$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: bgVjrntAvLFRRWflrxaLvXHaDQdIfabonhpdDY9YnKk= Subject key identifier: CD:2C:44:9A:55:B2:39:D6:83:69:3C:7B:2C:7A:7F:A3:13:35:09:56 Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 023F Signing time: Mon 02 Mar 2026 02:01:32 +0000 Manifest this update: Mon 02 Mar 2026 02:01:29 +0000 Manifest next update: Mon 09 Mar 2026 02:01:29 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: NDmMD3pMjDLj11e64eiyzcVvpLfjx9MxoQmsQ+vhggI=) 2: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=) 3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=) 4: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Mar 2 02:01:29 2026 GMT Not After : Mar 9 02:01:29 2026 GMT Subject: CN=69a4ef7b-a079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:a8:05:c5:d9:82:c2:28:f7:ce:eb:ff:c9: 24:6d:84:4a:73:c5:ee:95:99:b1:f7:70:aa:87:5a: 54:d3:58:20:1c:39:4e:11:49:45:17:95:b4:28:63: d4:b8:7e:f2:5c:f6:96:17:43:c3:39:e7:d3:3c:78: 12:84:89:95:fb:37:aa:93:21:30:3c:17:8d:b7:45: 5d:22:b2:83:ae:95:f9:5a:08:1b:15:83:23:43:dd: f7:09:70:67:b8:e0:d2:06:76:41:26:1e:4c:31:bc: 68:35:a0:9e:55:5d:e7:33:e7:30:fd:98:36:5d:c1: 85:24:d2:d6:43:d5:46:3b:ef:ca:8e:f5:94:bd:18: ca:92:3f:ca:9d:72:c3:21:fe:69:36:27:65:db:13: 50:b6:70:01:3f:0c:42:88:68:c8:39:a2:0b:ce:06: 12:76:fc:f2:bf:ed:e5:ac:92:c2:4f:8f:94:53:eb: d1:5a:59:2b:01:e0:14:bf:4e:70:3e:e8:03:9c:df: e8:d3:e6:51:a7:6c:11:b9:ea:4a:a7:68:97:41:d7: 82:3d:9a:84:7b:61:2e:8f:6c:e2:cd:e0:d1:7c:63: bc:99:aa:35:ef:60:cc:92:98:db:92:00:cf:6a:ba: 18:e3:0d:d5:e4:bd:f0:fb:a8:4f:b2:c5:23:41:78: 17:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:2C:44:9A:55:B2:39:D6:83:69:3C:7B:2C:7A:7F:A3:13:35:09:56 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cc:94:5d:dc:d7:c2:2b:84:20:9b:45:e0:13:1b:78:71:ab: 2b:9c:52:79:c0:b7:8c:84:5e:25:a6:85:3c:c9:40:dc:60:1d: 3c:4a:7f:a8:db:54:c8:cb:b6:80:9e:b8:22:49:a8:95:ca:fd: 65:87:55:44:41:b0:cc:f9:47:98:df:43:31:8a:83:ce:cd:71: 4d:57:c3:b3:72:1e:8e:a0:d9:25:20:69:76:04:4a:9b:45:cf: 24:0e:87:e6:b4:db:dd:64:e9:b6:4c:79:6b:fd:77:56:15:cc: da:8f:7f:b5:67:ef:81:32:73:64:e6:f7:f1:55:9a:1f:3f:89: be:44:63:e3:9c:55:bd:5c:d6:d8:b4:2a:bc:19:a6:4a:b6:7c: cb:0f:68:dd:ad:ce:5a:45:81:01:bb:90:dc:e6:80:15:c8:ac: fd:0f:27:e0:4b:b4:56:9d:3d:0b:c4:80:30:dd:6b:76:a2:57: b2:80:c8:c7:4d:4c:bd:fc:7d:53:34:36:c2:f2:c5:16:d6:0c: fd:91:de:b2:66:3d:4c:89:4e:fc:43:3f:da:0a:dd:1e:49:6c: 39:0b:7c:0b:07:d9:a7:47:ab:0c:39:16:a1:95:85:7a:c5:2c: f5:af:4a:6d:0b:15:2f:ca:36:37:eb:f2:60:bb:7c:0d:3f:57: f4:15:2a:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjYwMzAyMDIwMTI5WhcNMjYwMzA5MDIwMTI5WjAYMRYwFAYD VQQDEw02OWE0ZWY3Yi1hMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMioBcXZgsIo987r/8kkbYRKc8XulZmx93Cqh1pU01ggHDlOEUlFF5W0KGPU uH7yXPaWF0PDOefTPHgShImV+zeqkyEwPBeNt0VdIrKDrpX5WggbFYMjQ933CXBn uODSBnZBJh5MMbxoNaCeVV3nM+cw/Zg2XcGFJNLWQ9VGO+/KjvWUvRjKkj/KnXLD If5pNidl2xNQtnABPwxCiGjIOaILzgYSdvzyv+3lrJLCT4+UU+vRWlkrAeAUv05w PugDnN/o0+ZRp2wRuepKp2iXQdeCPZqEe2Euj2zizeDRfGO8mao172DMkpjbkgDP aroY4w3V5L3w+6hPssUjQXgX7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM0sRJpV sjnWg2k8eyx6f6MTNQlWMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbMyUXdzXwiuEIJtF4BMbeHGrK5xSecC3jIReJaaFPMlA3GAdPEp/qNtUyMu2 gJ64Ikmolcr9ZYdVREGwzPlHmN9DMYqDzs1xTVfDs3IejqDZJSBpdgRKm0XPJA6H 5rTb3WTptkx5a/13VhXM2o9/tWfvgTJzZOb38VWaHz+JvkRj45xVvVzW2LQqvBmm SrZ8yw9o3a3OWkWBAbuQ3OaAFcis/Q8n4Eu0Vp09C8SAMN1rdqJXsoDIx01Mvfx9 UzQ2wvLFFtYM/ZHesmY9TIlO/EM/2grdHklsOQt8CwfZp0erDDkWoZWFesUs9a9K bQsVL8o2N+vyYLt8DT9X9BUqjg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:31 2026 by rpki-client