$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft File: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft (raw, json) Hash identifier: owdBf+a/30QlMOO3xTW2mhET+hU4V9fG+wjOSNbdyF4= Subject key identifier: 0A:9C:08:02:36:4B:5A:2C:20:D9:4C:DA:55:50:CB:A0:41:00:45:E0 Authority key identifier: 18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 Certificate issuer: /CN=A9155810/serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft Manifest number: 66 Signing time: Thu 03 Jul 2025 07:17:48 +0000 Manifest this update: Thu 03 Jul 2025 07:17:47 +0000 Manifest next update: Thu 10 Jul 2025 07:17:47 +0000 Files and hashes: 1: GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl (hash: /m7vdiq0KvJxkXM89nnkQ26OMHZsXbPGs/flNvUp30A=) 2: 1BC9B310C88E11EF8E789228C4F9AE02.roa (hash: S0OXmYbNImJgx4uOC0U7mhQnmuYrYNwVWM5SzyT3w3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155810, serialNumber=18EDABB2820CE25F90E8635C13B7F0D45F046376 Validity Not Before: Jul 3 07:17:47 2025 GMT Not After : Jul 10 07:17:47 2025 GMT Subject: CN=68662e9b-a38b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:ba:a1:6a:c0:72:7e:69:c2:34:ee:e8:cf: 52:59:ad:2c:35:3e:4e:88:e7:ce:91:11:c2:3e:8c: a5:c2:8a:fa:ea:7e:d6:95:41:09:3b:c8:f5:5f:06: be:9b:4a:51:7e:aa:dc:91:8f:86:5d:95:3c:9b:22: 92:17:4f:f2:7f:68:17:2c:9c:23:7d:a7:27:5e:bf: c4:53:ce:07:c2:c3:f8:5b:6b:cd:cc:39:5c:0b:cc: 2c:35:21:ca:a8:47:0c:c1:dc:a9:78:dd:33:8f:b0: 1f:65:0d:d5:0e:b1:ba:b2:99:9d:fb:b6:27:ec:97: 52:97:61:cd:41:f8:87:40:16:cb:76:e6:83:64:1f: 2a:d1:a0:e4:a9:f7:57:48:20:68:40:0f:d3:d3:7c: ce:41:18:f1:71:7a:53:00:35:58:5f:05:d0:38:9b: 73:5e:1b:7d:b5:ee:74:e5:92:a6:e1:0f:eb:55:65: c4:ef:9b:2b:54:96:f7:f9:0d:1d:7b:8c:f8:b0:5b: d8:58:66:fb:1d:a7:e4:65:4e:cd:b8:ab:28:e1:80: 6a:c5:e8:c0:4d:6a:19:3a:bf:98:eb:d9:d9:e8:4b: 71:f0:2f:88:08:1f:69:f4:ca:30:36:72:02:4c:41: f9:52:60:24:a3:19:e4:61:ef:bc:45:a7:3e:39:85: f0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:9C:08:02:36:4B:5A:2C:20:D9:4C:DA:55:50:CB:A0:41:00:45:E0 X509v3 Authority Key Identifier: keyid:18:ED:AB:B2:82:0C:E2:5F:90:E8:63:5C:13:B7:F0:D4:5F:04:63:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/7BA8D39CC70811EFA89B0C5FC4F9AE02/GO2rsoIM4l-Q6GNcE7fw1F8EY3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f2:b9:8e:b7:06:38:19:f9:29:2f:63:3f:3d:d9:87:15:d4: