$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: XuXV55HImx53xuwuQnLXutHKgHI9qAok+OYQF/bICXU= Subject key identifier: EA:A5:23:DC:41:59:03:52:EF:31:30:3B:74:CF:98:0C:42:05:8F:5B Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 0684 Signing time: Mon 16 Jun 2025 21:57:46 +0000 Manifest this update: Mon 16 Jun 2025 21:57:46 +0000 Manifest next update: Mon 23 Jun 2025 21:57:46 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: 8Btb6bb1mjjR7g0SFftQ0Y9zBAqTQ6j0O1crCSobDZA=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Jun 16 21:57:46 2025 GMT Not After : Jun 23 21:57:46 2025 GMT Subject: CN=6850935a-0841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:8a:73:1a:f8:c0:a2:6a:4b:15:75:d2:2e: 11:e5:7a:78:c0:12:a4:a3:63:c2:72:a1:16:c7:5f: 9f:57:cf:ce:53:2f:3d:32:33:5a:40:46:6e:e0:4a: 6d:00:cb:35:d2:2c:b7:a2:32:49:67:2a:5e:83:fc: 17:1f:17:09:37:7b:23:ee:1f:48:9f:ba:95:21:c5: 15:f5:d6:0b:b1:d3:54:e7:98:cb:82:b9:d9:e7:d4: 5a:c7:c2:5f:ac:a0:16:c7:30:33:c4:ee:91:98:b5: bb:0a:e8:17:68:7b:9b:e7:11:45:c5:e0:de:1d:54: f4:c2:c8:35:1c:78:e8:21:61:6f:36:44:49:55:57: 4d:01:f8:d2:60:9e:fa:53:ec:3f:0b:cb:bc:30:10: 5a:30:7c:24:27:9c:18:40:37:84:80:6c:d2:4e:56: e2:fb:9d:64:af:c1:01:6d:2e:b9:5d:47:5e:fd:d9: 36:62:bd:7e:d1:ee:d9:db:20:71:46:e6:49:ca:7d: 0c:33:83:a3:6e:43:48:20:ff:08:cb:dc:c7:04:3d: 39:f2:a1:7f:d6:a4:6a:c1:3d:a1:eb:8a:dc:92:43: 7e:61:e3:a2:ee:95:c4:74:a8:f6:50:02:84:74:da: da:d2:f6:2e:be:bb:12:a1:e3:22:d7:e0:e8:49:34: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A5:23:DC:41:59:03:52:EF:31:30:3B:74:CF:98:0C:42:05:8F:5B X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:df:ce:ae:70:7c:41:21:a4:08:f4:23:ef:ae:35:16:7d:cf: a1:af:4e:32:19:39:f7:66:92:2b:65:4b:18:e4:8b:69:13:4d: d1:3e:2a:82:bf:17:0f:6f:00:9a:cb:18:fb:44:a8:5d:61:7f: 77:ba:f1:61:20:99:78:4f:f4:e5:98:0d:91:20:26:cc:55:7a: 8f:a3:52:9c:40:c3:65:c8:f4:97:1c:ad:a5:09:b0:36:79:4d: 5d:f5:07:20:ce:b3:4d:dc:69:f3:94:fc:27:2b:c7:90:22:52: c5:2e:d3:2e:85:39:06:31:50:1b:d0:d9:ca:fc:a6:8e:12:dd: 93:24:0d:22:61:45:86:8a:6d:e9:51:46:fb:29:fa:3d:b7:04: 92:53:a5:e2:1f:cf:94:d5:88:38:8a:18:a5:8a:09:0a:3c:c3: 47:1d:ec:02:53:6a:80:27:bf:0b:96:cd:b3:45:67:a7:90:de: a8:81:ec:a0:52:9e:31:ec:71:9c:ab:1f:c3:b2:1b:bb:ed:e5: f6:63:05:f2:5d:37:ce:aa:e5:06:39:17:61:51:58:7e:9c:ab: e5:01:d1:4b:7b:d0:79:00:60:55:dd:4c:00:c3:48:56:c5:30: 4a:4c:a0:28:41:fa:75:e2:0c:bb:d0:7d:3f:67:35:ee:20:e1: 23:26:a6:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUwNjE2MjE1NzQ2WhcNMjUwNjIzMjE1NzQ2WjAYMRYwFAYD VQQDEw02ODUwOTM1YS0wODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/eKcxr4wKJqSxV10i4R5Xp4wBKko2PCcqEWx1+fV8/OUy89MjNaQEZu4Ept AMs10iy3ojJJZypeg/wXHxcJN3sj7h9In7qVIcUV9dYLsdNU55jLgrnZ59Rax8Jf rKAWxzAzxO6RmLW7CugXaHub5xFFxeDeHVT0wsg1HHjoIWFvNkRJVVdNAfjSYJ76 U+w/C8u8MBBaMHwkJ5wYQDeEgGzSTlbi+51kr8EBbS65XUde/dk2Yr1+0e7Z2yBx RuZJyn0MM4OjbkNIIP8Iy9zHBD058qF/1qRqwT2h64rckkN+YeOi7pXEdKj2UAKE dNra0vYuvrsSoeMi1+DoSTR6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqlI9xB WQNS7zEwO3TPmAxCBY9bMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc386ucHxBIaQI9CPvrjUWfc+hr04yGTn3ZpIrZUsY5ItpE03RPiqC vxcPbwCayxj7RKhdYX93uvFhIJl4T/TlmA2RICbMVXqPo1KcQMNlyPSXHK2lCbA2 eU1d9QcgzrNN3GnzlPwnK8eQIlLFLtMuhTkGMVAb0NnK/KaOEt2TJA0iYUWGim3p UUb7Kfo9twSSU6XiH8+U1Yg4ihiligkKPMNHHewCU2qAJ78Lls2zRWenkN6ogeyg Up4x7HGcqx/Dshu77eX2YwXyXTfOquUGORdhUVh+nKvlAdFLe9B5AGBV3UwAw0hW xTBKTKAoQfp14gy70H0/ZzXuIOEjJqYx -----END CERTIFICATE-----Generated at Wed Jun 18 05:56:53 2025 by rpki-client