$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: wmHckNaieTuxZ72pVZvdrFpTPoXQk6gczKoDbx73ISE= Subject key identifier: 9A:0C:AA:64:91:7F:56:B4:6B:3A:01:B2:4D:C0:C6:39:8C:39:E9:35 Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01FF Signing time: Wed 05 Nov 2025 02:31:29 +0000 Manifest this update: Wed 05 Nov 2025 02:31:29 +0000 Manifest next update: Wed 12 Nov 2025 02:31:29 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: dnp/7VYkWwyVITRopdCA2KU4MAs/X6nVrpVHF3qZhhY=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Nov 5 02:31:29 2025 GMT Not After : Nov 12 02:31:29 2025 GMT Subject: CN=690ab701-5252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:f6:b7:34:f8:ed:03:90:af:5e:f7:e9:19: e7:19:ca:f9:f8:7c:18:05:38:d0:73:8a:9f:a3:41: 46:9a:41:be:3f:e3:fd:b8:e1:e4:fe:bd:ec:7d:00: cb:5d:e0:0e:1f:a1:2c:4a:fe:3c:40:80:8b:93:f8: ac:34:bc:34:7f:fb:6e:34:9d:12:be:30:23:68:d1: 2c:8c:73:19:6e:b1:9e:a0:47:dc:30:60:aa:58:03: 77:db:3c:63:d9:e7:26:af:fb:9c:22:02:81:c0:72: cb:a7:e7:5b:f1:89:80:16:29:d2:f2:49:2b:7b:b3: 96:d5:00:1d:7b:51:e0:d3:25:2f:46:a0:12:1f:da: c1:fe:8f:13:39:7a:7a:5d:44:9f:b8:b3:4e:6a:a9: 7e:aa:be:d8:ba:a3:96:ea:1d:2a:98:8c:82:25:db: c0:db:1a:b7:fc:85:fe:8b:7f:01:5d:dc:38:f1:d5: 91:01:f6:36:76:46:d6:50:0d:24:b0:93:8c:c3:be: a5:d8:9a:0b:9c:ba:c8:43:d4:3d:56:df:30:bb:45: 8d:91:86:0b:37:f2:8d:06:73:0e:fc:31:98:e6:a7: 61:54:05:21:98:67:1f:86:c2:3b:ba:a2:df:13:18: 40:25:85:da:50:26:53:52:03:e5:b9:86:d1:ff:b1: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:AA:64:91:7F:56:B4:6B:3A:01:B2:4D:C0:C6:39:8C:39:E9:35 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:42:8d:dc:88:bc:21:fb:0c:b1:b9:d9:cb:8a:ec:fd:12:43: 78:f0:28:2f:d9:04:48:d3:c8:79:71:d1:ee:fe:1c:8e:d7:32: 35:ae:25:1b:1b:a3:ac:b7:0a:70:af:11:2e:8c:bc:1c:c4:8c: ac:80:9e:66:ce:19:38:29:90:6c:01:de:c4:74:2e:9f:c8:88: 3f:b3:41:ec:03:65:3e:d4:78:d0:c8:75:95:ca:1d:9e:33:d4: 1e:3a:27:8c:ce:6d:e4:e8:22:80:b8:c5:50:49:c0:52:7b:27: 09:ab:25:1a:fa:e2:06:f0:ea:dc:ab:a8:3e:52:1d:52:59:9f: a4:8b:be:e2:1b:35:a9:8e:c4:7e:ff:e5:92:49:39:fc:72:9e: 18:d9:cc:65:83:45:ae:11:a6:b0:c6:2f:2f:3d:b4:c9:8d:3e: 29:17:62:13:9e:da:51:6c:5e:25:15:95:86:76:bc:46:b5:2a: 60:3a:ef:7f:29:00:61:a0:fc:43:43:2f:7e:a5:40:e3:bb:82: e3:f5:7d:cd:6b:86:a6:0c:70:b7:f9:1a:4c:cc:be:b6:02:7a: 57:56:40:29:1e:89:52:79:8b:a7:65:9c:47:42:e8:24:98:bc: a8:39:75:2e:77:d4:ae:06:0d:5a:c1:7a:a8:df:6d:f3:ba:38: cc:59:81:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUxMTA1MDIzMTI5WhcNMjUxMTEyMDIzMTI5WjAYMRYwFAYD VQQDEw02OTBhYjcwMS01MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFL2tzT47QOQr1736RnnGcr5+HwYBTjQc4qfo0FGmkG+P+P9uOHk/r3sfQDL XeAOH6EsSv48QICLk/isNLw0f/tuNJ0SvjAjaNEsjHMZbrGeoEfcMGCqWAN32zxj 2ecmr/ucIgKBwHLLp+db8YmAFinS8kkre7OW1QAde1Hg0yUvRqASH9rB/o8TOXp6 XUSfuLNOaql+qr7YuqOW6h0qmIyCJdvA2xq3/IX+i38BXdw48dWRAfY2dkbWUA0k sJOMw76l2JoLnLrIQ9Q9Vt8wu0WNkYYLN/KNBnMO/DGY5qdhVAUhmGcfhsI7uqLf ExhAJYXaUCZTUgPluYbR/7EF7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJoMqmSR f1a0azoBsk3AxjmMOek1MB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQo3ciLwh+wyxudnLiuz9EkN48Cgv2QRI08h5cdHu/hyO1zI1riUb G6OstwpwrxEujLwcxIysgJ5mzhk4KZBsAd7EdC6fyIg/s0HsA2U+1HjQyHWVyh2e M9QeOieMzm3k6CKAuMVQScBSeycJqyUa+uIG8Orcq6g+Uh1SWZ+ki77iGzWpjsR+ /+WSSTn8cp4Y2cxlg0WuEaawxi8vPbTJjT4pF2ITntpRbF4lFZWGdrxGtSpgOu9/ KQBhoPxDQy9+pUDju4Lj9X3Na4amDHC3+RpMzL62AnpXVkApHolSeYunZZxHQugk mLyoOXUud9SuBg1awXqo323zujjMWYF/ -----END CERTIFICATE-----Generated at Wed Nov 5 16:26:49 2025 by rpki-client