$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: rErXKRTABVS7fjsfe2GSlY2St86e3Qnc6Z5TapkEoMM= Subject key identifier: B6:BF:98:AF:4A:47:24:B6:F7:2E:76:07:51:6C:CF:70:73:4B:33:39 Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1A1E Signing time: Sat 14 Jun 2025 16:19:20 +0000 Manifest this update: Sat 14 Jun 2025 16:19:19 +0000 Manifest next update: Sat 21 Jun 2025 16:19:19 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: 8d44RqFbrcXWPcP9ondA8Hq2Vww/561h5YBLUR77xWU=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: CZNc6WzONNJeWPZ6+n2sowdun9wtquppPoiv3hGmfQ8=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 6CZidtXoDBfZbkBWuLrvDzWnGJ2dpo308yRpcF6lZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:19:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6702 (0x1a2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Jun 14 16:19:19 2025 GMT Not After : Jun 21 16:19:19 2025 GMT Subject: CN=684da107-5dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4c:f3:12:22:40:d1:e1:5a:16:de:c0:ec:43: ac:90:b8:3f:9f:e7:f9:fe:4e:20:c8:e5:df:d4:d3: 00:fd:c7:1e:49:9d:29:14:b5:96:f8:52:9e:36:0b: b8:ae:4c:47:60:16:86:da:88:c1:34:38:78:ea:37: 7b:29:1f:db:04:2d:68:19:b9:8b:83:29:7c:25:96: 61:eb:ab:e8:7d:07:a3:36:fa:58:9f:c8:61:0e:9f: 26:98:29:6e:82:06:fb:73:d7:82:b6:91:8c:79:c9: 82:96:0e:d9:22:74:e8:1f:1e:e7:2f:7b:7b:0d:70: a5:a1:3d:d0:5d:fe:4c:a8:22:57:6b:11:77:2c:4c: cb:f9:a5:d8:9e:4a:8b:07:83:81:da:27:7f:49:ea: a1:e8:31:59:c9:03:9a:59:fe:d0:3d:a5:3e:1f:a5: 2d:f5:66:ab:d6:9a:6d:4d:0d:8c:1d:14:ea:8c:6c: e2:d8:20:6c:bb:ab:04:99:43:13:5a:a8:1d:b9:bc: af:af:cc:26:35:d6:04:1a:b8:11:52:2f:82:75:43: 73:af:70:02:a0:7b:b3:f0:7d:dd:6d:af:4f:ac:fb: 4a:8d:54:e6:35:36:72:92:83:77:13:14:40:67:a9: 2e:3d:96:e1:7f:55:97:1e:47:c1:0f:92:3b:86:fd: 7d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BF:98:AF:4A:47:24:B6:F7:2E:76:07:51:6C:CF:70:73:4B:33:39 X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:98:64:32:7a:88:52:10:6a:12:1d:6e:9d:7d:0d:8f:f6: b3:75:72:84:d7:b9:30:e2:cf:d6:a2:7a:1b:68:17:ff:ad:77: 6b:f5:c7:78:5c:98:3c:eb:d0:96:67:83:98:d4:13:84:5d:0e: f5:d3:d8:cf:a8:93:26:0a:12:0c:8d:cb:64:5d:6d:a8:54:fb: e7:64:10:c9:20:a4:bd:28:5f:db:7c:19:e9:8a:b1:fc:ca:e4: e7:47:41:21:a5:dd:04:84:f1:58:47:ed:52:6c:e4:ea:96:5b: 47:61:a3:04:dd:b6:01:bd:3c:25:3d:6f:ab:9c:f8:d8:fb:12: 86:cf:6c:15:ed:6c:2f:78:b2:b7:33:8b:df:4d:ca:d3:35:dd: e2:bb:98:27:1d:82:a4:6c:3c:73:08:65:bc:9e:4e:24:e0:fd: d9:93:30:94:eb:83:b9:3e:71:fa:89:57:cf:d6:f1:64:05:3b: d5:88:c4:38:a0:11:47:ca:81:d9:71:47:cc:43:f1:16:f4:5f: f4:3f:7b:82:80:25:4b:87:0f:c0:99:78:32:8a:36:c5:d8:69: 50:cf:69:bc:f6:af:2d:8f:c1:a2:4c:ac:a5:fa:44:12:32:c9: fb:01:b8:91:12:eb:24:3b:98:5c:6f:41:f2:ec:9f:48:0b:5d: 5c:8c:c8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUwNjE0MTYxOTE5WhcNMjUwNjIxMTYxOTE5WjAYMRYwFAYD VQQDEw02ODRkYTEwNy01ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EzzEiJA0eFaFt7A7EOskLg/n+f5/k4gyOXf1NMA/cceSZ0pFLWW+FKeNgu4 rkxHYBaG2ojBNDh46jd7KR/bBC1oGbmLgyl8JZZh66vofQejNvpYn8hhDp8mmClu ggb7c9eCtpGMecmClg7ZInToHx7nL3t7DXCloT3QXf5MqCJXaxF3LEzL+aXYnkqL B4OB2id/Seqh6DFZyQOaWf7QPaU+H6Ut9War1pptTQ2MHRTqjGzi2CBsu6sEmUMT Wqgdubyvr8wmNdYEGrgRUi+CdUNzr3ACoHuz8H3dba9PrPtKjVTmNTZykoN3ExRA Z6kuPZbhf1WXHkfBD5I7hv197wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLa/mK9K RyS29y52B1Fsz3BzSzM5MB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIhZhkMnqIUhBqEh1unX0Nj/azdXKE17kw4s/WonobaBf/rXdr9cd4 XJg869CWZ4OY1BOEXQ7109jPqJMmChIMjctkXW2oVPvnZBDJIKS9KF/bfBnpirH8 yuTnR0Ehpd0EhPFYR+1SbOTqlltHYaME3bYBvTwlPW+rnPjY+xKGz2wV7WwveLK3 M4vfTcrTNd3iu5gnHYKkbDxzCGW8nk4k4P3ZkzCU64O5PnH6iVfP1vFkBTvViMQ4 oBFHyoHZcUfMQ/EW9F/0P3uCgCVLhw/AmXgyijbF2GlQz2m89q8tj8GiTKyl+kQS Msn7AbiREuskO5hcb0Hy7J9IC11cjMj2 -----END CERTIFICATE-----Generated at Sun Jun 15 10:05:42 2025 by rpki-client