$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: ClFAx67X6sy+kAZFNYFnJJ2OBjK2hryu5DmV3lrqAOA= Subject key identifier: 06:44:2B:9A:EF:96:56:52:B8:CB:73:DE:16:65:A9:C6:EE:43:71:08 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B1B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B1B Signing time: Mon 18 Aug 2025 15:45:10 +0000 Manifest this update: Mon 18 Aug 2025 15:45:10 +0000 Manifest next update: Mon 25 Aug 2025 15:45:10 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: BLq+2DEj6vc8G70G+4RsCplpQfw7ZsDWMYVj7F9jATA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2843 (0xb1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Aug 18 15:45:10 2025 GMT Not After : Aug 25 15:45:10 2025 GMT Subject: CN=68a34a86-eb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:38:1a:10:8c:16:3f:ea:08:b8:86:56:62: 69:59:53:98:0c:af:0a:99:40:54:e1:2c:5d:a4:36: c2:f1:2d:a7:78:b7:24:29:08:e5:0c:0c:63:7a:8e: 9a:41:ef:79:20:7f:5c:3b:3c:ff:e9:05:ba:94:7a: 53:7e:f8:0e:e3:38:9b:1d:93:f6:60:b0:74:bf:ed: 3a:0d:95:c2:6d:85:96:5d:7b:c1:15:0c:6c:4d:34: 7c:d9:86:1a:de:4c:12:bc:50:09:9f:69:f6:c1:ce: 7d:b2:b5:94:c6:5e:94:14:c2:11:f7:c1:90:79:4a: 6d:bc:f3:72:35:c8:d2:a6:3a:04:14:a2:8a:a4:0c: 3f:d4:36:43:ed:dc:a5:a3:3f:35:83:7d:0c:ed:1d: 91:c3:5a:76:31:b2:19:22:74:00:b1:66:9f:eb:bf: 50:f0:be:cd:a4:9e:66:c2:11:79:c0:93:71:75:6c: 44:cd:e4:17:70:ac:e3:6d:b1:90:44:f5:68:f6:5a: ac:de:5f:a1:e0:5f:9c:53:f4:05:fe:c9:a1:f1:ed: 8b:e2:ed:4b:b1:7f:d1:a3:50:ea:55:f8:7c:58:74: b9:f4:66:27:26:49:58:5d:06:a6:01:15:aa:75:8c: 40:17:6f:ef:11:09:ca:fb:5f:9d:c9:5c:51:6e:39: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:2B:9A:EF:96:56:52:B8:CB:73:DE:16:65:A9:C6:EE:43:71:08 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:3a:f4:0f:bc:79:c9:d4:93:d8:42:d8:d9:41:81:47:e9:4f: 57:b0:69:4a:6b:b8:ce:9a:6d:cc:70:30:7e:68:13:a1:97:a3: 21:7c:61:fa:dd:f4:0b:5c:a1:df:5c:78:d7:9e:c3:9c:b2:53: d3:65:87:b0:0e:41:44:0f:ab:2b:82:dd:3b:83:cc:29:3c:ba: 2c:ed:92:20:8b:a3:a4:09:b2:a8:25:24:af:0f:87:d3:d0:d8: ab:b9:6a:33:8a:19:e6:7e:9c:27:98:58:ed:db:36:22:15:b7: 39:f2:ea:83:8f:85:a7:ec:8e:8e:92:75:ce:85:e7:2b:6a:dd: 06:ae:8b:4d:23:5a:3c:62:05:ad:98:ef:8d:0d:37:ba:70:42: a3:d8:de:61:8f:00:03:ca:98:75:94:ca:53:e3:18:ed:49:20: bf:f3:a9:06:81:dc:c0:9f:fc:b5:16:af:a7:41:4c:59:2f:77: 6f:cb:51:52:0e:57:64:1b:70:2d:83:5c:f7:52:2c:25:66:c5: be:13:d1:e3:6e:45:51:c7:9b:73:04:3d:19:f0:2b:eb:f1:8b: 51:ac:15:e2:e5:c1:52:a4:3c:95:2f:4d:2f:a7:93:55:54:ce: 04:f7:4c:80:fc:37:2b:aa:4c:12:70:28:b0:64:54:33:79:cd: 9b:b5:08:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwODE4MTU0NTEwWhcNMjUwODI1MTU0NTEwWjAYMRYwFAYD VQQDEw02OGEzNGE4Ni1lYjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeA4GhCMFj/qCLiGVmJpWVOYDK8KmUBU4SxdpDbC8S2neLckKQjlDAxjeo6a Qe95IH9cOzz/6QW6lHpTfvgO4zibHZP2YLB0v+06DZXCbYWWXXvBFQxsTTR82YYa 3kwSvFAJn2n2wc59srWUxl6UFMIR98GQeUptvPNyNcjSpjoEFKKKpAw/1DZD7dyl oz81g30M7R2Rw1p2MbIZInQAsWaf679Q8L7NpJ5mwhF5wJNxdWxEzeQXcKzjbbGQ RPVo9lqs3l+h4F+cU/QF/smh8e2L4u1LsX/Ro1DqVfh8WHS59GYnJklYXQamARWq dYxAF2/vEQnK+1+dyVxRbjk2owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZEK5rv llZSuMtz3hZlqcbuQ3EIMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHOvQPvHnJ1JPYQtjZQYFH6U9XsGlKa7jOmm3McDB+aBOhl6MhfGH6 3fQLXKHfXHjXnsOcslPTZYewDkFED6srgt07g8wpPLos7ZIgi6OkCbKoJSSvD4fT 0NiruWozihnmfpwnmFjt2zYiFbc58uqDj4Wn7I6OknXOhecrat0GrotNI1o8YgWt mO+NDTe6cEKj2N5hjwADyph1lMpT4xjtSSC/86kGgdzAn/y1Fq+nQUxZL3dvy1FS DldkG3Atg1z3UiwlZsW+E9HjbkVRx5tzBD0Z8Cvr8YtRrBXi5cFSpDyVL00vp5NV VM4E90yA/DcrqkwScCiwZFQzec2btQiy -----END CERTIFICATE-----Generated at Tue Aug 19 22:37:35 2025 by rpki-client