$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: m+WhdJ3t4viBaK94t8dCQUZNQXC4Q/4hiREVaFiH1Z0= Subject key identifier: 0C:81:51:56:ED:33:26:28:DB:5D:48:75:72:AC:F4:06:CC:3C:CB:DB Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 033E Signing time: Sun 29 Jun 2025 00:35:57 +0000 Manifest this update: Sun 29 Jun 2025 00:35:57 +0000 Manifest next update: Sun 06 Jul 2025 00:35:57 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: E6dw+jOR4PuQf0irVeAPjlQpuyX/aJNU75icf2wmAKE=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: Jun 29 00:35:57 2025 GMT Not After : Jul 6 00:35:57 2025 GMT Subject: CN=68608a6d-3ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:08:03:50:9e:36:98:1d:e8:5c:24:5d:1d: 39:46:3a:c1:b0:13:c7:61:89:d1:e7:39:2e:81:e9: 44:f3:b0:a6:db:4f:b0:b5:c5:ba:15:ce:80:6c:0a: f1:39:90:dc:8f:ab:86:e9:5d:43:7d:cb:f8:70:e5: 12:83:bc:d3:d1:5b:a8:5f:1c:60:7e:e4:f3:32:c3: ea:a5:84:0f:ec:d8:b4:98:fd:e9:42:72:f6:e9:cd: e2:d7:3e:28:d4:33:c0:44:ec:66:6a:3d:fb:0b:ee: dd:02:fa:96:f6:df:38:7d:03:12:24:b2:fb:7e:a7: 66:f4:c8:c4:c0:d7:61:d9:84:20:2a:09:ef:a4:54: 68:da:6a:12:0f:de:b5:82:1c:e8:a9:45:fb:15:a4: 80:f4:85:0c:e7:1c:09:6e:be:d6:51:a5:9f:c3:69: 78:09:f5:9e:a3:e1:e6:68:b4:0a:af:18:7e:45:c3: b6:b3:58:21:82:75:df:8c:fe:d9:17:a8:34:d3:d6: bc:85:e7:3e:fb:42:e4:ff:37:cc:f0:30:86:f2:4a: 2f:89:a4:4f:9e:38:3b:69:c9:5f:92:93:29:25:69: 14:05:43:22:bc:d7:ec:48:e5:fc:2d:69:af:da:ac: d0:3e:20:3c:d7:4a:5a:ca:af:84:12:a4:cf:30:a5: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:81:51:56:ED:33:26:28:DB:5D:48:75:72:AC:F4:06:CC:3C:CB:DB X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ec:38:0d:d0:98:82:f8:91:7b:11:83:2b:5b:8e:6e:bc:14: 29:5d:77:7c:23:b8:ab:48:d4:06:d5:9d:ae:b0:e5:5f:9b:d3: ed:a2:e0:39:61:d9:71:27:72:7a:9c:bc:5b:b7:51:41:77:71: 1f:66:5d:59:74:5d:23:55:30:50:e5:07:fc:94:47:0f:ae:3a: 08:31:c7:ef:36:f7:51:25:b1:dc:1a:7b:dc:56:5a:d6:8f:f9: 66:4b:6b:71:0c:ce:32:88:33:fb:6f:01:fe:d6:c3:af:df:45: 46:1c:51:a6:7b:ef:49:db:38:bf:0c:ee:22:9c:84:b9:7c:28: f1:97:18:19:23:92:12:5c:92:3d:e9:f3:19:1d:87:4d:f3:19: f4:94:e9:b6:dd:5b:4a:c1:cb:dd:55:e2:e4:18:83:4f:2f:13: cc:0a:fa:71:29:f6:88:47:c4:42:88:fe:c6:3a:94:01:9d:a2: b6:dd:76:71:d2:11:e8:1a:22:41:44:1b:95:47:13:71:31:1b: 14:36:ec:50:f8:77:df:be:79:a9:f2:c0:0c:11:3c:79:f0:43: 6e:4b:64:af:f6:b1:24:1d:d2:d0:b2:44:96:d8:1a:9b:bd:d1: 4a:44:4b:01:8d:22:68:5e:a3:a4:fc:71:2f:05:fe:31:ec:5a: 95:51:1d:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjUwNjI5MDAzNTU3WhcNMjUwNzA2MDAzNTU3WjAYMRYwFAYD VQQDEw02ODYwOGE2ZC0zZWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GUIA1CeNpgd6FwkXR05RjrBsBPHYYnR5zkugelE87Cm20+wtcW6Fc6AbArx OZDcj6uG6V1Dfcv4cOUSg7zT0VuoXxxgfuTzMsPqpYQP7Ni0mP3pQnL26c3i1z4o 1DPAROxmaj37C+7dAvqW9t84fQMSJLL7fqdm9MjEwNdh2YQgKgnvpFRo2moSD961 ghzoqUX7FaSA9IUM5xwJbr7WUaWfw2l4CfWeo+HmaLQKrxh+RcO2s1ghgnXfjP7Z F6g009a8hec++0Lk/zfM8DCG8koviaRPnjg7aclfkpMpJWkUBUMivNfsSOX8LWmv 2qzQPiA810payq+EEqTPMKV7LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAyBUVbt MyYo211IdXKs9AbMPMvbMB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf7DgN0JiC+JF7EYMrW45uvBQpXXd8I7irSNQG1Z2usOVfm9PtouA5 YdlxJ3J6nLxbt1FBd3EfZl1ZdF0jVTBQ5Qf8lEcPrjoIMcfvNvdRJbHcGnvcVlrW j/lmS2txDM4yiDP7bwH+1sOv30VGHFGme+9J2zi/DO4inIS5fCjxlxgZI5ISXJI9 6fMZHYdN8xn0lOm23VtKwcvdVeLkGINPLxPMCvpxKfaIR8RCiP7GOpQBnaK23XZx 0hHoGiJBRBuVRxNxMRsUNuxQ+Hffvnmp8sAMETx58ENuS2Sv9rEkHdLQskSW2Bqb vdFKREsBjSJoXqOk/HEvBf4x7FqVUR2Z -----END CERTIFICATE-----Generated at Mon Jun 30 09:40:37 2025 by rpki-client