$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: BmRPBZru1RcPbaCR7DGlNS83je7+LqOJa0l2ZsyP2mM= Subject key identifier: 01:95:46:35:1A:D0:AA:08:E5:B8:46:62:EE:18:AA:ED:04:1E:DC:FD Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 032A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 0325 Signing time: Fri 09 May 2025 00:54:08 +0000 Manifest this update: Fri 09 May 2025 00:54:08 +0000 Manifest next update: Fri 16 May 2025 00:54:08 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: KmSpFSseISTGmC2vA9nlBjMKm403iWI2HgEVcpXZ1KA=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 810 (0x32a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: May 9 00:54:08 2025 GMT Not After : May 16 00:54:08 2025 GMT Subject: CN=681d5230-83cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:28:23:c7:a9:55:cb:93:8b:c0:a3:3f:e8: fe:0b:b8:f8:d3:10:df:40:aa:1b:db:84:86:8d:0b: fa:ad:9f:5b:69:1f:68:38:db:15:c5:fd:ee:c0:68: 51:fa:68:e4:3b:f2:33:9c:96:41:eb:8a:ad:d4:e5: 83:89:06:90:18:fb:ad:c8:bd:46:a1:ae:3b:83:f5: 78:24:9f:b7:a6:a7:e7:3a:7f:1e:b9:a4:5e:4a:c5: 81:d6:d7:d3:68:82:85:72:2a:d2:1c:1b:06:94:04: 85:68:ca:38:20:ca:bc:6d:30:cb:d7:ee:df:49:c0: fb:8a:f8:45:b0:a4:73:63:da:80:c1:4f:f4:5f:2c: 00:85:b8:88:e4:0c:fa:16:b9:5d:eb:04:4c:ad:f8: a4:0c:8a:ff:1e:d9:7a:09:a8:de:2c:1c:e4:af:8a: 30:5b:95:be:2d:ce:27:28:48:5b:d1:2c:ba:f2:5d: 0c:26:db:c0:e4:83:3e:16:77:2e:93:e2:95:8c:87: 56:75:5d:0d:ee:38:66:f1:78:7b:0a:33:31:4e:28: bf:4d:27:3c:26:29:5b:ba:89:ac:b9:1f:a0:5f:89: 0f:77:7a:06:55:aa:ab:4d:39:36:6e:e1:c3:69:f7: d7:1b:a0:9c:87:4e:d0:3e:b8:ba:0a:b0:a7:54:4d: c0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:46:35:1A:D0:AA:08:E5:B8:46:62:EE:18:AA:ED:04:1E:DC:FD X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:88:e5:eb:b0:19:07:e9:6b:65:b9:0a:f6:cd:b5:15:24:5b: e6:78:22:cc:58:65:8a:55:ec:9c:d1:7e:47:80:d9:3e:4c:8f: 8d:34:86:67:11:ca:a4:7c:89:29:5f:98:dd:6a:2b:a6:1d:5a: 57:47:21:c6:7e:6f:30:bc:5a:12:d8:a7:60:99:d9:3c:d8:ec: 08:b3:bd:0e:04:9d:64:dc:6d:61:14:ca:c8:9a:3c:6a:b1:a8: a0:08:3e:20:72:de:3c:79:df:9a:00:de:d6:e3:3f:10:69:a4: f7:5b:ac:40:3b:ca:07:a3:dc:75:af:ef:5b:42:b0:30:95:4d: 45:2e:a9:94:fc:4d:e0:9b:86:6b:0f:6e:eb:ff:10:a8:c8:42: 13:ed:b4:99:95:12:72:47:f6:06:d5:d2:6a:5d:c0:04:f3:68: fe:bf:f8:eb:5e:b9:e0:59:a5:89:2e:4c:00:0c:2a:dc:eb:f8: 1c:06:8a:09:79:10:27:a1:40:e3:29:39:5d:c1:e6:20:ed:5f: 45:66:35:d2:bf:8b:8b:17:9c:11:f6:67:a1:64:94:ee:bd:2d: 5c:fa:3f:27:5c:5d:4c:53:96:8e:22:06:2f:0e:11:55:2b:81: 19:44:fa:46:44:6c:73:6f:cd:76:5c:2d:c7:c5:ca:b4:e3:59: 7b:07:b1:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjUwNTA5MDA1NDA4WhcNMjUwNTE2MDA1NDA4WjAYMRYwFAYD VQQDEw02ODFkNTIzMC04M2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIgoI8epVcuTi8CjP+j+C7j40xDfQKob24SGjQv6rZ9baR9oONsVxf3uwGhR +mjkO/IznJZB64qt1OWDiQaQGPutyL1Goa47g/V4JJ+3pqfnOn8euaReSsWB1tfT aIKFcirSHBsGlASFaMo4IMq8bTDL1+7fScD7ivhFsKRzY9qAwU/0XywAhbiI5Az6 Frld6wRMrfikDIr/Htl6CajeLBzkr4owW5W+Lc4nKEhb0Sy68l0MJtvA5IM+Fncu k+KVjIdWdV0N7jhm8Xh7CjMxTii/TSc8JilbuomsuR+gX4kPd3oGVaqrTTk2buHD affXG6Cch07QPri6CrCnVE3ARQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGVRjUa 0KoI5bhGYu4Yqu0EHtz9MB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtiOXrsBkH6WtluQr2zbUVJFvmeCLMWGWKVeyc0X5HgNk+TI+NNIZn EcqkfIkpX5jdaiumHVpXRyHGfm8wvFoS2Kdgmdk82OwIs70OBJ1k3G1hFMrImjxq saigCD4gct48ed+aAN7W4z8QaaT3W6xAO8oHo9x1r+9bQrAwlU1FLqmU/E3gm4Zr D27r/xCoyEIT7bSZlRJyR/YG1dJqXcAE82j+v/jrXrngWaWJLkwADCrc6/gcBooJ eRAnoUDjKTldweYg7V9FZjXSv4uLF5wR9mehZJTuvS1c+j8nXF1MU5aOIgYvDhFV K4EZRPpGRGxzb812XC3Hxcq041l7B7Hh -----END CERTIFICATE-----Generated at Sat May 10 04:40:14 2025 by rpki-client