b6:4a:28:e0:b9:8a:7d:72:61:e3:2c:c8:0a:7b:0e:8d:19:9b: 54:66:92:dd:78:de:99:f5:63:a9:b2:9b:18:35:96:45:8a:9d: 32:5a:ad:f7:8c:93:2d:ca:c1:31:e0:bf:75:14:89:ba:9b:3f: 50:22:32:3e:85:c5:e8:c6:34:d3:77:3c:a8:cf:5d:23:87:1b: 5a:70:bf:10:54:ab:4f:3f:93:2c:89:02:41:95:bf:ae:83:d7: db:2e:e1:68:28:e9:6a:66:69:53:12:2f:06:2d:f1:0e:c0:9e: d1:0a:85:0f:52:c2:67:56:fa:2f:8c:b1:c5:2b:ad:52:f0:75: 79:7e:74:03:46:3c:b2:0d:51:0c:e5:0d:fa:f0:db:2e:bd:a9: d6:38:7f:d7:5c:9b:82:81:d3:be:8d:82:7d:1f:9f:45:bf:e5: ef:d1:ae:a6:06:c3:47:c6:78:58:c6:c2:21:12:e3:9f:7f:d8: 60:0b:d3:23:25:22:40:da:de:1b:e0:72:3e:9b:58:14:28:35: 26:de:00:3c:5e:b9:95:5d:5c:d3:c0:8f:4f:05:29:42:ca:31: 86:78:4a:12:bf:79:14:44:88:d3:d3:e0:c1:d3:3c:0c:e1:90: 25:15:56:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTgxMDExMC8GA1UEBRMoMThFREFCQjI4MjBDRTI1RjkwRTg2MzVDMTNCN0YwRDQ1 RjA0NjM3NjAeFw0yNTA3MDMwNzE3NDdaFw0yNTA3MTAwNzE3NDdaMBgxFjAUBgNV BAMTDTY4NjYyZTliLWEzOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcu7qhasByfmnCNO7oz1JZrSw1Pk6I586REcI+jKXCivrqftaVQQk7yPVfBr6b SlF+qtyRj4ZdlTybIpIXT/J/aBcsnCN9pydev8RTzgfCw/hba83MOVwLzCw1Icqo RwzB3Kl43TOPsB9lDdUOsbqymZ37tifsl1KXYc1B+IdAFst25oNkHyrRoOSp91dI IGhAD9PTfM5BGPFxelMANVhfBdA4m3NeG3217nTlkqbhD+tVZcTvmytUlvf5DR17 jPiwW9hYZvsdp+RlTs24qyjhgGrF6MBNahk6v5jr2dnoS3HwL4gIH2n0yjA2cgJM QflSYCSjGeRh77xFpz45hfBPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCpwIAjZL Wiwg2UzaVVDLoEEAReAwHwYDVR0jBBgwFoAUGO2rsoIM4l+Q6GNcE7fw1F8EY3Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODEwLzdCQThEMzlDQzcw ODExRUZBODlCMEM1RkM0RjlBRTAyL0dPMnJzb0lNNGwtUTZHTmNFN2Z3MUY4RVkz WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvR08ycnNvSU00bC1RNkdOY0U3ZncxRjhFWTNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1 ODEwLzdCQThEMzlDQzcwODExRUZBODlCMEM1RkM0RjlBRTAyL0dPMnJzb0lNNGwt UTZHTmNFN2Z3MUY4RVkzWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJHyuY63BjgZ+SkvYz892YcV1LZKKOC5in1yYeMsyAp7Do0Zm1Rmkt14 3pn1Y6mymxg1lkWKnTJarfeMky3KwTHgv3UUibqbP1AiMj6FxejGNNN3PKjPXSOH G1pwvxBUq08/kyyJAkGVv66D19su4Wgo6WpmaVMSLwYt8Q7AntEKhQ9SwmdW+i+M scUrrVLwdXl+dANGPLINUQzlDfrw2y69qdY4f9dcm4KB076Ngn0fn0W/5e/RrqYG w0fGeFjGwiES459/2GAL0yMlIkDa3hvgcj6bWBQoNSbeADxeuZVdXNPAj08FKULK MYZ4ShK/eRREiNPT4MHTPAzhkCUVVnE= -----END CERTIFICATE-----Generated at Fri Jul 4 17:59:05 2025 by rpki-client