$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: 3UkjUldFYV02NTZfKNEU+Khe4F/zNa1EFdsVlOG4JZs= Subject key identifier: 95:AE:40:B1:3C:EC:71:58:25:A6:08:DD:E2:0C:B2:FE:9A:8E:F5:0D Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0ADC Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0ADC Signing time: Wed 16 Apr 2025 15:39:31 +0000 Manifest this update: Wed 16 Apr 2025 15:39:30 +0000 Manifest next update: Wed 23 Apr 2025 15:39:30 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: 6QeKNCx+dl746yy6EuZr5v8c4XcKfn2E6UbclMMJCGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 15:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2780 (0xadc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Apr 16 15:39:30 2025 GMT Not After : Apr 23 15:39:30 2025 GMT Subject: CN=67ffcf32-c5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:70:9f:31:3e:1b:87:20:a4:b9:ff:57:37: ee:6e:b1:ad:58:8a:b0:aa:db:07:a5:ee:b0:f2:07: c5:cb:39:0b:e2:4e:a2:5b:02:08:8a:d3:a4:dd:7f: e2:9c:2a:1f:a3:0a:5f:fb:d4:6f:44:30:12:83:b5: 73:9d:f6:e9:48:62:ce:cd:d8:34:71:28:92:64:9d: 1a:97:ed:4a:53:d6:5c:54:e9:9b:a9:be:44:ed:ef: a5:e1:b2:a6:c5:54:54:dc:16:74:76:2b:03:4a:ee: 55:c7:1b:c7:aa:fe:e7:55:12:cd:4b:f6:04:88:ca: 47:ee:c5:b4:de:fe:9c:56:30:14:62:66:db:35:b1: c3:69:5f:cc:43:af:0c:42:86:54:84:a7:cf:b6:2d: 91:4b:b0:cf:94:36:ed:71:63:04:07:76:a8:26:e2: 7e:ea:6b:77:31:5c:fb:29:63:0e:21:2e:58:ea:e0: 17:62:fb:94:78:34:84:8a:b3:72:c4:57:2e:20:2b: c1:a7:d4:87:c5:25:30:89:02:d7:a4:30:fd:51:7a: 95:23:91:ff:8f:0d:1f:9d:9f:73:25:28:0a:b8:3b: 71:bf:80:35:b5:74:4d:06:b0:a4:26:21:7b:cd:64: 02:90:93:d3:6d:98:25:2b:87:13:45:3f:91:5f:4a: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AE:40:B1:3C:EC:71:58:25:A6:08:DD:E2:0C:B2:FE:9A:8E:F5:0D X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0f:23:2f:b1:8a:5d:e8:6a:02:74:1f:52:e9:4c:ac:c0:1a: c1:9d:f2:6a:16:65:f7:6d:78:4b:26:b7:f2:35:34:92:bf:95: 3e:04:e3:11:ea:55:af:62:fe:bb:8f:a9:71:51:9a:03:b3:8f: fe:4f:e5:f0:48:71:cc:1f:bc:47:03:bf:00:95:1a:31:e6:ae: 35:a9:b8:93:95:34:14:ec:16:a1:c9:5c:9a:93:ee:d1:9d:ce: f1:c8:b3:e2:e3:4c:ab:90:72:21:31:b5:0b:e1:9e:5a:08:1f: 6a:7f:45:18:34:a2:ff:67:f3:e1:01:19:90:8d:4c:2e:77:55: 12:54:08:ea:40:14:c8:85:b6:d8:b2:8b:cc:ab:cc:7e:37:4f: 4e:31:db:65:70:5b:21:9b:87:82:c3:99:c5:41:bc:bf:72:c7: 16:44:67:5d:43:74:4f:48:77:c9:e9:7d:6b:e3:a2:4f:f1:e2: bb:62:c3:51:ee:e0:fb:e1:5b:a1:8f:31:5c:92:e5:8b:69:09: af:10:fd:e1:4c:76:98:ee:35:51:04:89:2e:d9:85:38:db:f0: 28:73:29:61:51:2c:12:a9:fd:81:a9:fd:0b:3f:d4:3a:51:d3: da:9d:b3:1a:a6:01:c6:9c:c7:ed:65:8c:19:26:67:55:20:85: 28:4b:17:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwNDE2MTUzOTMwWhcNMjUwNDIzMTUzOTMwWjAYMRYwFAYD VQQDEw02N2ZmY2YzMi1jNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dNwnzE+G4cgpLn/VzfubrGtWIqwqtsHpe6w8gfFyzkL4k6iWwIIitOk3X/i nCofowpf+9RvRDASg7VznfbpSGLOzdg0cSiSZJ0al+1KU9ZcVOmbqb5E7e+l4bKm xVRU3BZ0disDSu5VxxvHqv7nVRLNS/YEiMpH7sW03v6cVjAUYmbbNbHDaV/MQ68M QoZUhKfPti2RS7DPlDbtcWMEB3aoJuJ+6mt3MVz7KWMOIS5Y6uAXYvuUeDSEirNy xFcuICvBp9SHxSUwiQLXpDD9UXqVI5H/jw0fnZ9zJSgKuDtxv4A1tXRNBrCkJiF7 zWQCkJPTbZglK4cTRT+RX0pwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWuQLE8 7HFYJaYI3eIMsv6ajvUNMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXDyMvsYpd6GoCdB9S6UyswBrBnfJqFmX3bXhLJrfyNTSSv5U+BOMR 6lWvYv67j6lxUZoDs4/+T+XwSHHMH7xHA78AlRox5q41qbiTlTQU7BahyVyak+7R nc7xyLPi40yrkHIhMbUL4Z5aCB9qf0UYNKL/Z/PhARmQjUwud1USVAjqQBTIhbbY sovMq8x+N09OMdtlcFshm4eCw5nFQby/cscWRGddQ3RPSHfJ6X1r46JP8eK7YsNR 7uD74VuhjzFckuWLaQmvEP3hTHaY7jVRBIku2YU42/AocylhUSwSqf2Bqf0LP9Q6 UdPanbMapgHGnMftZYwZJmdVIIUoSxfC -----END CERTIFICATE-----Generated at Thu Apr 17 05:48:37 2025 by rpki-client