$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: BSMgpUAxodjYM9VMjKhHaUTFJ5PwPJpwhXoJICyKwyU= Subject key identifier: 35:E4:DA:72:92:7E:A6:59:6F:01:8B:D4:8E:27:C4:1F:79:7B:37:7E Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 0287 Signing time: Thu 23 Jul 2026 02:57:47 +0000 Manifest this update: Thu 23 Jul 2026 02:57:46 +0000 Manifest next update: Thu 30 Jul 2026 02:57:46 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: 3IfCbeck0HLndWsoL6NOm4frG7iKJTl84E0eJ9UybTM=) 2: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=) 3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Jul 23 02:57:46 2026 GMT Not After : Jul 30 02:57:46 2026 GMT Subject: CN=6a61832b-a711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:e7:bb:78:63:68:20:5b:ce:79:19:6f:86: 24:1e:25:98:c1:5d:9d:9a:b3:4c:e6:bf:e1:8e:52: 1e:28:f8:11:89:6b:ef:dc:21:eb:38:98:ff:22:a5: d7:50:2f:66:a7:47:32:7c:6a:04:3d:9f:14:29:16: 04:a2:bf:4c:51:68:f0:43:96:4b:9e:c5:60:05:66: 4b:73:96:d7:83:30:61:59:3a:06:0b:01:19:5d:fe: c9:a3:cf:34:a7:b1:58:60:8e:f8:bf:81:28:d5:5e: cf:05:6a:1b:a9:0d:99:a3:7a:6c:4d:36:c5:1a:0c: 35:84:18:de:b7:b3:0e:7c:82:82:1d:08:e2:71:3d: 27:5f:26:c2:2a:4a:9d:8c:db:9e:9a:d5:68:46:70: f8:3f:e7:ca:7d:96:18:21:de:ce:33:f4:3f:9d:bc: 71:17:ef:1a:87:42:a4:4f:23:7f:a5:63:e5:41:e6: a8:59:8d:33:70:6f:49:86:fe:9e:18:4a:e8:ed:fd: 8a:a7:cc:dc:5f:f7:fc:dc:2c:78:1f:97:9a:52:ad: 59:4b:af:52:dd:bc:8c:0b:c0:78:f9:8a:dc:41:a6: a9:88:51:e1:b5:75:06:a9:fb:9d:0e:7c:11:86:88: 4a:e2:7d:00:ca:b2:ed:64:9f:8f:72:f8:87:4c:94: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:DA:72:92:7E:A6:59:6F:01:8B:D4:8E:27:C4:1F:79:7B:37:7E X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b5:27:0c:75:a1:98:f1:33:29:15:9e:f1:08:61:51:5d:30: 13:d1:1d:a7:74:bb:af:89:be:f0:8f:12:a3:0a:fa:8a:61:b7: ac:c5:4e:34:11:af:01:53:39:68:fe:dd:9f:2f:c2:ac:62:68: fd:f3:37:14:18:6d:61:66:73:3c:41:bd:60:b7:12:61:9b:9a: 22:05:f0:08:64:9b:77:59:bc:d5:44:f7:ed:b7:7b:6b:3d:95: aa:8d:2b:3b:0b:2f:08:db:0a:ea:bc:0b:0a:04:00:51:91:70: ec:73:b3:16:eb:4c:8d:66:04:d1:e6:1a:3a:69:71:09:fe:a5: a9:8e:00:b1:55:69:35:01:57:f7:57:15:c5:b0:28:80:36:f9: f4:2b:53:d2:0f:7c:ef:bd:e8:a2:cc:cb:53:27:ff:5e:d2:24: 26:69:d2:4d:5f:e4:47:c9:7e:9c:e1:23:cb:04:95:01:74:f5: 34:e5:13:63:e0:fb:68:4c:bc:05:c9:a8:05:87:48:f1:2c:de: 8a:74:94:ad:38:31:d0:f9:92:98:79:4b:5c:f4:c2:99:28:4f: e5:31:05:71:e7:09:7e:78:d3:00:6d:6f:18:10:ba:0f:b0:c7: cd:96:d8:36:95:14:ab:30:a3:b3:57:79:36:10:b3:15:05:70: f8:3f:f6:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjYwNzIzMDI1NzQ2WhcNMjYwNzMwMDI1NzQ2WjAYMRYwFAYD VQQDEw02YTYxODMyYi1hNzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQ/nu3hjaCBbznkZb4YkHiWYwV2dmrNM5r/hjlIeKPgRiWvv3CHrOJj/IqXX UC9mp0cyfGoEPZ8UKRYEor9MUWjwQ5ZLnsVgBWZLc5bXgzBhWToGCwEZXf7Jo880 p7FYYI74v4Eo1V7PBWobqQ2Zo3psTTbFGgw1hBjet7MOfIKCHQjicT0nXybCKkqd jNuemtVoRnD4P+fKfZYYId7OM/Q/nbxxF+8ah0KkTyN/pWPlQeaoWY0zcG9Jhv6e GEro7f2Kp8zcX/f83Cx4H5eaUq1ZS69S3byMC8B4+YrcQaapiFHhtXUGqfudDnwR hohK4n0AyrLtZJ+PcviHTJTI5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXk2nKS fqZZbwGL1I4nxB95ezd+MB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX7UnDHWhmPEzKRWe8QhhUV0wE9Edp3S7r4m+8I8Sowr6imG3rMVONBGvAVM5 aP7dny/CrGJo/fM3FBhtYWZzPEG9YLcSYZuaIgXwCGSbd1m81UT37bd7az2Vqo0r OwsvCNsK6rwLCgQAUZFw7HOzFutMjWYE0eYaOmlxCf6lqY4AsVVpNQFX91cVxbAo gDb59CtT0g98773ooszLUyf/XtIkJmnSTV/kR8l+nOEjywSVAXT1NOUTY+D7aEy8 BcmoBYdI8SzeinSUrTgx0PmSmHlLXPTCmShP5TEFcecJfnjTAG1vGBC6D7DHzZbY NpUUqzCjs1d5NhCzFQVw+D/2Hw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:35 2026 by rpki-client