$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: Q8etrPp9HTSRQ+edJ352VcyKnbzL3R0K4zXerTWWsL4= Subject key identifier: 9F:30:12:38:93:3A:7E:8C:69:06:D7:EA:97:8F:5E:C8:81:42:9B:2A Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 019E Signing time: Fri 25 Apr 2025 02:31:56 +0000 Manifest this update: Fri 25 Apr 2025 02:31:56 +0000 Manifest next update: Fri 02 May 2025 02:31:55 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: E51sFDljAZBTXkKYvLTa1nauPkabLoCv4mjEs+lsRtg=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Apr 25 02:31:56 2025 GMT Not After : May 2 02:31:55 2025 GMT Subject: CN=680af41c-444b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:3e:d4:90:8b:62:83:76:24:a5:d0:24:4d: db:42:de:dd:d4:74:19:47:7f:60:c1:a8:6d:d9:16: 2b:9c:2a:a8:d5:6e:91:b2:06:f0:22:e4:22:68:91: 4a:3a:a4:d4:38:5d:6a:e4:09:de:3e:61:26:7a:01: 43:20:8a:63:c0:8e:f1:6d:97:2c:6f:7c:4c:3c:7f: 7c:b1:82:88:49:c4:13:a3:99:16:28:c2:01:43:8d: 81:dd:0f:c3:c4:4e:b4:f8:55:18:fb:6d:49:cb:b6: 82:45:04:be:b4:8d:52:d5:2f:0a:51:c4:71:0b:ba: d2:49:d0:4e:f0:ed:9f:2d:21:29:69:01:cc:f3:43: 81:c4:be:17:f7:38:40:cd:fe:1a:a9:ba:66:b5:4f: 66:39:7c:d7:cb:40:19:64:ec:23:fd:f8:4c:7b:f8: bc:a4:bf:a1:4a:17:42:83:26:63:a5:1e:23:16:9e: 0b:be:0a:e6:97:10:b9:fa:dc:6c:85:d8:eb:bf:30: b7:f4:70:e8:7a:d8:53:3d:ba:e1:05:ae:f5:dd:24: 8f:6f:5b:9b:84:d6:62:71:a8:bc:11:5e:20:06:c8: 61:01:e8:33:bf:4a:23:4f:12:d2:1c:22:73:f1:cb: 01:3c:31:5c:a7:c0:e5:47:b1:5d:01:02:e4:f2:59: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:12:38:93:3A:7E:8C:69:06:D7:EA:97:8F:5E:C8:81:42:9B:2A X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0e:3a:bc:1e:14:cc:1d:de:94:87:a7:19:20:0d:5e:98:e3: 68:53:b4:85:d9:76:69:2a:e2:0f:8f:23:3b:a3:24:f4:0c:42: 5e:5e:0d:67:06:27:6b:ff:ac:ed:b5:17:ef:fc:e0:a1:ad:08: 94:b6:44:01:ea:f6:8f:ce:85:a8:43:23:a0:74:0d:bc:4f:66: 5a:aa:22:a6:40:59:86:de:16:98:74:7b:2c:ce:1f:d7:c6:0e: 69:be:47:c1:37:cf:9d:04:59:9e:57:c5:bb:99:9c:06:bb:61: 1c:be:f5:f1:48:72:da:24:f4:59:16:1f:49:76:1e:30:ba:63: b2:90:ab:62:ca:22:ee:99:88:f4:52:c3:36:56:51:41:d3:23: e9:5c:63:89:82:21:59:5b:b1:92:07:1a:92:0b:8b:57:b7:c4: f9:10:65:db:e4:b8:11:04:fc:79:a4:06:82:5c:7c:c6:e2:a1: e6:fa:20:11:75:25:aa:19:da:6b:09:97:32:63:32:e6:43:7a: a6:83:12:3a:7b:1e:10:9f:29:d2:49:4e:41:6c:3d:07:42:b2: a9:c8:97:a8:97:75:85:cd:88:4b:f5:40:1a:19:e7:04:81:da: a7:11:b1:07:a1:54:b9:cb:45:7e:93:9d:fc:38:2b:d9:57:85: f5:2c:fd:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwNDI1MDIzMTU2WhcNMjUwNTAyMDIzMTU1WjAYMRYwFAYD VQQDEw02ODBhZjQxYy00NDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqg+1JCLYoN2JKXQJE3bQt7d1HQZR39gwaht2RYrnCqo1W6RsgbwIuQiaJFK OqTUOF1q5AnePmEmegFDIIpjwI7xbZcsb3xMPH98sYKIScQTo5kWKMIBQ42B3Q/D xE60+FUY+21Jy7aCRQS+tI1S1S8KUcRxC7rSSdBO8O2fLSEpaQHM80OBxL4X9zhA zf4aqbpmtU9mOXzXy0AZZOwj/fhMe/i8pL+hShdCgyZjpR4jFp4LvgrmlxC5+txs hdjrvzC39HDoethTPbrhBa713SSPb1ubhNZicai8EV4gBshhAegzv0ojTxLSHCJz 8csBPDFcp8DlR7FdAQLk8lmx8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8wEjiT On6MaQbX6pePXsiBQpsqMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFDjq8HhTMHd6Uh6cZIA1emONoU7SF2XZpKuIPjyM7oyT0DEJeXg1n Bidr/6zttRfv/OChrQiUtkQB6vaPzoWoQyOgdA28T2ZaqiKmQFmG3haYdHsszh/X xg5pvkfBN8+dBFmeV8W7mZwGu2EcvvXxSHLaJPRZFh9Jdh4wumOykKtiyiLumYj0 UsM2VlFB0yPpXGOJgiFZW7GSBxqSC4tXt8T5EGXb5LgRBPx5pAaCXHzG4qHm+iAR dSWqGdprCZcyYzLmQ3qmgxI6ex4QnynSSU5BbD0HQrKpyJeol3WFzYhL9UAaGecE gdqnEbEHoVS5y0V+k538OCvZV4X1LP0J -----END CERTIFICATE-----Generated at Sat Apr 26 05:21:38 2025 by rpki-client