$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft File: gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json) Hash identifier: 1YCPMP/mhQ0fZ8m3rczXQE3VLv+v6a42TtKKp1ZSOic= Subject key identifier: B7:0D:F3:1F:89:3F:4E:2B:24:31:D0:46:0B:6B:B1:AF:14:87:84:F6 Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft Manifest number: 9A Signing time: Thu 19 Jun 2025 06:00:24 +0000 Manifest this update: Thu 19 Jun 2025 06:00:23 +0000 Manifest next update: Thu 26 Jun 2025 06:00:23 +0000 Files and hashes: 1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: /FLoU47UBDQJQS98QaBEb2QyVZSLFjJJSCe6YdE3jyY=) 2: E8C350C839FA11F0A6109C5AC4F9AE02.roa (hash: pogoeA9Gn1DtYbCSaz2wC+J8V+7Rp5s9U9o3boqYro4=) 3: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: 919/QrkbKK7KbwR685ZBie0PZUotLL4IkEQTf5I8BR0=) 4: CA79E350BF6D11EF9730D429C4F9AE02.roa (hash: mcdJMOUjsrYKOdvCk8ygrPicEK3lHYQ2f0C8eBymCfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 06:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Validity Not Before: Jun 19 06:00:23 2025 GMT Not After : Jun 26 06:00:23 2025 GMT Subject: CN=6853a778-11c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:30:82:ac:eb:17:ae:de:53:54:ba:46:1e:23: 53:40:22:78:26:2e:3b:1d:0e:a8:b5:48:63:0d:46: f3:37:eb:70:55:4d:e4:48:c8:bc:07:ae:a5:68:9f: 5e:b8:61:70:9b:1a:da:69:7c:a3:ec:c4:e0:26:5c: 80:10:a3:ea:e5:f3:60:42:0e:93:73:e5:ad:fc:7b: c8:7e:9a:3d:60:2a:62:47:15:3f:2c:92:46:13:c7: db:28:47:cc:5a:e8:aa:79:ed:8d:ac:9f:4c:8c:ae: 73:74:7c:8e:b0:9d:2b:6d:3e:80:12:19:e4:92:0c: e3:ad:b5:cf:76:df:41:a9:96:c2:20:af:be:59:97: 78:ff:64:c8:02:9d:11:a2:9e:46:1f:93:1e:80:4f: de:86:f6:cf:55:37:ad:2f:be:60:eb:af:cd:47:1b: 08:83:ed:ff:fc:b2:7a:3f:0e:0b:a3:2a:99:51:3a: e2:eb:be:d7:ee:c4:93:08:57:7d:48:dc:56:f3:46: ca:1a:9b:72:2c:74:ea:6a:41:7e:80:e4:21:f1:3f: 8a:f1:b0:6d:7a:8f:90:8b:c5:f8:93:6e:b6:74:96: f5:d0:eb:05:9f:54:6a:48:9f:44:08:11:93:2e:92: 68:83:49:5e:ad:ba:b0:1b:cf:45:ec:39:79:52:3b: 43:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:F3:1F:89:3F:4E:2B:24:31:D0:46:0B:6B:B1:AF:14:87:84:F6 X509v3 Authority Key Identifier: keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:7e:9d:a1:85:6c:bb:4d:e2:f5:af:1b:de:32:0e:18:6b:5b: ec:84:19:d5:df:76:45:d4:ad:de:45:9b:66:e7:86:fd:f3:9f: 57:55:77:65:ba:83:ea:45:d6:e6:19:4f:9c:24:4d:78:67:40: ee:aa:89:d9:f7:31:09:d9:5c:69:5e:fc:9b:5d:44:e9:e9:cb: 1a:76:48:47:b9:84:0f:49:eb:16:3a:e0:54:9c:cb:c8:75:ba: c7:c2:fe:e1:eb:34:94:1b:52:4d:9d:dc:d2:28:94:9f:e6:5a: 12:ea:85:f0:31:6d:6e:d7:b7:82:2f:72:07:84:46:03:92:11: 59:82:b4:96:de:f5:d5:0a:52:52:fa:9b:54:81:87:8f:3e:16: 81:f0:cf:76:11:d9:4b:53:cd:90:a5:5c:f7:41:a1:73:06:f9: dc:f4:6a:97:4c:0c:18:59:89:d3:76:a8:d0:ce:c9:57:cb:46: 1b:8d:b0:72:18:09:35:47:28:12:f1:e8:c3:df:b7:1c:e6:8c: 99:26:0d:b8:bf:39:ac:06:5e:40:08:93:bf:ea:b6:d8:9d:fe: 1b:ec:99:5d:e2:54:7b:7d:56:7c:d6:21:05:01:17:46:c4:01: 88:8d:1d:b3:b8:b8:ce:79:4e:2d:22:87:94:f4:2c:90:62:63: bf:ea:3e:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3 MzFCQUQyMjQwHhcNMjUwNjE5MDYwMDIzWhcNMjUwNjI2MDYwMDIzWjAYMRYwFAYD VQQDEw02ODUzYTc3OC0xMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTCCrOsXrt5TVLpGHiNTQCJ4Ji47HQ6otUhjDUbzN+twVU3kSMi8B66laJ9e uGFwmxraaXyj7MTgJlyAEKPq5fNgQg6Tc+Wt/HvIfpo9YCpiRxU/LJJGE8fbKEfM Wuiqee2NrJ9MjK5zdHyOsJ0rbT6AEhnkkgzjrbXPdt9BqZbCIK++WZd4/2TIAp0R op5GH5MegE/ehvbPVTetL75g66/NRxsIg+3//LJ6Pw4LoyqZUTri677X7sSTCFd9 SNxW80bKGptyLHTqakF+gOQh8T+K8bBteo+Qi8X4k262dJb10OsFn1RqSJ9ECBGT LpJog0lerbqwG89F7Dl5UjtDvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcN8x+J P04rJDHQRgtrsa8Uh4T2MB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTVDRS80NTFBODIzQThCN0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3 TmdFY0l6SXhjS2x6RzYwaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhfp2hhWy7TeL1rxveMg4Ya1vshBnV33ZF1K3eRZtm54b9859XVXdl uoPqRdbmGU+cJE14Z0DuqonZ9zEJ2VxpXvybXUTp6csadkhHuYQPSesWOuBUnMvI dbrHwv7h6zSUG1JNndzSKJSf5loS6oXwMW1u17eCL3IHhEYDkhFZgrSW3vXVClJS +ptUgYePPhaB8M92EdlLU82QpVz3QaFzBvnc9GqXTAwYWYnTdqjQzslXy0YbjbBy GAk1RygS8ejD37cc5oyZJg24vzmsBl5ACJO/6rbYnf4b7Jld4lR7fVZ81iEFARdG xAGIjR2zuLjOeU4tIoeU9CyQYmO/6j44 -----END CERTIFICATE-----Generated at Thu Jun 19 12:46:41 2025 by rpki-client