$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: YBJ195/WV5ZnKQ3lTPvBMdgRlGH3bY7rMTMb8a0u+PI= Subject key identifier: 0F:6B:A9:17:B1:23:BF:59:CC:D4:92:66:CE:8E:20:D1:5D:B7:72:7A Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01D3 Signing time: Sat 09 Aug 2025 03:10:39 +0000 Manifest this update: Sat 09 Aug 2025 03:10:38 +0000 Manifest next update: Sat 16 Aug 2025 03:10:38 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: gUhjmD3eFFYiNREBBy9e6ccjYQcqOhdRFUik/KOvvPI=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Aug 9 03:10:38 2025 GMT Not After : Aug 16 03:10:38 2025 GMT Subject: CN=6896bc2e-c684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:21:2d:9e:7f:d0:94:20:57:03:62:7f:1e:a9: 96:0a:42:ef:67:82:92:63:4f:0a:a1:cf:db:ca:ed: 1e:64:60:f6:07:f9:52:59:1d:27:35:1b:fa:fc:5e: a2:2a:25:3b:4a:d7:25:10:22:cb:3e:a6:66:f8:37: cf:5d:d3:1c:99:57:c1:39:32:e5:5c:9a:f8:c3:c6: eb:28:61:fe:e6:90:0e:26:c9:8b:1e:c5:fb:e6:c2: 90:0f:cb:ca:4a:79:f9:eb:5e:0b:2d:8a:a7:c2:1d: b3:39:30:df:61:a4:87:a5:f5:57:db:97:be:00:e0: e9:41:8f:55:b2:17:38:70:92:a3:05:4a:ec:b0:ad: ff:36:a0:72:79:ae:d7:e9:3e:09:53:57:38:f3:c0: 53:7e:61:e6:aa:6d:bb:9a:28:2d:59:e6:da:19:45: 09:89:2c:b1:57:fe:0e:37:13:bb:19:5f:96:14:d3: 4b:83:2d:63:57:96:4f:e4:77:5d:7a:db:ea:27:8e: 0f:23:c0:fe:d0:3f:a2:2b:ea:6e:f8:b4:d3:96:ad: 32:d3:d7:bc:8d:b6:59:dc:55:af:20:1a:02:b7:52: 2c:ab:36:f2:98:4f:f4:37:a0:46:4d:2f:2a:ab:67: fe:86:f0:05:57:fa:94:4b:0f:1b:6e:fa:33:08:01: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6B:A9:17:B1:23:BF:59:CC:D4:92:66:CE:8E:20:D1:5D:B7:72:7A X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:1f:20:b9:68:20:73:12:89:5b:c0:6b:48:f8:f0:81:4b:18: 1c:3d:4e:a0:8f:0a:0a:08:6d:89:ac:d8:28:6f:29:dc:6c:a6: f6:7d:ec:ca:70:db:35:06:9c:c9:17:48:4a:d3:fd:e7:04:3f: ea:34:72:5a:64:09:68:6b:37:46:fb:52:07:46:71:f1:ec:be: 20:67:83:70:79:7b:10:6e:b8:72:17:ed:7b:49:6f:61:51:24: 8f:a2:05:b5:3b:32:16:71:5e:ec:db:70:4e:a0:4f:3c:64:8e: 38:0d:df:28:7f:ca:87:9a:be:16:45:49:ed:d6:9b:91:68:0e: 03:cb:3e:12:45:d1:e2:fc:1e:13:09:43:b7:f2:98:17:b8:f2: 0d:c0:c1:c4:cb:92:e6:4a:f2:57:9b:d9:3f:50:1d:51:a5:89: c4:fb:e2:a7:93:79:eb:73:d5:7e:17:a0:5a:48:e9:ba:a5:09: 60:1c:74:c5:e6:0e:e9:83:5d:3b:ee:3f:f4:83:e0:e7:2e:ae: 96:dd:a7:f0:68:b2:b5:28:d3:a9:5d:5d:dd:b6:d9:62:0b:da: 0e:94:a1:d1:14:21:cc:87:df:ca:1f:d6:57:29:24:b0:f2:82: 10:0b:11:0b:22:d0:1a:e2:1a:44:f2:7a:69:64:c0:cb:0f:3d: 69:c2:92:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwODA5MDMxMDM4WhcNMjUwODE2MDMxMDM4WjAYMRYwFAYD VQQDEw02ODk2YmMyZS1jNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiEtnn/QlCBXA2J/HqmWCkLvZ4KSY08Koc/byu0eZGD2B/lSWR0nNRv6/F6i KiU7StclECLLPqZm+DfPXdMcmVfBOTLlXJr4w8brKGH+5pAOJsmLHsX75sKQD8vK Snn5614LLYqnwh2zOTDfYaSHpfVX25e+AODpQY9Vshc4cJKjBUrssK3/NqByea7X 6T4JU1c488BTfmHmqm27migtWebaGUUJiSyxV/4ONxO7GV+WFNNLgy1jV5ZP5Hdd etvqJ44PI8D+0D+iK+pu+LTTlq0y09e8jbZZ3FWvIBoCt1IsqzbymE/0N6BGTS8q q2f+hvAFV/qUSw8bbvozCAEg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9rqRex I79ZzNSSZs6OINFdt3J6MB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsHyC5aCBzEolbwGtI+PCBSxgcPU6gjwoKCG2JrNgobyncbKb2fezK cNs1BpzJF0hK0/3nBD/qNHJaZAloazdG+1IHRnHx7L4gZ4NweXsQbrhyF+17SW9h USSPogW1OzIWcV7s23BOoE88ZI44Dd8of8qHmr4WRUnt1puRaA4Dyz4SRdHi/B4T CUO38pgXuPINwMHEy5LmSvJXm9k/UB1RpYnE++Knk3nrc9V+F6BaSOm6pQlgHHTF 5g7pg1077j/0g+DnLq6W3afwaLK1KNOpXV3dttliC9oOlKHRFCHMh9/KH9ZXKSSw 8oIQCxELItAa4hpE8nppZMDLDz1pwpKB -----END CERTIFICATE-----Generated at Sat Aug 9 15:15:21 2025 by rpki-client