$ rpki-client -vvf rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft File: GOH3Mu-lPDlzoazSLBNopeHyylI.mft (raw, json) Hash identifier: WVZmJaNPOAvSV8XCXETpxsSEdV2/qZpAeVh2gurk3v0= Subject key identifier: FF:F3:24:EA:70:D0:FF:A8:65:0C:25:AF:8F:9F:BD:36:34:82:03:91 Authority key identifier: 18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 Certificate issuer: /CN=A918F00E/serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft Manifest number: 0249 Signing time: Sat 21 Mar 2026 01:37:07 +0000 Manifest this update: Sat 21 Mar 2026 01:37:06 +0000 Manifest next update: Sat 28 Mar 2026 01:37:06 +0000 Files and hashes: 1: GOH3Mu-lPDlzoazSLBNopeHyylI.crl (hash: AIN2foVrtee9edgik2UAKaI1MmgHCmN0/mPwfKJyBjI=) 2: AA73EF167DEB11EEB9699A24C4F9AE02.roa (hash: GCoUxXSsVbAe0WY7DuUx66j+ly/pwEQTvzaDkQp3iFo=) 3: 098D6EACAD3E11ED8B645C39C4F9AE02.roa (hash: HIn0QMk9UdWThQFOmwI9rAJWgTR42ZOA8KgI9w+YxaU=) 4: 09106CCCAD3E11ED8B645C39C4F9AE02.roa (hash: N3nsvmOWllg7YY9UOijNOBu82tIVELALhxtWtgqubMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F00E, serialNumber=18E1F732EFA53C3973A1ACD22C1368A5E1F2CA52 Validity Not Before: Mar 21 01:37:06 2026 GMT Not After : Mar 28 01:37:06 2026 GMT Subject: CN=69bdf642-99c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:d5:63:b7:60:72:63:29:59:e2:02:e1:a3: e4:9d:a4:58:a8:33:54:c9:7b:3e:f9:2f:49:0c:fe: 5b:5a:16:27:0c:f3:f5:84:84:9c:d2:ee:4f:7d:d8: 9c:55:e2:8e:fd:75:d8:93:24:8c:ae:91:73:db:04: 14:1b:9d:1e:8f:61:fd:72:d1:b8:76:0d:73:7b:08: bf:d3:76:20:11:11:04:b8:72:44:35:80:bb:b9:10: c7:e0:1a:06:b4:0e:c8:22:50:46:97:a9:b5:aa:22: 21:96:ae:d3:79:18:b7:74:7c:92:d0:a2:99:ad:4f: 2b:6c:f3:6b:8e:cb:b6:36:47:57:1b:1a:22:e2:75: af:04:17:00:6c:b2:af:a2:d2:2b:d3:66:b3:24:3a: 98:6c:79:0b:d3:6b:5e:09:25:39:d3:4f:55:89:db: 48:8c:9d:5b:47:21:73:93:28:6b:3f:01:59:5e:d9: 8f:fd:fa:ec:0b:6d:78:af:31:96:91:08:1d:47:5d: 38:9b:7f:d3:ba:fb:cd:55:1d:12:09:cc:ae:f5:75: 0c:68:cb:e2:45:c0:d5:1e:af:7e:96:c9:af:3a:61: 82:04:9a:0c:9e:1f:af:fc:91:42:9b:98:f3:af:82: 65:f2:5c:95:99:71:1b:c4:8f:73:36:4b:e3:e6:90: a4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F3:24:EA:70:D0:FF:A8:65:0C:25:AF:8F:9F:BD:36:34:82:03:91 X509v3 Authority Key Identifier: keyid:18:E1:F7:32:EF:A5:3C:39:73:A1:AC:D2:2C:13:68:A5:E1:F2:CA:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GOH3Mu-lPDlzoazSLBNopeHyylI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F00E/5AA1822EAD3911EDA0B9B83CC4F9AE02/GOH3Mu-lPDlzoazSLBNopeHyylI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:64:8d:59:ea:d3:4c:a1:b1:21:cb:7d:f9:fb:34:c5:4e:cc: 