$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: fFVPRN8USD1Y3kNh8nMtv8egdZxyaq6RCQGTQekZ/Fk= Subject key identifier: 52:C2:5D:B8:49:2D:D9:19:71:DF:0F:E5:CE:8D:67:AE:E1:57:A9:11 Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 01E3 Signing time: Tue 09 Sep 2025 02:42:08 +0000 Manifest this update: Tue 09 Sep 2025 02:42:07 +0000 Manifest next update: Tue 16 Sep 2025 02:42:07 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: 2VOk8PosUHTYtnM2Bvzfa9F6GummrR86W961OnmyYGY=) 2: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: x5jTQA8XBSMQ8Q+xjjenfP78ItEEc+vCjF2dnXQMxgg=) 3: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: EuI+jy3jz6zplStWvLeJaw92baXncm4w2hV/GfKLDMk=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: KQKk/DHVyq0W7ysUvHn8rqByRNsv/bL8qIPiVwD7k8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Sep 9 02:42:07 2025 GMT Not After : Sep 16 02:42:07 2025 GMT Subject: CN=68bf93ff-ed7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:22:36:34:44:57:80:48:43:8d:53:fe:a4:43: 2c:72:3c:b9:84:2f:d3:01:f4:a1:ce:58:41:04:3b: 43:fa:be:83:44:ff:3b:00:0b:cd:8f:1f:70:cf:52: 89:56:2b:a9:62:e5:a1:6f:fc:82:3e:92:6d:46:70: a2:bc:ec:80:8f:34:13:24:d3:fd:09:14:bd:bb:55: b2:03:5d:30:a2:79:da:18:5d:51:31:88:ad:59:a4: f3:d6:2c:78:5f:01:4e:9a:3b:73:95:cc:9e:a4:78: 95:70:42:85:71:d1:cc:39:4c:c8:7d:06:cd:eb:10: 25:4b:18:52:43:5e:56:7b:cf:df:c6:4c:91:90:03: d7:1a:60:b2:09:7b:39:8a:19:8b:2b:58:fe:a8:c2: 2f:bf:0b:97:26:ec:14:27:8f:04:08:e2:70:83:b2: 3b:8e:49:6b:da:cd:06:6e:f8:a8:a0:9f:cc:48:9d: c6:75:6c:62:63:1c:c3:43:b9:d1:77:18:02:d0:73: c2:d6:12:c1:f5:0c:a3:1b:92:72:01:52:15:56:c6: 17:87:98:3e:37:e4:f7:ef:69:fb:c7:47:f7:fa:77: a4:98:5d:2f:61:c2:fd:49:fc:19:e6:49:b8:c6:15: 2c:8d:96:b1:51:1e:8c:e5:22:6a:db:ae:84:5f:7e: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C2:5D:B8:49:2D:D9:19:71:DF:0F:E5:CE:8D:67:AE:E1:57:A9:11 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:1d:ab:ad:1c:f3:2c:28:59:b6:83:24:55:dd:11:29:8a:f5: 86:b1:28:b3:91:3a:76:02:c6:29:04:ed:86:00:13:ce:89:37: cd:fa:25:a2:e6:cb:7b:a4:94:fa:78:1e:b4:77:58:9c:29:96: 83:d7:68:06:43:2f:95:26:6f:ad:e5:46:70:f2:de:72:87:74: 72:0a:0c:97:ea:67:48:a3:97:70:4a:7f:4f:bd:90:66:4c:27: 2a:ba:10:33:be:42:21:7a:42:65:cb:37:bc:1a:5b:89:95:78: ac:db:18:b4:de:7d:73:02:ed:42:73:9b:2a:0d:f6:41:d3:85: bd:7e:61:aa:61:b2:84:90:18:d2:9c:82:bf:da:ef:18:c9:d7: cf:8c:6f:66:bb:7f:3b:01:24:92:3a:81:f2:47:b5:c9:53:ef: a0:5f:97:2e:02:7e:01:cd:b8:27:91:fe:65:fa:17:29:fe:69: 86:30:ce:30:3c:cd:5f:21:b1:b9:51:55:fc:7e:84:ec:2e:d0: 54:c3:f0:80:75:be:bb:c0:2e:b0:0b:e9:63:7e:d0:10:75:6e: a0:71:ab:63:7b:fe:95:f3:5a:df:70:26:5b:e5:a0:12:19:f2: 03:7e:e1:4f:2d:5c:12:a5:7f:72:8b:4b:fb:3d:a3:ca:1f:9d: 35:55:ad:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjUwOTA5MDI0MjA3WhcNMjUwOTE2MDI0MjA3WjAYMRYwFAYD VQQDEw02OGJmOTNmZi1lZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yI2NERXgEhDjVP+pEMscjy5hC/TAfShzlhBBDtD+r6DRP87AAvNjx9wz1KJ ViupYuWhb/yCPpJtRnCivOyAjzQTJNP9CRS9u1WyA10wonnaGF1RMYitWaTz1ix4 XwFOmjtzlcyepHiVcEKFcdHMOUzIfQbN6xAlSxhSQ15We8/fxkyRkAPXGmCyCXs5 ihmLK1j+qMIvvwuXJuwUJ48ECOJwg7I7jklr2s0GbviooJ/MSJ3GdWxiYxzDQ7nR dxgC0HPC1hLB9QyjG5JyAVIVVsYXh5g+N+T372n7x0f3+nekmF0vYcL9SfwZ5km4 xhUsjZaxUR6M5SJq266EX36eLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLCXbhJ LdkZcd8P5c6NZ67hV6kRMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6HautHPMsKFm2gyRV3REpivWGsSizkTp2AsYpBO2GABPOiTfN+iWi 5st7pJT6eB60d1icKZaD12gGQy+VJm+t5UZw8t5yh3RyCgyX6mdIo5dwSn9PvZBm TCcquhAzvkIhekJlyze8GluJlXis2xi03n1zAu1Cc5sqDfZB04W9fmGqYbKEkBjS nIK/2u8YydfPjG9mu387ASSSOoHyR7XJU++gX5cuAn4Bzbgnkf5l+hcp/mmGMM4w PM1fIbG5UVX8foTsLtBUw/CAdb67wC6wC+ljftAQdW6gcatje/6V81rfcCZb5aAS GfIDfuFPLVwSpX9yi0v7PaPKH501Va38 -----END CERTIFICATE-----Generated at Wed Sep 10 10:26:45 2025 by rpki-client