$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: eQsXBAYJpqrdKfI8NHKxLr8JIpURSl6bxPADGXKSG+w= Subject key identifier: BE:31:F4:25:B5:38:E8:D8:00:32:C8:F7:43:E3:7F:7F:07:78:06:E9 Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 0669 Signing time: Thu 24 Apr 2025 22:08:51 +0000 Manifest this update: Thu 24 Apr 2025 22:08:50 +0000 Manifest next update: Thu 01 May 2025 22:08:50 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: F9zASDCKYvn4MtnJMu4ZC0Ni5rlEYB7dwnVcOfndo+g=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: Apr 24 22:08:50 2025 GMT Not After : May 1 22:08:50 2025 GMT Subject: CN=680ab673-0eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a8:1e:66:7b:6d:37:a9:d0:58:09:a4:8c:a3: 3b:e9:51:c8:19:f2:ca:11:dc:91:36:87:7e:b7:2b: 19:3a:e7:a5:fd:c1:5a:94:d8:22:6a:c7:fd:ca:35: 47:0b:5c:67:de:4e:68:9f:b8:a3:00:b6:33:45:a4: e2:ff:8f:a9:b6:44:92:3b:8a:3b:88:71:f3:4d:a6: 91:ab:2c:f0:44:af:b4:f4:ab:ea:a1:19:6d:42:57: b6:54:f9:32:56:d2:1c:00:3c:c6:5f:fb:eb:cb:f1: d2:92:2a:76:1e:c6:b2:66:34:d1:60:d4:26:92:05: 4a:f6:b1:57:ac:c7:16:f6:4a:da:b3:58:6a:da:71: 85:c5:d0:ec:db:51:d2:11:21:56:50:3a:60:1e:22: 65:46:68:9c:79:11:6a:3b:c4:5b:8e:c1:cc:2d:a7: 27:33:9e:9a:57:df:2b:dd:63:6a:49:fd:c2:41:80: 2f:0c:16:a9:e4:8c:5d:47:84:31:96:f2:a7:f0:82: ad:35:96:3e:3e:fa:dd:16:d1:44:f5:26:9e:0e:65: ef:4e:01:62:2f:64:d9:3a:8b:ce:ec:6c:5b:07:f1: bc:11:00:f5:e7:f9:98:f7:b4:96:f2:dd:ea:57:6d: 85:db:da:8a:b7:17:9d:d9:f9:d6:fc:5f:be:d1:17: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:31:F4:25:B5:38:E8:D8:00:32:C8:F7:43:E3:7F:7F:07:78:06:E9 X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:0e:c4:ac:89:94:db:42:df:a4:f3:5e:f6:a4:d7:b7:f7:12: 1a:7e:63:55:f9:be:0e:8e:5d:e7:e7:64:60:ee:89:82:48:b7: e1:df:0e:dd:ea:6b:70:65:4b:7d:5b:88:1b:dd:f8:84:9d:63: 77:94:9d:fe:97:21:78:92:d2:30:94:94:05:2c:a0:9a:00:16: da:b2:4b:4a:c7:83:89:66:be:ff:09:3d:fb:5d:f6:0f:0d:bc: 49:86:37:c2:cc:05:7f:40:60:bc:df:71:27:c3:40:fb:c2:59: dc:ca:fa:73:71:b8:9c:13:c3:82:22:e4:1f:51:3b:6e:13:45: ea:47:92:7d:3f:81:38:ac:51:67:87:14:f9:8c:00:18:d5:08: a0:6c:de:ef:4f:d7:49:5f:66:fc:96:d7:b2:70:ba:77:4b:19: 70:49:7e:0f:39:5a:57:20:a0:f2:81:a4:c3:83:0e:e7:02:8e: 09:2f:96:fc:06:63:86:c2:4f:37:e5:a9:12:46:5e:03:cf:25: ea:f6:2a:f2:8e:32:cb:21:b9:ee:69:8d:e0:d8:29:a6:8c:e0: a5:c7:ba:f8:99:24:e4:87:f0:c8:9c:8e:89:cd:af:50:5c:7b: 30:a5:b2:26:7d:20:78:ec:61:1d:09:68:8a:d7:de:0b:22:f5: 7c:77:3a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUwNDI0MjIwODUwWhcNMjUwNTAxMjIwODUwWjAYMRYwFAYD VQQDEw02ODBhYjY3My0wZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qgeZnttN6nQWAmkjKM76VHIGfLKEdyRNod+tysZOuel/cFalNgiasf9yjVH C1xn3k5on7ijALYzRaTi/4+ptkSSO4o7iHHzTaaRqyzwRK+09KvqoRltQle2VPky VtIcADzGX/vry/HSkip2HsayZjTRYNQmkgVK9rFXrMcW9kras1hq2nGFxdDs21HS ESFWUDpgHiJlRmiceRFqO8RbjsHMLacnM56aV98r3WNqSf3CQYAvDBap5IxdR4Qx lvKn8IKtNZY+PvrdFtFE9SaeDmXvTgFiL2TZOovO7GxbB/G8EQD15/mY97SW8t3q V22F29qKtxed2fnW/F++0RfreQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4x9CW1 OOjYADLI90Pjf38HeAbpMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcDsSsiZTbQt+k8172pNe39xIafmNV+b4Ojl3n52Rg7omCSLfh3w7d 6mtwZUt9W4gb3fiEnWN3lJ3+lyF4ktIwlJQFLKCaABbasktKx4OJZr7/CT37XfYP DbxJhjfCzAV/QGC833Enw0D7wlncyvpzcbicE8OCIuQfUTtuE0XqR5J9P4E4rFFn hxT5jAAY1QigbN7vT9dJX2b8lteycLp3SxlwSX4POVpXIKDygaTDgw7nAo4JL5b8 BmOGwk835akSRl4DzyXq9iryjjLLIbnuaY3g2CmmjOClx7r4mSTkh/DInI6Jza9Q XHswpbImfSB47GEdCWiK194LIvV8dzrc -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:34 2025 by rpki-client