$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: D99mTLKaEXQpWqFxcShby3rqVmyQKvUk6cEwwhfFshk= Subject key identifier: 21:E2:3A:04:8A:E6:3B:66:D1:34:B6:DE:8B:FB:84:99:77:0B:F9:2A Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1A5F Signing time: Mon 20 Oct 2025 16:39:29 +0000 Manifest this update: Mon 20 Oct 2025 16:39:28 +0000 Manifest next update: Mon 27 Oct 2025 16:39:28 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: stb4dk+aQAniTr/EEh3b0YJCu9DLSjIlSF0l84OhxQY=) 2: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: CZNc6WzONNJeWPZ6+n2sowdun9wtquppPoiv3hGmfQ8=) 3: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: 6CZidtXoDBfZbkBWuLrvDzWnGJ2dpo308yRpcF6lZTc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 16:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6767 (0x1a6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Oct 20 16:39:28 2025 GMT Not After : Oct 27 16:39:28 2025 GMT Subject: CN=68f665c0-8a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:83:f9:c0:a8:34:0f:a8:3c:cb:88:f6:71:35: 4c:9e:4d:38:de:4d:a0:0b:07:90:aa:a2:b7:da:04: 96:a4:34:db:bf:a0:47:7d:1e:50:d4:b5:27:06:72: d1:bc:0e:ae:b7:0e:43:07:6a:d8:05:56:24:9a:ca: 4c:16:8a:d2:b3:07:0f:0d:af:91:47:1d:e2:02:fa: a9:d2:7c:71:28:1f:28:04:f7:f7:54:85:e3:75:62: dc:62:b7:00:b5:3d:3f:1d:e8:1a:32:8c:0a:3f:cf: 16:fb:35:b5:af:b1:3e:2b:c1:c2:52:37:23:b5:58: 50:6e:5d:4c:f4:58:2a:da:42:96:4a:6c:26:7f:8c: 1c:1a:d5:5d:09:54:96:54:15:8e:a2:f2:9d:82:43: 88:ae:e6:91:11:93:4c:63:f7:28:35:cd:94:01:72: ef:98:3b:7b:fe:a7:a7:a8:5b:10:ca:4b:3e:7d:1d: 66:27:5b:0b:49:44:38:23:54:cb:8f:13:2b:e1:c0: 7a:8c:05:1d:5a:62:85:4e:68:c1:03:f2:e1:b7:5f: 04:95:9a:c9:ca:9b:43:35:3a:f7:3a:1c:d4:7a:60: 45:42:c4:cd:a1:84:88:29:17:a4:b1:f6:e1:2d:be: 49:da:ce:f7:f3:12:a8:22:dd:58:7e:97:a1:48:25: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:3A:04:8A:E6:3B:66:D1:34:B6:DE:8B:FB:84:99:77:0B:F9:2A X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:00:a9:e4:0f:31:76:ee:a8:ba:9f:b3:f0:79:cb:c1:98:d8: 76:cf:fc:27:ce:6b:9c:43:cc:93:ac:0c:83:20:23:23:dd:d8: 1a:3d:55:6a:cc:f3:f2:aa:a8:36:db:2b:26:55:8e:94:9b:1a: 36:6b:a2:8a:8d:d2:9e:07:d8:a3:6c:b9:80:2a:24:60:0b:2b: c5:2a:97:c4:7f:20:f7:64:f1:9b:8a:ff:9a:e6:46:81:b1:58: 72:0f:91:81:94:d0:86:64:84:79:9b:da:dc:45:8c:80:1c:2c: e8:ae:e5:20:75:a0:51:2e:44:3e:69:0e:3f:db:42:43:e5:40: f4:9e:12:4f:da:ff:1f:68:97:41:b3:ec:fc:8a:1f:d9:8a:8b: ff:33:5e:cf:ee:dc:b7:6f:5c:6f:30:9e:9c:01:ef:3d:c2:49: 8e:5a:16:ed:fe:5c:1f:d7:ea:e7:bd:be:15:ea:88:fa:0d:22: 91:df:1c:f7:e4:c8:78:d8:c1:52:71:0d:77:66:fe:dc:02:07: 66:98:0f:21:26:fb:be:ca:1f:ae:49:e4:16:d2:53:b7:fb:37: e5:ef:3d:61:0f:e9:4a:48:95:ea:bf:ff:9d:2c:01:1c:07:04: b3:f7:6f:65:aa:7b:71:d7:84:d3:a7:6b:ff:e0:46:3a:97:8f: d6:ed:db:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjUxMDIwMTYzOTI4WhcNMjUxMDI3MTYzOTI4WjAYMRYwFAYD VQQDEw02OGY2NjVjMC04YTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIP5wKg0D6g8y4j2cTVMnk043k2gCweQqqK32gSWpDTbv6BHfR5Q1LUnBnLR vA6utw5DB2rYBVYkmspMForSswcPDa+RRx3iAvqp0nxxKB8oBPf3VIXjdWLcYrcA tT0/HegaMowKP88W+zW1r7E+K8HCUjcjtVhQbl1M9Fgq2kKWSmwmf4wcGtVdCVSW VBWOovKdgkOIruaREZNMY/coNc2UAXLvmDt7/qenqFsQyks+fR1mJ1sLSUQ4I1TL jxMr4cB6jAUdWmKFTmjBA/Lht18ElZrJyptDNTr3OhzUemBFQsTNoYSIKReksfbh Lb5J2s738xKoIt1YfpehSCUVOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHiOgSK 5jtm0TS23ov7hJl3C/kqMB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCAKnkDzF27qi6n7PwecvBmNh2z/wnzmucQ8yTrAyDICMj3dgaPVVq zPPyqqg22ysmVY6Umxo2a6KKjdKeB9ijbLmAKiRgCyvFKpfEfyD3ZPGbiv+a5kaB sVhyD5GBlNCGZIR5m9rcRYyAHCzoruUgdaBRLkQ+aQ4/20JD5UD0nhJP2v8faJdB s+z8ih/Ziov/M17P7ty3b1xvMJ6cAe89wkmOWhbt/lwf1+rnvb4V6oj6DSKR3xz3 5Mh42MFScQ13Zv7cAgdmmA8hJvu+yh+uSeQW0lO3+zfl7z1hD+lKSJXqv/+dLAEc BwSz929lqntx14TTp2v/4EY6l4/W7dub -----END CERTIFICATE-----Generated at Wed Oct 22 12:13:36 2025 by rpki-client