:69:c9:42:5d: 17:d2:8e:78:9f:cf:e2:66:28:78:49:71:99:1e:be: d1:33:ad:ed:cc:0a:dd:b6:d1:fa:29:97:9a:9b:d2: f4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:53:DD:DB:83:45:5E:F7:B5:F4:94:67:E7:AE:52:D9:D8:A7:BA:C2 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:78:f0:39:ba:93:93:0a:23:b8:fb:45:12:50:1e:9e:28:49: 47:09:cc:03:3e:4c:b0:21:d4:bb:d6:11:9a:c7:60:94:71:f6: 30:b1:cf:da:9a:1f:43:bb:2e:5a:75:47:d3:cf:b0:cb:b6:af: 8d:a5:eb:1c:41:c6:61:a6:b8:ad:29:66:ad:8f:e3:a8:6f:ab: 1a:c3:09:51:39:db:79:d2:bf:46:68:83:ab:23:72:23:e7:e0: e1:fa:38:b9:fb:a0:d8:25:81:fe:06:91:68:b5:00:27:c3:d7: 09:c0:37:d3:3f:e0:ec:f6:ea:0a:68:f5:de:9d:d0:7e:fd:27: 75:04:a9:db:1c:b7:38:b6:3c:29:73:96:1e:b9:48:84:2f:6f: a3:8e:ff:50:90:d7:c0:7e:d9:5f:50:0e:81:68:7a:3d:49:17: db:9d:4e:c3:69:ef:45:77:e5:bd:d0:1a:ce:30:8f:fb:d5:49: 32:c3:ec:6b:e8:85:e2:1e:37:53:70:d7:3f:59:5a:c2:65:11: b4:5f:09:65:e2:99:2c:28:72:51:54:f2:ae:f1:2c:3e:83:5c: 30:15:0d:79:30:20:08:a8:c5:1f:a0:f5:67:54:9a:bd:30:8f: b8:19:c4:dc:92:cb:76:5f:df:6f:60:8f:57:8e:f8:33:79:84: 27:63:73:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUwODIyMjMxNjUyWhcNMjUwODI5MjMxNjUyWjAYMRYwFAYD VQQDEw02OGE4ZmE2NC0zMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn8nFE+WJ1YyUmTagZzYNqG36gLtWV9Q9NkvpyVaKkq1D3wqifkv9S/2dFByU cEPyIi6XW5kw2Iho+UGfO9WAq01VeaaQXaglfhqmexC34rxfLGcjZUA5mkh4LuM6 k7H3wbNCYL4X03M2oJcqifCLUduCmRYzeT80GuzW6Uo6LpPunTPCG9nVP45Rv6h8 13rAdDhfwgrD9CuCgy31pp46e+FSYfaAVb9Q1GdzC0o5PHhaFlD0ffibUPeEDg8N ksFah/mEG7qVE+/loGPHGNuKocGFow0raYdaTteyM2nJQl0X0o54n8/iZih4SXGZ Hr7RM63tzArdttH6KZeam9L0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZT3duD RV73tfSUZ+euUtnYp7rCMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ePA5upOTCiO4+0USUB6eKElHCcwDPkywIdS71hGax2CUcfYwsc/a mh9Duy5adUfTz7DLtq+NpescQcZhpritKWatj+Oob6sawwlROdt50r9GaIOrI3Ij 5+Dh+ji5+6DYJYH+BpFotQAnw9cJwDfTP+Ds9uoKaPXendB+/Sd1BKnbHLc4tjwp c5YeuUiEL2+jjv9QkNfAftlfUA6BaHo9SRfbnU7Dae9Fd+W90BrOMI/71Ukyw+xr 6IXiHjdTcNc/WVrCZRG0Xwll4pksKHJRVPKu8Sw+g1wwFQ15MCAIqMUfoPVnVJq9 MI+4GcTckst2X99vYI9XjvgzeYQnY3PJ -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:28 2025 by rpki-client