$ rpki-client -vvf rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft File: goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft (raw, json) Hash identifier: WIh4M/aV/yJss5he+vPumUM6ac9b4VDxneAfZjhDoXY= Subject key identifier: 10:21:4F:95:B6:77:97:B2:DA:0D:B3:E7:C3:C5:D8:E1:91:20:B5:C0 Authority key identifier: 82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 Certificate issuer: /CN=A914C99C/serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft Manifest number: 05CB Signing time: Thu 18 Sep 2025 23:21:57 +0000 Manifest this update: Thu 18 Sep 2025 23:21:57 +0000 Manifest next update: Thu 25 Sep 2025 23:21:57 +0000 Files and hashes: 1: goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl (hash: 8A/gabR2+k0yKEFLi1Rt4MAzaB5S+72Bp/j0wx5ACS4=) 2: 95B0A0606C5811ED882F827DC4F9AE02.roa (hash: bTxB6rDqe5W838nV/qkoLeLUMklQqO8XCDilOupFQgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C99C, serialNumber=82818DD2239DE8335D22ADCE3DF190A310B70024 Validity Not Before: Sep 18 23:21:57 2025 GMT Not After : Sep 25 23:21:57 2025 GMT Subject: CN=68cc9415-b1c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:b2:85:9b:c2:ed:85:c3:66:af:77:cd:81: a6:74:db:0d:93:89:57:57:cc:dc:9c:29:df:1e:d2: 0a:9f:fb:8e:99:06:e1:be:38:47:b8:e9:83:5a:f9: 6d:d5:53:65:9c:65:f8:32:f4:1a:93:f3:cb:3f:f7: 53:01:8c:12:9a:27:47:03:a6:fe:4e:d3:fc:59:f9: c2:31:71:09:ee:0d:ed:00:63:23:61:db:a4:20:99: 88:73:c5:fd:38:35:e2:45:be:d2:fe:f2:3b:47:1d: 5b:c5:20:b9:48:3b:d6:21:36:2e:07:0f:b8:a2:51: 06:f5:5a:38:84:dd:e7:6b:8e:dd:7e:0b:f8:71:92: 11:21:89:f5:0b:a6:da:40:37:5d:1c:b0:aa:98:9d: 08:df:99:61:08:0d:d6:b1:fd:fa:75:be:70:07:66: b7:4a:80:23:23:40:9b:20:b3:6c:b0:2d:f2:58:89: f2:79:af:7f:59:0c:13:d0:54:29:44:35:32:f7:e1: ee:3a:1e:5c:0a:09:0f:21:8b:02:87:6c:e1:eb:77: 4a:54:a1:29:4b:19:b2:91:f0:14:d6:97:a3:67:43: 68:69:c9:76:f3:02:0b:84:12:e5:51:18:98:39:8e: b4:cf:32:c1:fb:00:2e:38:2f:f6:81:95:2d:33:a4: d3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:21:4F:95:B6:77:97:B2:DA:0D:B3:E7:C3:C5:D8:E1:91:20:B5:C0 X509v3 Authority Key Identifier: keyid:82:81:8D:D2:23:9D:E8:33:5D:22:AD:CE:3D:F1:90:A3:10:B7:00:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goGN0iOd6DNdIq3OPfGQoxC3ACQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C99C/2A1AE9ECD57211EBA60ED057C4F9AE02/goGN0iOd6DNdIq3OPfGQoxC3ACQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:59:88:5e:70:ec:eb:50:c1:ea:a4:37:a4:de:39:cc:cf:5d: 