$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: 6suVQqtf9rNfhVxYy/ZRoGNlwfAgoNP/UlaxgcKqgvQ= Subject key identifier: 03:74:99:9B:15:C1:D7:31:A2:EE:49:4B:54:4D:81:D2:8E:00:ED:AE Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01DA Signing time: Sat 23 Aug 2025 02:51:22 +0000 Manifest this update: Sat 23 Aug 2025 02:51:22 +0000 Manifest next update: Sat 30 Aug 2025 02:51:22 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: Lh9N5se45Y9H1+HpmSA2fob8dxQyUJTYZgiLUvEWXDM=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Aug 23 02:51:22 2025 GMT Not After : Aug 30 02:51:22 2025 GMT Subject: CN=68a92caa-6035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:f6:c4:64:05:53:ed:15:a6:ef:02:41:a2: 25:9f:cc:ee:82:d9:43:da:cd:49:1c:af:a9:f2:d1: 6b:7b:f1:3a:2d:f5:d1:d6:b4:3c:72:04:0e:e5:85: 95:a1:be:48:6e:bf:01:bc:d3:c2:5e:5b:60:0b:2f: 20:96:bb:64:c5:7b:bb:a5:7d:00:72:d6:c0:13:38: b5:d8:77:ba:71:63:ea:0f:68:b2:f3:a0:ef:72:0b: ba:f2:17:2d:00:47:3c:e7:a5:d2:20:6c:f9:48:07: 18:12:cc:5b:07:6c:dd:83:56:67:6c:14:44:09:f2: b7:32:ec:1b:b1:63:12:b6:3a:37:a6:a6:35:e8:c8: be:47:75:03:11:dc:a5:d7:7b:1f:57:d1:ef:d5:5e: ad:76:05:0e:fe:99:04:8a:8c:a6:c5:f7:68:05:69: 9b:15:cc:15:fb:1a:32:6f:46:2e:3f:67:c8:d9:1f: 2b:2e:21:c2:f3:24:a9:be:87:fa:ae:6f:84:3b:a6: f7:59:22:81:ba:7e:ce:59:b6:09:89:17:7a:30:c7: 3e:f8:0e:67:95:6f:27:38:c9:78:1c:be:73:c0:e1: c9:ec:64:1b:71:af:d6:a7:b0:4b:da:69:9c:dc:aa: 96:eb:20:b6:32:a5:c9:d0:5f:84:5b:00:e0:00:e2: 09:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:74:99:9B:15:C1:D7:31:A2:EE:49:4B:54:4D:81:D2:8E:00:ED:AE X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:73:d6:78:9d:c8:bc:1f:a2:a0:ad:8a:e9:f9:8c:de:c0:f7: 26:e3:66:e2:05:0d:3c:42:e5:16:76:f2:fc:35:ea:b2:ed:3c: e0:dc:51:d0:84:3b:a1:c0:36:8f:f4:33:43:5c:40:0d:f4:43: 20:f2:0d:ed:77:17:7d:69:13:c0:73:e2:f1:13:df:61:85:f8: a7:22:4e:fb:cf:b6:3b:ef:8d:b3:09:83:38:43:88:85:8f:8e: ab:3a:39:0c:87:c6:31:42:de:70:21:39:a0:e2:5c:f0:45:b4: 71:54:83:c0:4b:1b:3d:c3:c9:af:2c:76:91:1a:cc:05:69:82: e7:aa:06:43:41:b3:bb:08:b6:a1:d2:87:56:d7:f3:79:d2:03: b1:e7:12:f0:87:0d:9e:af:02:84:ca:0d:88:a6:7f:06:e5:52: cf:bd:48:dd:eb:08:51:65:39:cd:6d:5c:6c:24:46:0c:c1:94: 3a:18:4c:bd:b9:10:1d:5d:cd:d0:bd:d1:40:7e:4c:03:ca:4f: 49:46:3d:29:e8:54:e2:d5:9e:3d:aa:89:61:f2:b8:e3:20:e7: 03:af:87:ec:6f:cc:e1:d1:c5:0e:65:d4:e5:28:c2:30:69:33: 60:81:95:8d:d8:f2:b9:27:35:ba:65:a5:4b:a7:ad:c1:84:ac: e2:39:86:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwODIzMDI1MTIyWhcNMjUwODMwMDI1MTIyWjAYMRYwFAYD VQQDEw02OGE5MmNhYS02MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGr2xGQFU+0Vpu8CQaIln8zugtlD2s1JHK+p8tFre/E6LfXR1rQ8cgQO5YWV ob5Ibr8BvNPCXltgCy8glrtkxXu7pX0ActbAEzi12He6cWPqD2iy86Dvcgu68hct AEc856XSIGz5SAcYEsxbB2zdg1ZnbBRECfK3MuwbsWMStjo3pqY16Mi+R3UDEdyl 13sfV9Hv1V6tdgUO/pkEioymxfdoBWmbFcwV+xoyb0YuP2fI2R8rLiHC8ySpvof6 rm+EO6b3WSKBun7OWbYJiRd6MMc++A5nlW8nOMl4HL5zwOHJ7GQbca/Wp7BL2mmc 3KqW6yC2MqXJ0F+EWwDgAOIJRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAN0mZsV wdcxou5JS1RNgdKOAO2uMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlc9Z4nci8H6KgrYrp+YzewPcm42biBQ08QuUWdvL8Neqy7Tzg3FHQ hDuhwDaP9DNDXEAN9EMg8g3tdxd9aRPAc+LxE99hhfinIk77z7Y7742zCYM4Q4iF j46rOjkMh8YxQt5wITmg4lzwRbRxVIPASxs9w8mvLHaRGswFaYLnqgZDQbO7CLah 0odW1/N50gOx5xLwhw2erwKEyg2Ipn8G5VLPvUjd6whRZTnNbVxsJEYMwZQ6GEy9 uRAdXc3QvdFAfkwDyk9JRj0p6FTi1Z49qolh8rjjIOcDr4fsb8zh0cUOZdTlKMIw aTNggZWN2PK5JzW6ZaVLp63BhKziOYbf -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:49 2025 by rpki-client