$ rpki-client -vvf rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft File: GoOKdo1b8PVMYaptorRQOBveZ8c.mft (raw, json) Hash identifier: uKPdTGNDumdf0bH0izuhM0xnSQgKRv2ipHvkq5Lucs4= Subject key identifier: A8:18:A2:1A:DB:9C:B2:BD:5D:F1:08:6D:68:67:4F:F5:6E:C8:B1:DE Authority key identifier: 1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 Certificate issuer: /CN=A918FFA8/serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft Manifest number: 3498 Signing time: Mon 30 Jun 2025 14:39:50 +0000 Manifest this update: Mon 30 Jun 2025 14:39:50 +0000 Manifest next update: Mon 07 Jul 2025 14:39:50 +0000 Files and hashes: 1: GoOKdo1b8PVMYaptorRQOBveZ8c.crl (hash: gywGAawyQ6mjVg9d39OatavWlow1JgAT2nI3QnHwZig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FFA8, serialNumber=1A838A768D5BF0F54C61AA6DA2B450381BDE67C7 Validity Not Before: Jun 30 14:39:50 2025 GMT Not After : Jul 7 14:39:50 2025 GMT Subject: CN=6862a1b6-c44d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:a0:a7:6e:48:4a:3c:eb:e3:9c:af:97:c0: a0:ec:d5:cf:c8:8b:25:84:44:5d:d6:3f:6d:6c:5b: c5:51:dc:1f:c8:f9:c0:df:35:e3:ac:38:c0:01:96: e8:87:c9:cd:5a:64:ca:99:fa:bc:f8:34:f6:0a:8a: 79:a1:9a:ca:3c:4c:80:7a:8a:66:29:36:54:80:45: 25:91:53:68:05:09:80:b4:50:e7:02:3f:65:79:2e: 0c:a7:3e:2a:77:5f:4a:9f:14:2b:5d:dd:40:21:63: a1:75:c4:0d:72:65:13:4b:26:97:1f:cf:ee:fb:e8: db:14:21:d5:80:ee:c5:3b:64:6f:d5:70:fe:fd:3b: ed:77:4f:4b:f9:1e:d2:06:57:37:6f:0b:c6:95:41: 09:36:27:7e:24:cc:5f:e3:72:0f:97:7f:fd:c5:76: 37:13:4d:a5:70:9d:e2:55:03:4a:e7:bd:4d:1b:9b: 0f:3a:ab:1c:d9:cc:31:03:ae:ee:2b:f2:dd:bc:d3: 01:2d:85:c6:87:59:b5:2f:e0:d0:e9:1c:da:92:53: cd:2b:b3:89:fc:9e:6d:85:69:f9:35:a1:ec:6c:91: b8:ac:be:23:e0:72:76:9d:7b:a8:be:d4:84:1a:6a: da:2d:97:86:49:ac:25:63:8e:09:8a:af:53:c2:21: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:18:A2:1A:DB:9C:B2:BD:5D:F1:08:6D:68:67:4F:F5:6E:C8:B1:DE X509v3 Authority Key Identifier: keyid:1A:83:8A:76:8D:5B:F0:F5:4C:61:AA:6D:A2:B4:50:38:1B:DE:67:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoOKdo1b8PVMYaptorRQOBveZ8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FFA8/925533621D8B11E29DFD3DE608B02CD2/GoOKdo1b8PVMYaptorRQOBveZ8c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:26:1c:a4:e7:91:4f:c4:45:72:fa:a1:95:99:5b:f5:fc:5f: 