$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: h0YYtMHsPo5D7lilLKqn6bWJNMbvn9w5pAwsgPkJit8= Subject key identifier: F4:BA:E2:6F:1A:B0:0B:CD:07:36:70:DA:79:A0:51:DD:D5:CB:43:AD Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 035F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 035A Signing time: Sat 23 Aug 2025 01:12:15 +0000 Manifest this update: Sat 23 Aug 2025 01:12:15 +0000 Manifest next update: Sat 30 Aug 2025 01:12:15 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: dvXIAPv2D+2X7zR7oAlir1D85PX+zKKVyPp4Cf0iksY=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 863 (0x35f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: Aug 23 01:12:15 2025 GMT Not After : Aug 30 01:12:15 2025 GMT Subject: CN=68a9156f-41a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:d6:1d:69:0a:56:8f:1f:9e:20:4a:b7:d0: b4:13:83:0a:0b:f2:ca:b9:40:5c:71:c8:4c:89:33: 0a:8a:ea:49:74:d7:20:40:6d:d1:fa:df:78:4d:09: c2:48:47:7e:b4:a2:ae:07:54:b5:2a:d1:c0:7c:bb: 2f:58:b1:6d:68:53:4a:84:8f:bd:35:5c:e6:fe:b2: 16:a1:03:6e:2c:dd:39:80:76:6a:3f:69:ee:2d:24: e8:04:0c:ed:2d:ba:df:02:42:f7:a0:bd:a4:d3:81: be:0a:7a:fb:cb:72:be:51:a8:83:98:b0:2b:ee:ec: 23:e8:6a:37:26:c2:60:f3:48:f9:f5:3e:1b:26:71: bc:24:e4:72:7d:b8:97:2c:d1:eb:32:97:92:42:de: a7:62:be:de:9c:61:f6:e0:3e:ec:3c:bd:d5:cc:42: b4:a6:96:14:e5:6e:3f:71:e2:c6:62:2a:ea:51:3d: 20:56:5f:1a:93:dc:bd:c2:fa:5a:58:bf:4b:6b:d1: f8:96:2f:34:22:79:09:3a:b9:b6:7e:2f:85:e5:da: 36:3b:d7:12:b9:ae:98:8c:d2:35:70:f2:cb:5f:fe: 0b:ed:60:f7:cb:43:8d:db:ae:76:ef:de:31:0a:e3: 23:09:da:95:02:7d:e2:44:a4:20:be:1c:73:93:e7: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BA:E2:6F:1A:B0:0B:CD:07:36:70:DA:79:A0:51:DD:D5:CB:43:AD X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:32:27:a3:d9:72:22:2c:c1:45:31:73:47:fd:f2:05:85:38: d5:0c:82:f0:08:ed:e4:eb:a4:ef:72:49:1d:e4:1b:a5:be:3d: 84:24:e6:21:46:fe:3b:65:71:5e:af:82:d1:75:99:7a:ed:44: 17:e7:c5:06:a6:fe:3c:58:1d:05:96:fd:56:d8:bf:89:a5:ad: 86:44:94:57:74:57:a3:7a:66:ad:f1:ec:1e:46:65:69:4f:72: 50:fe:95:96:c1:64:8a:a6:39:2b:7e:33:20:84:b6:39:b1:42: 0e:83:1d:40:95:ed:96:e2:34:66:2d:13:34:38:4e:3b:fd:35: dc:0c:5c:92:79:15:cc:6c:46:13:82:1c:f2:08:f6:ef:5d:14: 15:81:cc:17:5e:80:a7:01:75:a7:94:9d:44:f6:08:88:97:ed: 02:d6:e8:fd:c5:15:47:67:d6:e5:dd:84:5a:b0:ce:6f:fb:61: f5:05:59:cc:d0:f1:36:ed:08:8f:3e:e5:7a:a3:2a:60:ed:d2: 7f:85:70:e4:08:66:dc:42:1e:49:46:1b:f5:d4:c4:3a:e6:57: cc:7b:2e:19:ce:13:c3:7b:fc:89:5b:93:30:bc:b9:e9:8b:70: 09:da:e4:82:74:26:11:b8:cc:82:09:aa:a8:a1:aa:3b:6b:73: 05:81:19:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjUwODIzMDExMjE1WhcNMjUwODMwMDExMjE1WjAYMRYwFAYD VQQDEw02OGE5MTU2Zi00MWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UPWHWkKVo8fniBKt9C0E4MKC/LKuUBccchMiTMKiupJdNcgQG3R+t94TQnC SEd+tKKuB1S1KtHAfLsvWLFtaFNKhI+9NVzm/rIWoQNuLN05gHZqP2nuLSToBAzt LbrfAkL3oL2k04G+Cnr7y3K+UaiDmLAr7uwj6Go3JsJg80j59T4bJnG8JORyfbiX LNHrMpeSQt6nYr7enGH24D7sPL3VzEK0ppYU5W4/ceLGYirqUT0gVl8ak9y9wvpa WL9La9H4li80InkJOrm2fi+F5do2O9cSua6YjNI1cPLLX/4L7WD3y0ON2652794x CuMjCdqVAn3iRKQgvhxzk+er0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS64m8a sAvNBzZw2nmgUd3Vy0OtMB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1Miej2XIiLMFFMXNH/fIFhTjVDILwCO3k66Tvckkd5Bulvj2EJOYh Rv47ZXFer4LRdZl67UQX58UGpv48WB0Flv1W2L+Jpa2GRJRXdFejemat8eweRmVp T3JQ/pWWwWSKpjkrfjMghLY5sUIOgx1Ale2W4jRmLRM0OE47/TXcDFySeRXMbEYT ghzyCPbvXRQVgcwXXoCnAXWnlJ1E9giIl+0C1uj9xRVHZ9bl3YRasM5v+2H1BVnM 0PE27QiPPuV6oypg7dJ/hXDkCGbcQh5JRhv11MQ65lfMey4ZzhPDe/yJW5MwvLnp i3AJ2uSCdCYRuMyCCaqooao7a3MFgRlb -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:08 2025 by rpki-client