$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: i4nOwOlsd+Efftlm7k47UmBNk5/yvSlKuyo7FVihsCo= Subject key identifier: 90:E1:43:6D:16:85:F3:56:5A:14:E8:42:2E:03:6E:50:73:23:B8:69 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0AE9 Signing time: Mon 12 May 2025 15:35:26 +0000 Manifest this update: Mon 12 May 2025 15:35:25 +0000 Manifest next update: Mon 19 May 2025 15:35:25 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: LZUberEg1F6eWkf2fYU2AjO3DOn9M+RphSSEHXkgyyU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: May 12 15:35:25 2025 GMT Not After : May 19 15:35:25 2025 GMT Subject: CN=6822153d-313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:96:2a:9a:66:74:5c:ed:fe:af:f6:80:25: 39:63:47:ee:0c:49:82:b9:96:ec:1e:75:bf:d7:41: d8:b8:8e:45:f5:39:e9:03:bb:12:10:a9:a5:e8:d4: ab:42:e8:3e:b8:86:39:d8:f1:64:08:db:d8:ef:04: 7c:ed:cb:4d:fd:42:08:af:35:f4:ad:71:96:d2:51: 2a:11:2f:20:47:c9:3e:e6:6e:7f:da:29:64:cc:8f: 9b:9f:8f:c3:0a:71:2a:5b:5f:c4:ec:08:2b:ef:c1: d2:42:64:d6:cb:0b:c4:6b:79:6d:3f:f9:b2:0c:bb: 9a:69:2b:4d:44:d2:7a:91:e7:65:31:9d:9e:a7:f3: a9:8d:69:de:11:f3:71:05:34:20:e4:9c:0e:3a:97: d5:f8:b3:02:53:7f:52:96:8f:1f:fd:04:9d:0a:6f: 73:3b:26:1d:6a:78:49:03:06:50:8a:e0:68:90:e6: 13:74:30:4b:84:fa:9e:4d:a4:09:b9:9e:ad:32:1a: d7:5a:2c:4e:dd:d5:bb:72:92:28:39:f5:b7:97:45: e3:fc:ab:4c:0e:b4:45:29:1b:e6:be:b3:51:78:eb: 77:fc:25:ca:3d:32:37:7b:da:e1:71:67:9f:dc:3c: 18:72:1e:7a:2e:c7:40:76:55:17:65:9e:57:20:a8: da:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E1:43:6D:16:85:F3:56:5A:14:E8:42:2E:03:6E:50:73:23:B8:69 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:53:c3:bb:20:66:9e:f7:fe:b5:e9:cb:61:b6:ac:17:69:6c: 32:01:75:6d:1d:6a:2c:71:1d:69:2b:55:a5:f9:e3:bb:39:e8: 8a:0b:b0:0d:32:f5:51:b8:72:75:ce:a6:e9:ae:01:2f:c6:a3: d6:11:4d:37:5f:08:60:aa:51:b2:85:b8:73:5e:4a:b0:97:94: 40:50:0a:7c:86:6c:79:da:88:b5:c1:c3:ac:99:ff:fe:a7:3b: a0:4d:d4:5b:40:c7:9a:eb:7b:9f:26:b5:a3:6d:fb:cd:a0:c2: df:74:78:60:15:89:9a:86:51:a8:23:45:6b:5e:7b:47:3a:3f: aa:22:c9:4b:04:fc:7f:7b:4d:55:74:79:ad:ca:12:7f:a7:87: 52:10:0a:9b:1d:fa:28:c4:c7:15:4e:8c:91:ce:85:74:cd:70: c7:29:43:0f:91:17:cc:d0:de:3e:98:4d:0f:ed:39:01:b8:1d: d5:9e:10:38:24:ac:1e:d3:a8:86:58:58:78:92:b4:8b:27:24: ef:06:b2:35:f8:90:63:19:2d:5a:65:1c:8c:8d:59:a2:ad:d0: 1f:18:ed:e2:51:53:65:02:8e:ff:a8:9a:56:d8:2c:3a:38:46: 46:f7:50:3b:a8:d1:70:07:6d:10:18:c7:2b:86:fe:3f:be:15: 9e:3a:af:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwNTEyMTUzNTI1WhcNMjUwNTE5MTUzNTI1WjAYMRYwFAYD VQQDEw02ODIyMTUzZC0zMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDCWKppmdFzt/q/2gCU5Y0fuDEmCuZbsHnW/10HYuI5F9TnpA7sSEKml6NSr Qug+uIY52PFkCNvY7wR87ctN/UIIrzX0rXGW0lEqES8gR8k+5m5/2ilkzI+bn4/D CnEqW1/E7Agr78HSQmTWywvEa3ltP/myDLuaaStNRNJ6kedlMZ2ep/OpjWneEfNx BTQg5JwOOpfV+LMCU39Slo8f/QSdCm9zOyYdanhJAwZQiuBokOYTdDBLhPqeTaQJ uZ6tMhrXWixO3dW7cpIoOfW3l0Xj/KtMDrRFKRvmvrNReOt3/CXKPTI3e9rhcWef 3DwYch56LsdAdlUXZZ5XIKjaOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDhQ20W hfNWWhToQi4DblBzI7hpMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwU8O7IGae9/616cthtqwXaWwyAXVtHWoscR1pK1Wl+eO7OeiKC7AN MvVRuHJ1zqbprgEvxqPWEU03XwhgqlGyhbhzXkqwl5RAUAp8hmx52oi1wcOsmf/+ pzugTdRbQMea63ufJrWjbfvNoMLfdHhgFYmahlGoI0VrXntHOj+qIslLBPx/e01V dHmtyhJ/p4dSEAqbHfooxMcVToyRzoV0zXDHKUMPkRfM0N4+mE0P7TkBuB3VnhA4 JKwe06iGWFh4krSLJyTvBrI1+JBjGS1aZRyMjVmirdAfGO3iUVNlAo7/qJpW2Cw6 OEZG91A7qNFwB20QGMcrhv4/vhWeOq+9 -----END CERTIFICATE-----Generated at Mon May 12 23:02:34 2025 by rpki-client