$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: PaNo+gUTny7vxtNvfQgaWMKa9VQUG6b0L79tFYTZEwg= Subject key identifier: 05:D9:D9:B8:3F:91:AC:DC:B0:F4:A3:F3:D6:18:95:15:17:9A:E4:30 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1A27 Signing time: Wed 02 Jul 2025 16:28:48 +0000 Manifest this update: Wed 02 Jul 2025 16:28:48 +0000 Manifest next update: Wed 09 Jul 2025 16:28:48 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: c3nQXdT2GxDMy/457kKowMgu6fD+5rda4KL+POXMN5g=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: CZNc6WzONNJeWPZ6+n2sowdun9wtquppPoiv3hGmfQ8=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 6CZidtXoDBfZbkBWuLrvDzWnGJ2dpo308yRpcF6lZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6711 (0x1a37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Jul 2 16:28:48 2025 GMT Not After : Jul 9 16:28:48 2025 GMT Subject: CN=68655e40-33be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:4b:8f:cf:40:30:0f:06:f5:b8:dd:86:e7: 78:7e:a2:e7:09:5b:bb:dd:87:46:66:30:9e:bb:a7: 00:46:72:e2:ca:ed:8d:a5:46:45:9c:62:61:04:bf: 8e:38:f7:23:2d:cd:16:39:37:69:ca:e5:0e:b8:cd: 8d:42:73:01:1c:d6:9e:55:81:0c:7f:3e:9a:22:d9: 7f:97:5f:e3:99:88:7e:b3:12:d1:5a:92:ef:a5:7d: f5:6b:b4:c1:6e:6c:96:13:93:93:56:93:6e:91:ae: 5b:dc:18:1c:19:11:84:9e:f2:94:c2:19:56:79:b7: 9c:57:c4:8a:45:d8:17:3b:dc:53:07:34:71:ce:00: 5c:8c:54:45:8d:05:40:dc:db:63:97:ea:a2:a3:06: 54:33:9d:74:30:32:94:1d:33:5d:18:5e:1d:c5:b6: d8:2d:72:9d:ac:a0:7a:60:c0:d6:94:2b:74:47:a9: fb:27:4b:72:86:b1:28:0f:2f:c0:4b:66:59:bf:d6: 27:bb:26:f5:a2:5e:b0:fd:74:4e:7e:b0:a1:fd:c0: 70:23:0b:d9:69:65:1d:0d:92:a6:f2:22:b8:60:25: 27:17:80:90:97:55:84:c4:4f:1f:dc:6e:56:bd:96: e3:02:8a:1d:11:e5:33:e4:f8:c8:8b:10:3b:bb:8b: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D9:D9:B8:3F:91:AC:DC:B0:F4:A3:F3:D6:18:95:15:17:9A:E4:30 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:8f:49:7a:b9:38:28:32:49:3c:cc:49:cc:15:4a:00:0f:91: 1e:bb:f8:d1:0e:e7:0c:4c:7e:5f:7e:b1:57:98:ba:ee:b8:8f: 16:a4:91:52:ec:4c:95:70:7f:55:24:45:a1:30:d6:5e:18:b9: 38:d8:db:02:80:d2:1a:b7:41:11:ab:19:60:da:06:e3:3c:d5: 01:c3:b1:6b:9c:61:1d:38:0f:28:55:0c:5f:11:f8:d3:38:30: 9b:da:f3:92:38:99:f0:ec:87:64:d8:22:83:7c:7f:7e:25:3e: ab:6c:4c:ca:9f:12:d6:be:e1:ff:7b:7a:7b:39:0c:9f:d6:be: 51:34:e4:0b:6c:24:9a:ed:da:2b:e0:72:5e:1b:6a:15:5b:ff: 88:ae:94:27:8f:66:12:b1:0b:3e:65:87:7f:a1:5b:29:1b:40: b8:ce:a0:80:b6:db:ff:2c:e5:38:e6:52:ac:af:e8:01:93:ef: cb:8e:28:b1:8b:eb:6b:2e:63:24:c4:05:71:7d:dc:de:93:41: a1:b6:20:73:77:26:cf:6d:b9:3d:ec:2b:3a:e2:33:e8:1c:b8: 23:95:01:5e:b6:5a:80:22:b7:b0:4c:83:7d:5c:ea:cc:d4:0b: 8d:35:58:18:27:70:04:06:c4:ae:5c:91:0d:38:15:ae:e0:ee: 90:da:e4:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNzAyMTYyODQ4WhcNMjUwNzA5MTYyODQ4WjAYMRYwFAYD VQQDEw02ODY1NWU0MC0zM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwk9Lj89AMA8G9bjdhud4fqLnCVu73YdGZjCeu6cARnLiyu2NpUZFnGJhBL+O OPcjLc0WOTdpyuUOuM2NQnMBHNaeVYEMfz6aItl/l1/jmYh+sxLRWpLvpX31a7TB bmyWE5OTVpNuka5b3BgcGRGEnvKUwhlWebecV8SKRdgXO9xTBzRxzgBcjFRFjQVA 3Ntjl+qiowZUM510MDKUHTNdGF4dxbbYLXKdrKB6YMDWlCt0R6n7J0tyhrEoDy/A S2ZZv9Ynuyb1ol6w/XROfrCh/cBwIwvZaWUdDZKm8iK4YCUnF4CQl1WExE8f3G5W vZbjAoodEeUz5PjIixA7u4sY9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAXZ2bg/ kazcsPSj89YYlRUXmuQwMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRj0l6uTgoMkk8zEnMFUoAD5Eeu/jRDucMTH5ffrFXmLruuI8WpJFS 7EyVcH9VJEWhMNZeGLk42NsCgNIat0ERqxlg2gbjPNUBw7FrnGEdOA8oVQxfEfjT ODCb2vOSOJnw7Idk2CKDfH9+JT6rbEzKnxLWvuH/e3p7OQyf1r5RNOQLbCSa7dor 4HJeG2oVW/+IrpQnj2YSsQs+ZYd/oVspG0C4zqCAttv/LOU45lKsr+gBk+/Ljiix i+trLmMkxAVxfdzek0GhtiBzdybPbbk97Cs64jPoHLgjlQFetlqAIrewTIN9XOrM 1AuNNVgYJ3AEBsSuXJENOBWu4O6Q2uQg -----END CERTIFICATE-----Generated at Thu Jul 3 08:17:54 2025 by rpki-client