$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: gfWdJouKDuV7AmNXxb1hWu4yx+0jsW/AuauXIU7SK8E= Subject key identifier: 9C:3C:19:E5:9B:9F:AC:09:B3:7B:4D:90:5A:BE:B2:C4:E4:06:A1:2D Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01AF Signing time: Sat 31 May 2025 02:54:11 +0000 Manifest this update: Sat 31 May 2025 02:54:10 +0000 Manifest next update: Sat 07 Jun 2025 02:54:10 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: TFIWFeNHNZeim1Xb5A99cFOytSMII1yDOT7VCfFDH7M=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: May 31 02:54:10 2025 GMT Not After : Jun 7 02:54:10 2025 GMT Subject: CN=683a6f53-4b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:0c:b9:75:4d:76:a7:4d:7c:9a:77:f7:04: 08:31:08:f3:16:87:6e:80:32:fa:9f:aa:33:26:bd: 1d:8a:1d:30:a7:cd:4e:b4:6e:4f:52:d3:04:17:74: 72:df:ba:1a:8b:0c:2a:f5:c8:62:d9:bc:6b:e4:09: 0e:dc:83:d9:c4:9b:bd:fd:cc:b9:f4:96:af:75:ae: 97:34:43:32:79:5e:96:56:cb:7f:77:0c:95:64:e6: da:16:b5:c7:90:39:65:06:be:64:13:f1:06:7c:34: cd:d5:66:6e:79:92:83:a4:e8:c9:d3:b4:07:51:6c: c1:b8:c9:5a:b1:36:01:82:4a:46:ab:0f:da:bc:7f: c1:d4:09:4d:fa:38:04:c5:dd:9e:63:63:00:84:82: 47:1f:99:08:d6:4a:30:f7:90:ad:b9:fb:bb:5e:ea: ce:33:95:e8:ab:36:d2:a8:8d:2b:f6:16:be:c5:17: 8f:e1:84:f2:15:16:d8:99:24:ad:12:61:bb:a7:63: dc:7e:c2:3b:93:a6:9e:5c:fd:55:51:cd:cf:64:3c: a7:f0:47:6b:0e:31:61:05:09:6c:cc:43:45:63:f2: e7:2b:2e:19:5b:b1:b7:e4:3e:b2:0b:fa:5b:86:24: b6:41:7d:4d:44:5f:bf:25:ae:0c:24:4f:55:5a:e7: 3c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:19:E5:9B:9F:AC:09:B3:7B:4D:90:5A:BE:B2:C4:E4:06:A1:2D X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:30:58:2f:1f:38:e9:fe:7b:09:35:e9:58:b9:da:30:2c:e6: 04:d8:15:8a:fc:42:78:14:95:62:e9:f3:43:5c:f4:44:b9:d0: 21:b9:56:07:60:78:d6:a7:f1:c8:ef:8b:6b:8f:25:b3:d9:f5: b6:64:ff:7b:73:c6:e4:72:a5:f1:1a:ff:30:81:11:e6:24:e3: 4f:06:31:52:e3:1c:62:c0:24:93:b9:c2:e2:e0:f2:c3:58:fd: 9d:cb:45:5d:77:98:ae:2d:96:04:98:e8:ea:05:aa:26:1d:dd: 6c:94:c2:9c:56:7d:f8:52:a4:49:85:fb:fe:dc:11:ae:e2:d9: 0f:ab:3c:fd:0d:fd:e6:87:8d:21:4b:21:45:65:f5:fb:39:96: 00:32:47:2b:d5:1f:a6:cf:50:2b:c3:15:d3:55:5b:44:f4:f4: df:68:91:de:f7:d5:49:09:79:d1:17:20:76:c3:1a:52:5a:e1: b9:2b:b9:2a:ad:7e:f9:ea:c2:e2:d7:bc:c2:fe:95:48:de:df: b0:9d:80:36:ab:fa:6b:1b:2f:9d:11:ec:5f:72:f9:0f:56:92: 64:f4:93:8c:f1:70:49:c4:94:33:ff:a8:79:70:35:1d:d3:30: 2f:be:18:b3:de:64:b2:10:8e:bd:fb:ab:b0:09:38:05:af:ad: a7:21:0c:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwNTMxMDI1NDEwWhcNMjUwNjA3MDI1NDEwWjAYMRYwFAYD VQQDEw02ODNhNmY1My00YjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwAMuXVNdqdNfJp39wQIMQjzFodugDL6n6ozJr0dih0wp81OtG5PUtMEF3Ry 37oaiwwq9chi2bxr5AkO3IPZxJu9/cy59Javda6XNEMyeV6WVst/dwyVZObaFrXH kDllBr5kE/EGfDTN1WZueZKDpOjJ07QHUWzBuMlasTYBgkpGqw/avH/B1AlN+jgE xd2eY2MAhIJHH5kI1kow95Ctufu7XurOM5XoqzbSqI0r9ha+xReP4YTyFRbYmSSt EmG7p2PcfsI7k6aeXP1VUc3PZDyn8EdrDjFhBQlszENFY/LnKy4ZW7G35D6yC/pb hiS2QX1NRF+/Ja4MJE9VWuc8mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw8GeWb n6wJs3tNkFq+ssTkBqEtMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTMFgvHzjp/nsJNelYudowLOYE2BWK/EJ4FJVi6fNDXPREudAhuVYH YHjWp/HI74trjyWz2fW2ZP97c8bkcqXxGv8wgRHmJONPBjFS4xxiwCSTucLi4PLD WP2dy0Vdd5iuLZYEmOjqBaomHd1slMKcVn34UqRJhfv+3BGu4tkPqzz9Df3mh40h SyFFZfX7OZYAMkcr1R+mz1ArwxXTVVtE9PTfaJHe99VJCXnRFyB2wxpSWuG5K7kq rX756sLi17zC/pVI3t+wnYA2q/prGy+dEexfcvkPVpJk9JOM8XBJxJQz/6h5cDUd 0zAvvhiz3mSyEI69+6uwCTgFr62nIQwD -----END CERTIFICATE-----Generated at Sat May 31 17:08:58 2025 by rpki-client