$ rpki-client -vvf rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft File: goqGO92fRnXqGDzaoQT1SyN3Lkk.mft (raw, json) Hash identifier: dmSr9HSAaEvVdt9gdEQpY8wTxzqa02H43yNrOjrhU74= Subject key identifier: 7C:30:10:C6:0F:3A:5D:EE:95:08:E9:48:57:29:75:97:F8:5B:F2:DE Authority key identifier: 82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 Certificate issuer: /CN=A913D4B2/serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Certificate serial: 0680 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft Manifest number: 067B Signing time: Fri 30 May 2025 22:30:34 +0000 Manifest this update: Fri 30 May 2025 22:30:33 +0000 Manifest next update: Fri 06 Jun 2025 22:30:33 +0000 Files and hashes: 1: goqGO92fRnXqGDzaoQT1SyN3Lkk.crl (hash: QQ16p5S5efzJbz+U4PKCaUr5eX1PLahHSNQVDC2wfSw=) 2: C148AF5C9B4811EBB3FAE847C4F9AE02.roa (hash: ElM40kRXls4915TJFeuEiV6vcriAHquSzfVrwEFHIlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1664 (0x680) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D4B2, serialNumber=828A863BDD9F4675EA183CDAA104F54B23772E49 Validity Not Before: May 30 22:30:33 2025 GMT Not After : Jun 6 22:30:33 2025 GMT Subject: CN=683a318a-fb0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:95:97:33:98:72:52:b1:27:7f:82:b2:a7:e8: 7e:66:f2:83:6b:b7:b1:bf:6e:a6:18:fc:76:9d:07: e9:14:16:5a:08:c8:6f:6d:e3:7d:bb:76:29:30:0b: b8:8e:12:ee:1f:91:70:66:a1:16:50:99:9b:66:e3: 65:e5:9f:31:ba:46:34:6e:83:c3:6e:32:6a:ef:fc: 44:f4:91:2c:b0:8e:88:f6:f7:49:71:32:da:37:fd: 1a:40:33:75:e6:f6:fb:bb:dc:38:50:f1:e6:09:a3: f5:3a:4f:8a:a4:af:95:21:a3:46:cc:ee:2b:7d:62: a1:27:0b:1b:11:9f:25:31:13:83:e4:de:ba:fe:1d: 4f:0a:ea:31:01:96:76:5e:06:a2:33:06:06:dd:d4: 68:0a:92:24:d6:79:d7:f7:31:b2:b6:67:b0:e6:61: d5:65:35:1c:52:a3:ad:f6:74:93:2e:b7:7d:ee:76: 26:20:51:18:65:21:21:4f:4c:a5:5f:09:12:96:ab: b1:6a:a6:73:7a:86:a7:c2:a8:df:a3:fd:96:ce:88: 91:43:d7:c5:ab:c9:d8:7f:d0:20:9e:a4:c7:12:8d: f4:10:ba:12:0a:94:43:88:d3:8c:0e:96:17:3a:dc: f9:18:08:83:23:27:82:16:f5:53:bb:13:34:29:ee: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:10:C6:0F:3A:5D:EE:95:08:E9:48:57:29:75:97:F8:5B:F2:DE X509v3 Authority Key Identifier: keyid:82:8A:86:3B:DD:9F:46:75:EA:18:3C:DA:A1:04:F5:4B:23:77:2E:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goqGO92fRnXqGDzaoQT1SyN3Lkk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D4B2/B4B20CAE784111EBB3480961C4F9AE02/goqGO92fRnXqGDzaoQT1SyN3Lkk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:62:dc:eb:cb:d7:dd:e8:2e:34:65:9a:85:c7:eb:46:a1:3a: 