$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: SyJSdHaf2WvkBeGzoE8IpxbGk+qi4IYi2S3eEytsR0I= Subject key identifier: 76:E3:72:B6:C1:52:E9:F7:ED:51:E3:54:46:F2:9F:25:A4:11:02:D9 Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01FE Signing time: Mon 03 Nov 2025 02:23:10 +0000 Manifest this update: Mon 03 Nov 2025 02:23:10 +0000 Manifest next update: Mon 10 Nov 2025 02:23:10 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: w0AKdYa8yWMbSkYmO53onf8RBnqrWdgIPoSDL2/Rhxg=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Nov 3 02:23:10 2025 GMT Not After : Nov 10 02:23:10 2025 GMT Subject: CN=6908120e-a528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2a:36:d7:60:95:4e:1a:36:38:3c:db:14:63: ff:49:52:fb:4d:3e:1c:22:a9:68:e1:61:98:0d:91: 4a:42:7a:47:76:9d:43:50:33:25:59:78:27:82:e1: 15:fd:50:6b:be:e6:1f:3a:b7:64:fd:cf:cc:8a:ec: e2:26:d8:ef:e4:a3:0a:69:32:f0:38:b9:a8:ff:a6: f1:0f:ec:c2:79:c8:15:28:57:89:95:98:ec:30:3c: 17:50:3e:de:93:e3:a8:46:e2:60:38:9e:bb:12:d9: 86:21:aa:45:c9:c3:a8:29:2f:a3:50:40:5f:2a:e2: 38:23:d8:68:7f:5c:97:c0:6c:6a:de:e3:1e:78:bc: aa:ec:76:c4:ab:a0:13:d7:09:1d:65:3d:1f:bf:1f: 44:36:11:7a:66:02:33:39:dc:98:69:14:9d:be:0f: 4a:04:60:85:d0:e3:9c:9d:dc:ca:39:7e:29:dd:45: 4d:94:48:c0:03:00:df:47:b3:32:70:9c:fe:a2:3d: 23:4a:b4:82:62:56:fa:da:ef:9d:9e:86:f9:04:bc: 5d:d5:c9:74:e1:3b:03:7f:34:2c:41:ef:fa:d2:98: 4b:d5:cb:63:ff:ca:7b:57:d3:cd:5e:08:b3:c5:a4: 0e:d0:51:38:1c:d6:8f:f7:52:43:1a:67:35:b8:ae: 25:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E3:72:B6:C1:52:E9:F7:ED:51:E3:54:46:F2:9F:25:A4:11:02:D9 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:3b:28:d1:32:53:91:87:b2:12:f7:d6:d2:df:73:c3:72:7b: c3:c1:58:40:d4:09:e3:19:82:f1:26:68:19:ad:a1:e6:d4:36: 13:96:70:17:be:67:02:4f:33:f1:e1:a1:76:86:7c:57:3a:4c: 11:11:74:05:08:d9:a1:e8:c1:a3:ad:c7:89:75:2f:b2:16:82: 5c:3b:0b:33:93:e1:cc:3c:de:e0:68:a9:cc:8a:83:d1:98:5e: fc:1f:24:df:d5:c7:ab:68:3e:de:a6:0e:f0:d6:82:bc:2f:f6: 13:ec:9e:57:5d:23:4e:0e:cf:89:b3:7c:ce:4d:44:be:b7:8c: 6f:d5:bb:fc:6a:1f:c4:b5:3c:13:2c:63:08:a2:ac:83:3c:8e: 83:7e:ec:1e:e2:ac:df:17:1d:0e:e0:71:e2:28:c9:39:c7:14: ef:89:12:52:20:df:16:bc:4b:08:f9:70:75:c8:58:ad:a1:74: 77:00:00:93:a7:d1:de:ac:e7:d9:f3:53:9a:08:a9:08:46:dc: 67:b5:16:51:32:78:61:c4:22:d1:a4:2c:ad:0a:0c:51:46:48: b7:0b:be:1e:e8:57:cc:21:f5:d0:45:6c:ee:92:fb:f2:51:50: 92:bf:bf:dc:57:d6:dd:9c:0e:fd:82:aa:d6:ec:9c:b5:95:1f: 12:26:c8:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUxMTAzMDIyMzEwWhcNMjUxMTEwMDIyMzEwWjAYMRYwFAYD VQQDEw02OTA4MTIwZS1hNTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSo212CVTho2ODzbFGP/SVL7TT4cIqlo4WGYDZFKQnpHdp1DUDMlWXgnguEV /VBrvuYfOrdk/c/MiuziJtjv5KMKaTLwOLmo/6bxD+zCecgVKFeJlZjsMDwXUD7e k+OoRuJgOJ67EtmGIapFycOoKS+jUEBfKuI4I9hof1yXwGxq3uMeeLyq7HbEq6AT 1wkdZT0fvx9ENhF6ZgIzOdyYaRSdvg9KBGCF0OOcndzKOX4p3UVNlEjAAwDfR7My cJz+oj0jSrSCYlb62u+dnob5BLxd1cl04TsDfzQsQe/60phL1ctj/8p7V9PNXgiz xaQO0FE4HNaP91JDGmc1uK4lUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbjcrbB Uun37VHjVEbynyWkEQLZMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBOyjRMlORh7IS99bS33PDcnvDwVhA1AnjGYLxJmgZraHm1DYTlnAX vmcCTzPx4aF2hnxXOkwREXQFCNmh6MGjrceJdS+yFoJcOwszk+HMPN7gaKnMioPR mF78HyTf1ceraD7epg7w1oK8L/YT7J5XXSNODs+Js3zOTUS+t4xv1bv8ah/EtTwT LGMIoqyDPI6Dfuwe4qzfFx0O4HHiKMk5xxTviRJSIN8WvEsI+XB1yFitoXR3AACT p9HerOfZ81OaCKkIRtxntRZRMnhhxCLRpCytCgxRRki3C74e6FfMIfXQRWzukvvy UVCSv7/cV9bdnA79gqrW7Jy1lR8SJsjw -----END CERTIFICATE-----Generated at Tue Nov 4 11:44:23 2025 by rpki-client