$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: 36gGUlCgkzPEXmjoekpy3R8b0zhbMNz+RP2O/If4Ca0= Subject key identifier: 58:A3:25:C1:A4:C7:DE:48:BE:C6:1A:DD:49:D5:A8:EF:28:5F:99:18 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1A5E Signing time: Sat 18 Oct 2025 16:41:41 +0000 Manifest this update: Sat 18 Oct 2025 16:41:40 +0000 Manifest next update: Sat 25 Oct 2025 16:41:40 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: Nmw1IGBt851wbjmRfend1MaM5L074rWHoVpkax1gWPw=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: CZNc6WzONNJeWPZ6+n2sowdun9wtquppPoiv3hGmfQ8=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 6CZidtXoDBfZbkBWuLrvDzWnGJ2dpo308yRpcF6lZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6766 (0x1a6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Oct 18 16:41:40 2025 GMT Not After : Oct 25 16:41:40 2025 GMT Subject: CN=68f3c344-e56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:48:75:58:73:45:85:e6:cc:68:56:90:13: 29:48:2a:49:c2:06:dd:f2:85:00:d0:07:42:95:f0: 12:0e:b0:ba:14:2f:3b:15:10:23:08:14:37:15:97: 0d:30:4c:b9:49:07:80:f9:ff:dd:9c:15:69:a9:9e: b2:f0:6c:f9:76:99:50:5d:40:f2:33:61:d2:f9:df: b2:a7:26:f8:a5:61:3e:ca:77:8d:9c:6b:db:07:14: a4:8c:a8:c9:9d:e3:fd:da:56:73:82:a6:58:16:c5: 23:e5:04:3e:cd:8e:e9:2f:e8:13:8d:cc:d7:cb:4b: f8:d5:10:5c:a4:cf:91:d4:ad:e1:9d:93:c5:2f:21: 96:e3:c0:de:98:27:ad:1b:b5:79:e6:61:94:c1:9c: da:63:75:67:58:53:6c:a2:67:b8:d5:4f:41:04:66: 95:48:dc:67:6b:32:c3:8a:e4:62:9f:b6:fd:48:e8: 4a:be:22:a1:6b:54:c6:8c:b0:ac:6d:5a:5e:cf:b0: 24:b9:3e:64:4e:49:40:d0:ea:83:f2:9a:e5:a5:eb: 10:cf:79:3e:4b:be:f0:7e:f2:46:43:ff:89:bc:9e: 39:51:4d:33:37:0e:a3:6a:24:dc:f1:9e:3e:66:ff: 47:e7:3c:3f:be:09:95:a2:2a:a4:f1:0c:12:53:6c: cf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A3:25:C1:A4:C7:DE:48:BE:C6:1A:DD:49:D5:A8:EF:28:5F:99:18 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:6c:d2:cd:6d:81:f4:44:cd:99:e0:2a:05:ac:b5:64:0e:ba: bc:03:04:0f:c4:f2:37:ef:90:ce:30:ac:ee:f6:b4:42:49:16: 3a:8c:fd:ae:3a:53:a9:ec:97:78:d0:72:3e:1a:60:11:c1:19: 81:7d:66:77:51:cc:74:b6:e2:5c:c9:b8:3a:af:bc:66:ed:dd: 0c:5f:04:7a:07:dd:88:5d:10:07:23:dc:09:d0:98:f0:90:d9: 5b:1c:b8:98:9f:13:8b:09:fa:d0:1d:7c:02:a5:dd:53:9f:2b: f1:e6:d9:04:80:7f:15:31:0d:cf:44:37:53:d0:ec:cb:2e:71: 7d:59:14:f0:0f:4b:f7:67:f7:46:5d:60:6f:27:dc:69:fd:74: c5:6a:22:01:0c:68:3c:f4:f5:07:84:f5:45:2c:84:09:bc:20: 57:dc:fb:70:04:9f:91:f9:90:21:fd:d1:9d:2d:aa:1a:c6:39: 00:55:47:46:ab:65:cd:0c:c7:1a:33:0b:5d:0a:28:8a:78:32: f8:22:8a:e4:bd:86:4c:74:90:76:ec:46:91:6f:9b:b8:4d:ce: 13:9f:12:62:27:12:fd:84:39:c0:a0:1c:69:f4:6a:b6:80:38: b8:00:8a:0b:0a:b4:df:bf:f3:64:cb:3a:46:5d:9b:01:df:99: d0:12:0d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUxMDE4MTY0MTQwWhcNMjUxMDI1MTY0MTQwWjAYMRYwFAYD VQQDEw02OGYzYzM0NC1lNTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cVIdVhzRYXmzGhWkBMpSCpJwgbd8oUA0AdClfASDrC6FC87FRAjCBQ3FZcN MEy5SQeA+f/dnBVpqZ6y8Gz5dplQXUDyM2HS+d+ypyb4pWE+yneNnGvbBxSkjKjJ neP92lZzgqZYFsUj5QQ+zY7pL+gTjczXy0v41RBcpM+R1K3hnZPFLyGW48DemCet G7V55mGUwZzaY3VnWFNsome41U9BBGaVSNxnazLDiuRin7b9SOhKviKha1TGjLCs bVpez7AkuT5kTklA0OqD8prlpesQz3k+S77wfvJGQ/+JvJ45UU0zNw6jaiTc8Z4+ Zv9H5zw/vgmVoiqk8QwSU2zPVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFijJcGk x95IvsYa3UnVqO8oX5kYMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjbNLNbYH0RM2Z4CoFrLVkDrq8AwQPxPI375DOMKzu9rRCSRY6jP2u OlOp7Jd40HI+GmARwRmBfWZ3Ucx0tuJcybg6r7xm7d0MXwR6B92IXRAHI9wJ0Jjw kNlbHLiYnxOLCfrQHXwCpd1Tnyvx5tkEgH8VMQ3PRDdT0OzLLnF9WRTwD0v3Z/dG XWBvJ9xp/XTFaiIBDGg89PUHhPVFLIQJvCBX3PtwBJ+R+ZAh/dGdLaoaxjkAVUdG q2XNDMcaMwtdCiiKeDL4IorkvYZMdJB27EaRb5u4Tc4TnxJiJxL9hDnAoBxp9Gq2 gDi4AIoLCrTfv/NkyzpGXZsB35nQEg0n -----END CERTIFICATE-----Generated at Mon Oct 20 09:37:35 2025 by rpki-client