$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: TTXkopgw5+Tmaxo8ztGj2wgjoCPYKZwkiRY8P6Acdqc= Subject key identifier: 15:56:AE:FF:9E:55:23:58:DE:70:89:22:61:DC:0E:10:E4:30:6C:B8 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0AF7 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0AF7 Signing time: Sun 08 Jun 2025 15:33:40 +0000 Manifest this update: Sun 08 Jun 2025 15:33:39 +0000 Manifest next update: Sun 15 Jun 2025 15:33:39 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: +T1wxwH7bacz7hr9r6Dhkodh9uhh2W9BuvDvBZcp+nY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 15:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2807 (0xaf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Jun 8 15:33:39 2025 GMT Not After : Jun 15 15:33:39 2025 GMT Subject: CN=6845ad53-d247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:dd:0f:b5:01:33:0a:f5:e0:e5:8b:4d:0f: 97:72:93:8b:11:9c:52:09:a1:3b:71:5c:e9:3a:80: 0e:26:ac:d9:49:fe:3f:bd:38:8c:ec:55:1a:5c:48: 24:07:10:75:26:78:b7:26:da:62:8f:7e:78:f9:2f: 0c:71:08:1d:9f:17:d5:43:97:a9:dd:24:2a:90:06: f8:d9:28:ad:f7:dd:84:1e:b5:dd:43:fb:10:e7:4c: 19:1f:11:82:ce:eb:84:1d:1f:3e:0b:f2:88:a9:fe: c5:36:41:22:71:02:6a:44:e8:b4:42:63:3c:39:c6: d6:9e:c9:d7:e8:0a:7d:9b:7f:6a:de:19:fa:3e:42: 2a:55:df:1b:97:23:78:f4:be:59:96:09:62:9e:64: 7f:64:3b:3c:7e:ac:43:d4:ec:9d:e8:a0:6e:9f:86: 96:98:09:6f:31:b7:22:27:5a:c0:c7:f1:83:70:10: f2:98:64:e0:fc:b1:6b:35:d9:86:10:3b:07:40:cb: 8e:e9:1e:cd:03:2a:43:86:21:d3:c9:20:cf:ee:91: ef:8c:e9:bb:9d:78:ad:c6:cc:64:bb:d7:78:df:4e: 71:83:88:34:6a:31:dc:b9:b0:c7:64:1a:ad:d1:f7: 9d:7e:f4:34:09:bc:81:b5:0a:4d:5a:d3:66:38:82: e7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:56:AE:FF:9E:55:23:58:DE:70:89:22:61:DC:0E:10:E4:30:6C:B8 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:fe:b7:7b:31:75:1d:88:f7:92:50:50:4a:0e:93:e8:d0:10: db:06:fe:d3:38:bb:dc:cb:43:99:ab:68:62:d2:fa:c0:98:d7: 30:cb:12:2d:99:be:2d:2d:b2:6a:76:a4:da:94:38:9a:52:9c: 5f:6a:97:8b:14:2a:f4:20:5f:a8:fe:c0:56:58:25:5b:12:e4: 6c:9f:1f:74:3f:d1:54:25:43:ef:11:c3:93:83:da:db:c2:80: 0a:a3:86:24:0a:be:77:ab:18:61:69:49:8a:82:e8:0f:4d:fc: 4e:a5:ee:c4:10:f7:f9:5f:9b:d1:89:ba:43:a9:81:e6:01:79: 0c:f1:58:df:de:dc:ba:f0:55:d6:da:d0:5b:34:81:73:e7:74: d4:e3:e1:fd:91:bb:63:4e:c9:8c:01:0b:f0:64:04:ac:4e:23: 4f:2b:c5:c5:be:28:89:fb:fe:a4:b5:c4:77:64:e9:0e:58:2d: ae:a3:f5:49:b1:9a:ba:41:05:3a:c5:9d:9c:7d:48:50:ca:37: 22:7f:b9:b0:f5:ef:97:0d:9a:4b:b3:63:9a:d1:bb:37:92:9f: ef:22:2b:1b:b2:a9:87:6f:57:13:2e:9a:5b:6e:0d:ff:7b:46: 04:98:d3:2c:ba:34:fd:76:41:9b:56:77:a6:0b:da:14:55:b5: 6e:7a:ad:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwNjA4MTUzMzM5WhcNMjUwNjE1MTUzMzM5WjAYMRYwFAYD VQQDEw02ODQ1YWQ1My1kMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhfdD7UBMwr14OWLTQ+XcpOLEZxSCaE7cVzpOoAOJqzZSf4/vTiM7FUaXEgk BxB1Jni3Jtpij354+S8McQgdnxfVQ5ep3SQqkAb42Sit992EHrXdQ/sQ50wZHxGC zuuEHR8+C/KIqf7FNkEicQJqROi0QmM8OcbWnsnX6Ap9m39q3hn6PkIqVd8blyN4 9L5ZlglinmR/ZDs8fqxD1Oyd6KBun4aWmAlvMbciJ1rAx/GDcBDymGTg/LFrNdmG EDsHQMuO6R7NAypDhiHTySDP7pHvjOm7nXitxsxku9d4305xg4g0ajHcubDHZBqt 0fedfvQ0CbyBtQpNWtNmOILn5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVWrv+e VSNY3nCJImHcDhDkMGy4MB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi/rd7MXUdiPeSUFBKDpPo0BDbBv7TOLvcy0OZq2hi0vrAmNcwyxIt mb4tLbJqdqTalDiaUpxfapeLFCr0IF+o/sBWWCVbEuRsnx90P9FUJUPvEcOTg9rb woAKo4YkCr53qxhhaUmKgugPTfxOpe7EEPf5X5vRibpDqYHmAXkM8Vjf3ty68FXW 2tBbNIFz53TU4+H9kbtjTsmMAQvwZASsTiNPK8XFviiJ+/6ktcR3ZOkOWC2uo/VJ sZq6QQU6xZ2cfUhQyjcif7mw9e+XDZpLs2Oa0bs3kp/vIisbsqmHb1cTLppbbg3/ e0YEmNMsujT9dkGbVnemC9oUVbVueq0L -----END CERTIFICATE-----Generated at Mon Jun 9 03:26:47 2025 by rpki-client