86:92:31:a0:8b:73:0f:3b:de:07:bc:df:30:cc:bd:6a:c6:25: 7d:0d:1f:ad:66:2e:96:d9:88:b9:9c:7b:68:0d:c7:b6:aa:f1: b2:3b:99:e1:34:e2:4e:53:93:e0:f7:d4:1d:78:ee:34:91:f6: 91:3d:e4:0e:f7:c5:cc:7b:e0:fd:2d:6b:28:9a:d2:2a:c2:33: 64:43:5a:84:c0:8f:67:98:4b:5d:2d:36:d8:cc:ca:97:47:50: b8:58:03:55:10:ba:77:8c:6e:1c:39:30:88:89:ec:70:77:55: 50:ae:2c:42:bc:dc:c6:22:41:47:2a:36:01:91:e4:bd:65:77: c8:eb:cf:08:78:51:34:3c:24:db:23:29:c7:5d:92:44:ef:f6: 3c:f6:d5:ad:ff:7b:0c:0a:a4:01:02:2b:c3:3f:b3:58:9b:51: 84:d9:36:3b:73:05:43:1d:34:fd:74:b0:bb:83:ed:37:6a:e7: 02:b2:57:31:1a:5c:7f:fd:95:19:e9:62:d5:2d:e4:e2:25:0e: 62:8f:18:f7:f5:69:bc:b0:4f:fc:d6:63:e5:2b:93:fb:5b:87: 22:f6:b7:92:76:db:98:4b:26:68:2a:c0:c0:b4:e1:a1:1e:b8: cd:76:61:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5OUMxMTAvBgNVBAUTKDgyODE4REQyMjM5REU4MzM1RDIyQURDRTNERjE5MEEz MTBCNzAwMjQwHhcNMjUwOTE4MjMyMTU3WhcNMjUwOTI1MjMyMTU3WjAYMRYwFAYD VQQDEw02OGNjOTQxNS1iMWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIqyhZvC7YXDZq93zYGmdNsNk4lXV8zcnCnfHtIKn/uOmQbhvjhHuOmDWvlt 1VNlnGX4MvQak/PLP/dTAYwSmidHA6b+TtP8WfnCMXEJ7g3tAGMjYdukIJmIc8X9 ODXiRb7S/vI7Rx1bxSC5SDvWITYuBw+4olEG9Vo4hN3na47dfgv4cZIRIYn1C6ba QDddHLCqmJ0I35lhCA3Wsf36db5wB2a3SoAjI0CbILNssC3yWInyea9/WQwT0FQp RDUy9+HuOh5cCgkPIYsCh2zh63dKVKEpSxmykfAU1pejZ0Noacl28wILhBLlURiY OY60zzLB+wAuOC/2gZUtM6TTyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBAhT5W2 d5ey2g2z58PF2OGRILXAMB8GA1UdIwQYMBaAFIKBjdIjnegzXSKtzj3xkKMQtwAk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qzk5Qy8yQTFBRTlFQ0Q1 NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZETmRJcTNPUGZHUW94QzNB Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvR04waU9kNkROZElxM09QZkdRb3hDM0FDUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Qzk5Qy8yQTFBRTlFQ0Q1NzIxMUVCQTYwRUQwNTdDNEY5QUUwMi9nb0dOMGlPZDZE TmRJcTNPUGZHUW94QzNBQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVWYhecOzrUMHqpDek3jnMz12GkjGgi3MPO94HvN8wzL1qxiV9DR+t Zi6W2Yi5nHtoDce2qvGyO5nhNOJOU5Pg99QdeO40kfaRPeQO98XMe+D9LWsomtIq wjNkQ1qEwI9nmEtdLTbYzMqXR1C4WANVELp3jG4cOTCIiexwd1VQrixCvNzGIkFH KjYBkeS9ZXfI688IeFE0PCTbIynHXZJE7/Y89tWt/3sMCqQBAivDP7NYm1GE2TY7 cwVDHTT9dLC7g+03aucCslcxGlx//ZUZ6WLVLeTiJQ5ijxj39Wm8sE/81mPlK5P7 W4ci9reSdtuYSyZoKsDAtOGhHrjNdmE1 -----END CERTIFICATE-----Generated at Fri Sep 19 10:19:59 2025 by rpki-client