$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: LvdygOLzLWit2JXDzHNjJu2nhfoDPleLHlqPs6vWz9w= Subject key identifier: A1:3E:49:BF:60:D3:F7:49:C0:53:E4:2C:85:0A:83:85:53:C7:E1:C8 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1ACC Signing time: Tue 12 May 2026 16:18:57 +0000 Manifest this update: Tue 12 May 2026 16:18:56 +0000 Manifest next update: Tue 19 May 2026 16:18:56 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: ugED7NALHOBc0XH5HZwPTQe79p2x2QxiOErM9Kf+FaQ=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: 9z91DZp5gGn5objaZcmJRC9eXIJ9vkXiEByHhLrLrmk=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 5qtsq7ia4AOMsTly8sF4e2lBQ7HF32ao+hzi58so/BA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 16:18:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6880 (0x1ae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: May 12 16:18:56 2026 GMT Not After : May 19 16:18:56 2026 GMT Subject: CN=6a0352f1-3c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:03:2f:4e:45:2f:4d:b7:ea:2e:2d:18:05: 24:44:0b:36:f1:9a:d3:76:a9:2d:2e:d9:04:bc:ce: e4:8e:80:e4:d3:b3:7f:e1:41:fd:b4:0e:ac:d2:7e: 57:47:08:6f:cc:d4:ba:63:82:7b:2b:8c:84:33:a4: 17:ec:a3:de:df:e0:9f:f2:55:cc:a8:db:e6:d1:c7: bc:4d:20:9a:7b:b4:5b:bd:4d:a2:9f:ac:c0:3c:7b: 6e:37:72:8f:84:16:71:91:b9:36:10:ca:ea:d4:8c: c4:e2:21:51:0a:c0:13:0f:01:78:ff:78:55:5b:7c: 74:3d:21:f4:ef:85:66:59:d8:1d:d2:8e:a4:a5:29: 50:8d:c8:fc:de:14:2a:29:14:ad:b9:8c:ee:f8:6d: 1c:ec:fa:e1:ed:d1:78:89:c2:19:31:37:9d:e0:9c: 60:29:17:e4:fd:35:b0:2a:89:41:c7:44:a9:00:ca: bc:f0:19:54:d2:f9:69:d9:bd:90:01:8b:d9:2d:6b: 7f:6d:7b:6b:a3:d2:77:2c:9a:46:e2:94:b4:d4:e3: c7:e4:33:7d:43:7e:2a:67:31:4d:94:78:f3:73:e0: 80:af:6e:d1:b8:fa:1a:fb:c5:c5:b7:94:d3:f2:8c: 3a:7f:24:f0:31:35:a2:b2:be:ab:ad:00:f7:28:bd: a8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3E:49:BF:60:D3:F7:49:C0:53:E4:2C:85:0A:83:85:53:C7:E1:C8 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:cf:a7:04:7a:10:7e:89:0e:e6:38:7b:d1:a4:d5:c2:82:44: d1:d0:09:c8:49:81:04:b4:cf:ae:40:10:34:c0:64:90:1f:1c: e6:ee:16:d9:66:55:83:3e:06:25:0d:5c:48:b2:a3:31:1c:d6: 06:ae:4b:4c:f8:ac:cb:62:83:cd:5e:93:ca:8b:5a:ea:6b:ec: 98:43:1d:ee:6e:c2:b6:e0:aa:50:1b:4b:8b:5a:17:64:34:a9: c1:5b:1a:50:3d:0c:e8:41:f5:82:6e:ca:21:de:fd:91:08:1d: 19:bf:ac:96:9d:7c:e5:4f:94:10:8c:48:7c:95:0d:79:a2:d3: 08:07:82:b0:a0:87:3a:92:c9:08:c3:b0:3a:c8:72:81:9c:b9: e9:52:be:bf:2f:44:43:ef:fa:2a:33:65:de:63:ca:64:f4:20: cc:16:9f:7a:52:30:90:1e:2f:59:01:5f:0f:ca:96:00:99:d6: a5:14:97:76:a3:d7:a5:85:2b:30:37:64:a5:52:6a:97:77:d6: c0:3d:f2:9c:33:a8:db:bf:20:dd:ca:04:cf:7c:e2:0c:51:04: d9:10:85:cc:c5:9e:8b:bc:bd:61:d0:26:78:bd:6b:a0:68:69: a4:a0:f8:3e:43:13:a8:07:4a:2f:78:7d:0d:97:72:c2:83:b7: 74:2e:69:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjYwNTEyMTYxODU2WhcNMjYwNTE5MTYxODU2WjAYMRYwFAYD VQQDEw02YTAzNTJmMS0zYzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynUDL05FL0236i4tGAUkRAs28ZrTdqktLtkEvM7kjoDk07N/4UH9tA6s0n5X RwhvzNS6Y4J7K4yEM6QX7KPe3+Cf8lXMqNvm0ce8TSCae7RbvU2in6zAPHtuN3KP hBZxkbk2EMrq1IzE4iFRCsATDwF4/3hVW3x0PSH074VmWdgd0o6kpSlQjcj83hQq KRStuYzu+G0c7Prh7dF4icIZMTed4JxgKRfk/TWwKolBx0SpAMq88BlU0vlp2b2Q AYvZLWt/bXtro9J3LJpG4pS01OPH5DN9Q34qZzFNlHjzc+CAr27RuPoa+8XFt5TT 8ow6fyTwMTWisr6rrQD3KL2osQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE+Sb9g 0/dJwFPkLIUKg4VTx+HIMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOs+nBHoQfokO5jh70aTVwoJE0dAJyEmBBLTPrkAQNMBkkB8c5u4W2WZVgz4G JQ1cSLKjMRzWBq5LTPisy2KDzV6Tyota6mvsmEMd7m7CtuCqUBtLi1oXZDSpwVsa UD0M6EH1gm7KId79kQgdGb+slp185U+UEIxIfJUNeaLTCAeCsKCHOpLJCMOwOshy gZy56VK+vy9EQ+/6KjNl3mPKZPQgzBafelIwkB4vWQFfD8qWAJnWpRSXdqPXpYUr MDdkpVJql3fWwD3ynDOo278g3coEz3ziDFEE2RCFzMWei7y9YdAmeL1roGhppKD4 PkMTqAdKL3h9DZdywoO3dC5pIg== -----END CERTIFICATE-----Generated at Wed May 13 12:12:07 2026 by rpki-client