$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft File: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft (raw, json) Hash identifier: gjPkLsbtcZQArijQJvqzxPFd1Dqqk6QnQWTXGno/Uzk= Subject key identifier: 85:58:05:45:71:73:06:98:62:08:CE:D2:72:1D:D4:A2:6B:F4:F1:F3 Authority key identifier: 1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B Certificate issuer: /CN=A91C5D32/serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Certificate serial: 0323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft Manifest number: 031E Signing time: Fri 25 Apr 2025 00:54:34 +0000 Manifest this update: Fri 25 Apr 2025 00:54:34 +0000 Manifest next update: Fri 02 May 2025 00:54:34 +0000 Files and hashes: 1: GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl (hash: QO2S285EuJ6f9fVMFZTLnJh/4/3bu2Rd7PQ49uZmSrs=) 2: 9F2711861C8C11ED903AF819C4F9AE02.roa (hash: VrhPXWtsHfk2lJWy8i4sbHEkjus4/qGWqNNqlObOXf4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 803 (0x323) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5D32, serialNumber=1A82D1C6888AB73099F8E59AEB288C0D48BB292B Validity Not Before: Apr 25 00:54:34 2025 GMT Not After : May 2 00:54:34 2025 GMT Subject: CN=680add4a-1b20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:80:2a:35:05:e6:53:29:c0:eb:1c:56:27: 19:a1:a9:10:f2:8e:99:4a:d3:60:fd:16:9f:cb:cf: df:74:1f:d7:0e:56:9d:51:6b:64:e6:6b:6d:58:5f: 5f:1e:f2:b5:f2:ce:b3:ff:92:36:b7:56:88:8b:2a: 84:ca:75:f7:ad:6e:92:3c:9c:af:28:4d:2b:20:0a: 52:01:e8:67:c1:e0:4e:99:65:97:16:b9:f0:4e:f2: 8e:1b:bc:db:1e:3d:6f:e6:9f:40:90:ec:95:43:18: 63:58:5c:dd:d1:bd:3c:d2:85:da:e8:cc:88:77:1d: 4d:92:d7:fe:33:5a:8a:eb:7a:e9:4b:4c:21:ef:11: 78:20:2e:aa:12:e7:08:4c:a0:d1:31:20:c4:4e:41: 3f:e7:de:c0:5c:7c:60:47:fe:4a:e9:67:79:0b:86: f1:1a:97:1a:fd:7f:3e:c8:08:52:89:ad:e8:16:e2: 3d:04:31:f3:ea:79:c6:52:cc:8e:61:71:10:4d:8a: 3c:b6:28:d2:43:89:84:c4:63:46:d6:9d:c4:64:51: 87:d6:14:58:36:40:01:fe:4e:d9:d1:00:cd:ae:3e: 21:01:f2:32:80:e8:18:7e:40:ec:c2:24:5b:5b:9e: c3:8d:b7:f3:6b:20:47:7b:cb:dc:6b:ee:85:e1:6c: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:58:05:45:71:73:06:98:62:08:CE:D2:72:1D:D4:A2:6B:F4:F1:F3 X509v3 Authority Key Identifier: keyid:1A:82:D1:C6:88:8A:B7:30:99:F8:E5:9A:EB:28:8C:0D:48:BB:29:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D32/C7566E64C5FB11ECAC565184C4F9AE02/GoLRxoiKtzCZ-OWa6yiMDUi7KSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:80:4c:10:14:00:ae:90:8b:29:23:f0:44:bb:22:4b:a4: 40:f3:a3:e6:33:89:c4:d5:1c:a7:e1:eb:7d:31:8d:80:4c:d1: 7d:f5:6e:23:47:b7:e9:3d:d9:37:2a:b2:80:f6:a1:0e:65:26: 4d:91:19:c6:9a:01:9d:88:5a:41:a4:61:8f:27:c4:48:f2:29: 1b:04:cc:88:bc:d7:ba:5d:55:6b:18:84:7d:0e:62:4f:23:2b: 18:de:92:eb:39:60:97:8d:10:c4:64:de:ea:0e:cc:41:32:72: ce:b8:66:8c:5d:aa:bb:64:f8:b7:a2:43:59:ca:87:0a:b2:2d: b5:bc:77:f5:1e:d9:58:c3:ea:93:b0:5c:15:b0:7b:6d:81:a0: ab:9e:9c:a5:44:42:de:06:34:cc:44:be:28:bc:48:d6:00:98: ad:ea:be:91:6e:c8:77:4e:ee:08:d1:63:51:83:3c:ac:8a:26: 1c:9a:a5:14:22:da:b0:a5:5c:9b:85:12:5f:57:7f:3c:87:6e: ae:df:a3:4d:bb:42:dd:55:18:5a:b2:8a:a3:21:51:b1:db:d2: c0:04:da:a3:bf:38:f2:d4:2f:f7:d5:8c:54:47:1a:d4:54:16: 1b:12:51:54:37:77:66:ca:f5:f7:44:fe:41:55:cf:3e:08:17: a8:36:9f:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVEMzIxMTAvBgNVBAUTKDFBODJEMUM2ODg4QUI3MzA5OUY4RTU5QUVCMjg4QzBE NDhCQjI5MkIwHhcNMjUwNDI1MDA1NDM0WhcNMjUwNTAyMDA1NDM0WjAYMRYwFAYD VQQDEw02ODBhZGQ0YS0xYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrGAKjUF5lMpwOscVicZoakQ8o6ZStNg/Rafy8/fdB/XDladUWtk5mttWF9f HvK18s6z/5I2t1aIiyqEynX3rW6SPJyvKE0rIApSAehnweBOmWWXFrnwTvKOG7zb Hj1v5p9AkOyVQxhjWFzd0b080oXa6MyIdx1Nktf+M1qK63rpS0wh7xF4IC6qEucI TKDRMSDETkE/597AXHxgR/5K6Wd5C4bxGpca/X8+yAhSia3oFuI9BDHz6nnGUsyO YXEQTYo8tijSQ4mExGNG1p3EZFGH1hRYNkAB/k7Z0QDNrj4hAfIygOgYfkDswiRb W57DjbfzayBHe8vca+6F4WxwYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVYBUVx cwaYYgjO0nId1KJr9PHzMB8GA1UdIwQYMBaAFBqC0caIircwmfjlmusojA1Iuykr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQzMi9DNzU2NkU2NEM1 RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6Q1otT1dhNnlpTURVaTdL U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dvTFJ4b2lLdHpDWi1PV2E2eWlNRFVpN0tTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUQzMi9DNzU2NkU2NEM1RkIxMUVDQUM1NjUxODRDNEY5QUUwMi9Hb0xSeG9pS3R6 Q1otT1dhNnlpTURVaTdLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBV4BMEBQArpCLKSPwRLsiS6RA86PmM4nE1Ryn4et9MY2ATNF99W4j R7fpPdk3KrKA9qEOZSZNkRnGmgGdiFpBpGGPJ8RI8ikbBMyIvNe6XVVrGIR9DmJP IysY3pLrOWCXjRDEZN7qDsxBMnLOuGaMXaq7ZPi3okNZyocKsi21vHf1HtlYw+qT sFwVsHttgaCrnpylRELeBjTMRL4ovEjWAJit6r6Rbsh3Tu4I0WNRgzysiiYcmqUU ItqwpVybhRJfV388h26u36NNu0LdVRhasoqjIVGx29LABNqjvzjy1C/31YxURxrU VBYbElFUN3dmyvX3RP5BVc8+CBeoNp+Y -----END CERTIFICATE-----Generated at Sat Apr 26 03:26:51 2025 by rpki-client