43:37:4e:90:8a:dd:f2:e9:ce:66:96:c3:10:96:74:bd:c6:70: 70:68:4b:ae:d6:e0:f9:0b:ee:fe:ed:2c:24:87:6b:b9:2e:74: 7b:b0:10:fb:9b:eb:51:cb:50:20:60:d3:d6:78:cb:89:cf:58: 45:27:5c:22:a9:99:f5:82:fe:2d:62:37:5e:a1:97:bb:8c:0f: 07:f9:6f:22:66:1c:fc:b0:7c:fe:9b:0c:f6:3f:fe:cd:29:1f: 9c:7d:b1:f0:c3:a9:bc:f8:e0:5e:43:90:9b:4b:c6:2d:f8:8c: 24:48:f0:6f:64:aa:1e:19:a5:56:96:d7:cb:63:4f:28:c8:67: eb:b0:cc:e8:11:31:6e:cc:bd:1b:da:55:88:21:d3:f5:ff:ab: 1e:d4:a8:20:d1:1f:c2:b8:26:69:13:59:85:38:9a:87:b3:4c: cb:5c:2f:5a:a2:01:40:5c:f5:e6:d4:19:ed:e5:d3:aa:a3:9b: a9:25:b7:0e:77:0a:ad:97:96:2a:00:bf:dc:fa:a2:27:16:90: 28:7f:b0:4f:4f:7d:4c:80:ab:b9:49:f1:f5:1d:5d:d4:bd:4f: 8a:8e:e7:91:db:b0:e7:c6:c7:dd:e8:b6:e0:9a:13:5b:6f:f9: df:fd:f9:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYwMEUxMTAvBgNVBAUTKDE4RTFGNzMyRUZBNTNDMzk3M0ExQUNEMjJDMTM2OEE1 RTFGMkNBNTIwHhcNMjYwMzIxMDEzNzA2WhcNMjYwMzI4MDEzNzA2WjAYMRYwFAYD VQQDEw02OWJkZjY0Mi05OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArz3VY7dgcmMpWeIC4aPknaRYqDNUyXs++S9JDP5bWhYnDPP1hISc0u5Pfdic VeKO/XXYkySMrpFz2wQUG50ej2H9ctG4dg1zewi/03YgEREEuHJENYC7uRDH4BoG tA7IIlBGl6m1qiIhlq7TeRi3dHyS0KKZrU8rbPNrjsu2NkdXGxoi4nWvBBcAbLKv otIr02azJDqYbHkL02teCSU5009VidtIjJ1bRyFzkyhrPwFZXtmP/frsC214rzGW kQgdR104m3/TuvvNVR0SCcyu9XUMaMviRcDVHq9+lsmvOmGCBJoMnh+v/JFCm5jz r4Jl8lyVmXEbxI9zNkvj5pCkrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/zJOpw 0P+oZQwlr4+fvTY0ggORMB8GA1UdIwQYMBaAFBjh9zLvpTw5c6Gs0iwTaKXh8spS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjAwRS81QUExODIyRUFE MzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBEbHpvYXpTTEJOb3BlSHl5 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dPSDNNdS1sUERsem9helNMQk5vcGVIeXlsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjAwRS81QUExODIyRUFEMzkxMUVEQTBCOUI4M0NDNEY5QUUwMi9HT0gzTXUtbFBE bHpvYXpTTEJOb3BlSHl5bEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX2SNWerTTKGxIct9+fs0xU7MQzdOkIrd8unOZpbDEJZ0vcZwcGhLrtbg+Qvu /u0sJIdruS50e7AQ+5vrUctQIGDT1njLic9YRSdcIqmZ9YL+LWI3XqGXu4wPB/lv ImYc/LB8/psM9j/+zSkfnH2x8MOpvPjgXkOQm0vGLfiMJEjwb2SqHhmlVpbXy2NP KMhn67DM6BExbsy9G9pViCHT9f+rHtSoINEfwrgmaRNZhTiah7NMy1wvWqIBQFz1 5tQZ7eXTqqObqSW3DncKrZeWKgC/3PqiJxaQKH+wT099TICruUnx9R1d1L1Pio7n kduw58bH3ei24JoTW2/53/35xw== -----END CERTIFICATE-----Generated at Sun Mar 22 18:57:27 2026 by rpki-client