$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: zPYy5gKi51B19Ny5uf3N3xcuHxZurgqlaENh+GOgRE4= Subject key identifier: 6B:42:06:37:B1:76:E5:06:93:68:5D:9F:15:7D:AD:EB:61:E4:D9:D6 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B41 Signing time: Fri 31 Oct 2025 15:34:51 +0000 Manifest this update: Fri 31 Oct 2025 15:34:50 +0000 Manifest next update: Fri 07 Nov 2025 15:34:50 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: papBS9ew7ahEx5ZgL3zWybhoVs1ueGccfEJU99/s9aE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:34:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Oct 31 15:34:50 2025 GMT Not After : Nov 7 15:34:50 2025 GMT Subject: CN=6904d71a-d036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:40:23:63:1f:aa:7d:85:25:9f:56:60:92: ca:ef:ca:02:29:a9:97:f9:7a:48:c7:2d:96:f8:0c: d3:26:48:9e:0e:ce:a0:8e:43:dc:83:b7:80:2d:c9: 62:2f:db:ad:6d:96:b3:19:f4:ca:07:c5:ce:07:e4: 0f:ce:ee:b3:07:a7:00:43:cd:17:93:36:f4:e4:5e: 39:7b:48:1b:ae:79:af:d3:be:33:22:69:c3:86:38: 1d:92:73:e3:9f:6d:6d:04:36:57:2b:41:79:b6:6f: d7:0e:51:b8:ef:b6:ec:a2:ed:7c:69:3c:f0:b6:0e: 43:19:ff:57:81:22:f2:46:20:99:4d:49:3b:0f:1e: ee:be:44:14:48:1f:c2:9b:75:b1:8e:cd:1a:7b:b1: 39:1a:c6:fe:9c:0b:08:19:8e:dd:2b:49:42:e9:b4: 3b:7a:81:c7:72:99:f1:65:cc:86:fd:da:34:be:ab: ec:91:ce:b1:0d:ff:c2:44:9f:89:f1:e6:ae:59:4f: a9:38:cb:b1:91:f4:65:d2:7c:ce:4e:e3:44:53:51: e4:0d:92:46:6a:78:ae:3f:44:0c:88:01:27:e7:35: 5c:57:1b:30:89:0a:2f:7a:49:c7:1b:49:34:61:94: 08:df:30:99:0a:73:d4:4a:fa:8c:a8:72:4c:d3:2f: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:42:06:37:B1:76:E5:06:93:68:5D:9F:15:7D:AD:EB:61:E4:D9:D6 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:44:c9:d1:da:d2:e2:10:d3:c6:c5:e5:f4:63:8a:d3:a3:73: 06:71:c4:a1:66:f0:28:08:7f:3b:ed:db:f5:fe:41:2a:76:b0: 32:b8:9d:41:8b:79:a4:24:b6:6d:8b:43:49:78:64:90:d6:03: 6c:09:6c:d5:fb:af:e0:bd:2b:c7:c2:be:87:5b:72:ff:87:fb: 77:99:b6:36:66:4d:5e:27:00:0a:8f:7f:2e:85:e3:37:a6:71: 50:5a:31:d3:8a:f2:7a:82:ef:a4:23:ea:da:ee:56:17:1e:92: f4:15:61:3b:cf:99:8f:7a:13:f1:25:71:60:a8:e4:b0:98:4d: c1:fd:b0:89:93:f6:f5:e1:39:84:7b:f4:fa:70:7e:e9:97:67: 25:76:64:ae:a9:da:b5:73:7b:0b:bf:dd:0f:46:20:cd:8d:1f: 3c:1d:48:69:93:67:78:e1:86:a9:d1:97:01:bd:60:76:02:d0: d1:35:6d:7a:58:46:60:e5:35:5c:2c:b3:0c:38:cc:40:3e:d5: bb:93:04:59:fe:8d:10:50:dd:dd:d6:70:9e:b2:62:3a:22:2e: 39:e5:6b:0d:69:9b:fb:b7:39:16:17:5e:67:79:f6:b4:6f:73: bc:9c:55:00:18:27:4a:0b:9b:e1:7b:e4:91:e2:f5:ac:26:10: eb:0d:72:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUxMDMxMTUzNDUwWhcNMjUxMTA3MTUzNDUwWjAYMRYwFAYD VQQDEw02OTA0ZDcxYS1kMDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnxAI2Mfqn2FJZ9WYJLK78oCKamX+XpIxy2W+AzTJkieDs6gjkPcg7eALcli L9utbZazGfTKB8XOB+QPzu6zB6cAQ80Xkzb05F45e0gbrnmv074zImnDhjgdknPj n21tBDZXK0F5tm/XDlG477bsou18aTzwtg5DGf9XgSLyRiCZTUk7Dx7uvkQUSB/C m3Wxjs0ae7E5Gsb+nAsIGY7dK0lC6bQ7eoHHcpnxZcyG/do0vqvskc6xDf/CRJ+J 8eauWU+pOMuxkfRl0nzOTuNEU1HkDZJGaniuP0QMiAEn5zVcVxswiQoveknHG0k0 YZQI3zCZCnPUSvqMqHJM0y9NTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtCBjex duUGk2hdnxV9reth5NnWMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQRMnR2tLiENPGxeX0Y4rTo3MGccShZvAoCH877dv1/kEqdrAyuJ1B i3mkJLZti0NJeGSQ1gNsCWzV+6/gvSvHwr6HW3L/h/t3mbY2Zk1eJwAKj38uheM3 pnFQWjHTivJ6gu+kI+ra7lYXHpL0FWE7z5mPehPxJXFgqOSwmE3B/bCJk/b14TmE e/T6cH7pl2cldmSuqdq1c3sLv90PRiDNjR88HUhpk2d44Yap0ZcBvWB2AtDRNW16 WEZg5TVcLLMMOMxAPtW7kwRZ/o0QUN3d1nCesmI6Ii455WsNaZv7tzkWF15nefa0 b3O8nFUAGCdKC5vhe+SR4vWsJhDrDXLc -----END CERTIFICATE-----Generated at Sun Nov 2 00:45:12 2025 by rpki-client