3b:01:7d:31:f3:6f:55:5d:27:45:d2:c3:66:f6:aa:43:6b:69: af:a8:64:85:f4:27:e5:5d:aa:04:36:8f:9b:c2:d3:d7:51:b1: e6:d3:b3:18:65:ed:d3:3e:39:f7:96:62:20:60:30:d5:96:da: 81:ec:f0:68:e6:f0:8f:56:8a:54:8c:d7:6c:9b:de:b5:61:38: ad:a9:84:e5:46:fb:49:bd:08:e1:96:5b:34:30:fe:d7:7b:9d: 78:0d:06:02:91:e4:29:46:76:04:8a:28:f9:0e:8a:05:a6:b7: 85:24:3e:9c:5c:72:e4:a1:0d:2d:67:d1:79:d1:3b:54:04:3c: 25:7e:63:9c:4f:71:cb:9a:be:8a:60:f8:58:19:26:35:9f:7f: 8e:e0:37:cd:e3:9f:81:77:71:8d:e5:91:c6:21:2b:d0:3a:b8: 60:ae:b1:c4:4a:b6:ff:53:6f:0b:a9:a7:99:f7:19:c6:07:24: 8d:29:5f:76:23:95:d6:8d:85:f5:6e:c7:f9:d0:2e:2e:84:43: 95:0b:22:3f:f4:57:f6:c1:cd:d1:68:15:1e:4d:a7:4d:9e:93: 1c:fe:83:5f:f3:57:d3:c5:a7:40:35:a0:ea:59:d9:38:10:04: 93:65:36:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZGQTgxMTAvBgNVBAUTKDFBODM4QTc2OEQ1QkYwRjU0QzYxQUE2REEyQjQ1MDM4 MUJERTY3QzcwHhcNMjUwNjMwMTQzOTUwWhcNMjUwNzA3MTQzOTUwWjAYMRYwFAYD VQQDEw02ODYyYTFiNi1jNDRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArj6gp25ISjzr45yvl8Cg7NXPyIslhERd1j9tbFvFUdwfyPnA3zXjrDjAAZbo h8nNWmTKmfq8+DT2Cop5oZrKPEyAeopmKTZUgEUlkVNoBQmAtFDnAj9leS4Mpz4q d19KnxQrXd1AIWOhdcQNcmUTSyaXH8/u++jbFCHVgO7FO2Rv1XD+/Tvtd09L+R7S Blc3bwvGlUEJNid+JMxf43IPl3/9xXY3E02lcJ3iVQNK571NG5sPOqsc2cwxA67u K/LdvNMBLYXGh1m1L+DQ6RzaklPNK7OJ/J5thWn5NaHsbJG4rL4j4HJ2nXuovtSE GmraLZeGSawlY44Jiq9TwiEDnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgYohrb nLK9XfEIbWhnT/VuyLHeMB8GA1UdIwQYMBaAFBqDinaNW/D1TGGqbaK0UDgb3mfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkZBOC85MjU1MzM2MjFE OEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQVk1ZYXB0b3JSUU9CdmVa OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvT0tkbzFiOFBWTVlhcHRvclJRT0J2ZVo4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkZBOC85MjU1MzM2MjFEOEIxMUUyOURGRDNERTYwOEIwMkNEMi9Hb09LZG8xYjhQ Vk1ZYXB0b3JSUU9CdmVaOGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLJhyk55FPxEVy+qGVmVv1/F87AX0x829VXSdF0sNm9qpDa2mvqGSF 9CflXaoENo+bwtPXUbHm07MYZe3TPjn3lmIgYDDVltqB7PBo5vCPVopUjNdsm961 YTitqYTlRvtJvQjhlls0MP7Xe514DQYCkeQpRnYEiij5DooFpreFJD6cXHLkoQ0t Z9F50TtUBDwlfmOcT3HLmr6KYPhYGSY1n3+O4DfN45+Bd3GN5ZHGISvQOrhgrrHE Srb/U28LqaeZ9xnGBySNKV92I5XWjYX1bsf50C4uhEOVCyI/9Ff2wc3RaBUeTadN npMc/oNf81fTxadANaDqWdk4EASTZTb0 -----END CERTIFICATE-----Generated at Mon Jun 30 17:12:49 2025 by rpki-client