18:bb:94:f2:5f:63:d3:a6:8f:3f:19:14:97:83:e0:2f:9f:f4: 69:7f:00:9c:51:8f:8f:58:79:54:69:5f:12:3d:e7:63:4b:d2: ab:9e:96:90:3d:4e:db:22:1d:da:1e:63:06:ec:97:f8:32:7f: 8f:d8:ed:57:d1:a1:d5:e2:5f:68:9e:20:9a:22:62:b7:83:79: 6d:c4:8a:f1:7e:18:54:65:95:18:a9:86:c1:ed:c7:ab:3e:d5: 5a:5c:5f:d2:d1:d6:5a:af:c2:d3:80:9b:68:9e:10:5d:29:dc: 1d:82:2a:20:cd:f7:99:99:7f:4e:6f:ee:22:d8:8f:3b:07:b5: 71:40:ea:d0:ee:dc:89:ec:b2:3f:f9:ce:40:b4:ef:9e:65:e1: 82:6e:19:be:b2:9c:36:70:e4:0a:d5:eb:1b:12:c3:e6:ab:75: 72:d4:92:1c:c9:0d:61:be:4e:0a:a5:46:fd:09:26:92:7f:46: 52:00:77:91:0f:73:db:53:c2:ed:ee:91:9e:54:20:f2:34:b2: 31:1c:7e:63:68:d0:9a:df:b9:87:f1:e5:e1:85:05:db:74:ac: c9:2c:76:ad:16:04:96:e3:6b:6c:44:e6:40:eb:67:0f:b9:0f: 72:3c:4a:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0Q0QjIxMTAvBgNVBAUTKDgyOEE4NjNCREQ5RjQ2NzVFQTE4M0NEQUExMDRGNTRC MjM3NzJFNDkwHhcNMjUwNTMwMjIzMDMzWhcNMjUwNjA2MjIzMDMzWjAYMRYwFAYD VQQDEw02ODNhMzE4YS1mYjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JWXM5hyUrEnf4Kyp+h+ZvKDa7exv26mGPx2nQfpFBZaCMhvbeN9u3YpMAu4 jhLuH5FwZqEWUJmbZuNl5Z8xukY0boPDbjJq7/xE9JEssI6I9vdJcTLaN/0aQDN1 5vb7u9w4UPHmCaP1Ok+KpK+VIaNGzO4rfWKhJwsbEZ8lMROD5N66/h1PCuoxAZZ2 XgaiMwYG3dRoCpIk1nnX9zGytmew5mHVZTUcUqOt9nSTLrd97nYmIFEYZSEhT0yl XwkSlquxaqZzeoanwqjfo/2WzoiRQ9fFq8nYf9AgnqTHEo30ELoSCpRDiNOMDpYX Otz5GAiDIyeCFvVTuxM0Ke72qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwwEMYP Ol3ulQjpSFcpdZf4W/LeMB8GA1UdIwQYMBaAFIKKhjvdn0Z16hg82qEE9Usjdy5J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDRCMi9CNEIyMENBRTc4 NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJuWHFHRHphb1FUMVN5TjNM a2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcUdPOTJmUm5YcUdEemFvUVQxU3lOM0xray5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDRCMi9CNEIyMENBRTc4NDExMUVCQjM0ODA5NjFDNEY5QUUwMi9nb3FHTzkyZlJu WHFHRHphb1FUMVN5TjNMa2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Ytzry9fd6C40ZZqFx+tGoToYu5TyX2PTpo8/GRSXg+Avn/RpfwCc UY+PWHlUaV8SPedjS9KrnpaQPU7bIh3aHmMG7Jf4Mn+P2O1X0aHV4l9oniCaImK3 g3ltxIrxfhhUZZUYqYbB7cerPtVaXF/S0dZar8LTgJtonhBdKdwdgiogzfeZmX9O b+4i2I87B7VxQOrQ7tyJ7LI/+c5AtO+eZeGCbhm+spw2cOQK1esbEsPmq3Vy1JIc yQ1hvk4KpUb9CSaSf0ZSAHeRD3PbU8Lt7pGeVCDyNLIxHH5jaNCa37mH8eXhhQXb dKzJLHatFgSW42tsROZA62cPuQ9yPEo6 -----END CERTIFICATE-----Generated at Sat May 31 16:43:48 2025 by rpki-client