$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: tx0+Jx3/Y9ZVYM04lUTZMQKPADQxYZSriC4D0XkpcAg= Subject key identifier: E5:B9:55:C2:4D:2B:FF:CF:EC:B7:8B:CB:4C:7F:E3:01:EC:58:06:2A Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B04 Signing time: Fri 04 Jul 2025 15:48:47 +0000 Manifest this update: Fri 04 Jul 2025 15:48:46 +0000 Manifest next update: Fri 11 Jul 2025 15:48:46 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: 2fkz5e5IcW5H2E4UCfebMO4nnjyWmydmL9kyxU9qxc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Jul 4 15:48:46 2025 GMT Not After : Jul 11 15:48:46 2025 GMT Subject: CN=6867f7de-67cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:77:8d:c9:3c:1c:26:36:bb:a4:9f:c3:10:c9: 29:7d:8d:e2:f3:8c:4f:46:68:9f:ae:a7:08:04:44: 9d:86:5d:6c:65:d3:60:a3:d7:39:bb:fa:82:bc:65: c3:7c:e3:65:1a:48:fd:5a:f2:39:7e:28:80:c6:35: 04:9b:c0:a3:0a:be:87:dc:10:b1:10:07:ae:7d:5e: 8f:95:4d:7b:c3:15:76:11:37:53:ab:53:4c:79:b5: 80:3b:02:1d:3d:fd:3d:00:e4:ff:15:eb:e3:a5:16: cd:f8:f2:6b:0f:db:fd:d5:5b:59:04:f2:a9:77:ea: 48:eb:fb:16:16:b7:d7:d1:27:95:7d:11:3c:01:bc: 24:39:55:a9:ff:26:2d:6b:89:34:e5:79:b9:98:37: aa:95:1c:b6:a1:f1:9a:dc:62:85:9e:51:c7:4f:42: 60:b6:17:13:fa:10:5f:33:7c:c8:95:33:d7:62:cb: 8f:5c:4d:9d:30:a1:ec:3d:81:d0:46:0a:d7:12:0d: 5e:4a:4a:bf:7f:78:06:07:fa:68:b2:1d:3a:69:4d: 11:a2:32:8a:f8:90:8e:e0:d3:14:4b:d9:82:c8:2b: 9c:60:de:2e:f0:51:64:97:46:ee:d9:0d:97:52:27: 7d:55:4d:eb:61:e9:fd:4b:6b:d3:4f:dc:8e:8e:09: 5b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B9:55:C2:4D:2B:FF:CF:EC:B7:8B:CB:4C:7F:E3:01:EC:58:06:2A X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:bb:13:db:44:c8:d8:f6:04:a1:2e:ff:50:2e:5e:07:6d:dd: 74:a2:45:d7:82:4d:24:e4:38:ac:74:76:a6:0f:93:55:d1:9a: e4:42:ab:63:fd:bf:b0:e2:b7:64:c5:fc:af:2e:7b:80:e6:cb: df:4d:d9:d5:db:ab:0f:43:e9:60:1f:41:fb:0b:fb:90:cb:01: be:6a:1d:83:bc:80:cc:33:98:8c:3e:09:f9:6c:18:0a:9a:8e: e6:98:48:d7:e5:0a:8a:05:ec:6d:10:67:a7:1c:87:6a:21:d0: 71:3d:ef:01:82:8d:bf:34:1a:dd:4a:8f:e0:d3:88:ec:ff:d0: da:57:4e:2a:f9:95:b0:fb:1e:a2:d8:a7:2d:13:f3:64:72:6a: c0:d6:07:dc:7c:8f:a4:d3:ae:8e:04:9b:ab:f4:04:33:b9:29: a0:c3:af:a7:e7:2d:31:04:61:ae:33:6f:e0:f9:22:63:87:13: 3d:76:7a:d1:1d:25:ed:dd:b2:51:d8:c5:ed:db:98:cb:44:52: 67:58:20:4f:27:8d:e3:80:be:ad:66:f0:05:42:b7:b5:17:02: df:60:91:06:ef:24:e1:7c:c5:f2:48:a8:e2:70:81:7d:a9:af: df:16:9c:b2:5a:94:98:45:21:27:8c:c0:b4:6d:2b:c5:32:93: 2d:9a:0f:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwNzA0MTU0ODQ2WhcNMjUwNzExMTU0ODQ2WjAYMRYwFAYD VQQDEw02ODY3ZjdkZS02N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXeNyTwcJja7pJ/DEMkpfY3i84xPRmifrqcIBESdhl1sZdNgo9c5u/qCvGXD fONlGkj9WvI5fiiAxjUEm8CjCr6H3BCxEAeufV6PlU17wxV2ETdTq1NMebWAOwId Pf09AOT/FevjpRbN+PJrD9v91VtZBPKpd+pI6/sWFrfX0SeVfRE8AbwkOVWp/yYt a4k05Xm5mDeqlRy2ofGa3GKFnlHHT0JgthcT+hBfM3zIlTPXYsuPXE2dMKHsPYHQ RgrXEg1eSkq/f3gGB/posh06aU0RojKK+JCO4NMUS9mCyCucYN4u8FFkl0bu2Q2X Uid9VU3rYen9S2vTT9yOjglbJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOW5VcJN K//P7LeLy0x/4wHsWAYqMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4uxPbRMjY9gShLv9QLl4Hbd10okXXgk0k5DisdHamD5NV0ZrkQqtj /b+w4rdkxfyvLnuA5svfTdnV26sPQ+lgH0H7C/uQywG+ah2DvIDMM5iMPgn5bBgK mo7mmEjX5QqKBextEGenHIdqIdBxPe8Bgo2/NBrdSo/g04js/9DaV04q+ZWw+x6i 2KctE/NkcmrA1gfcfI+k066OBJur9AQzuSmgw6+n5y0xBGGuM2/g+SJjhxM9dnrR HSXt3bJR2MXt25jLRFJnWCBPJ43jgL6tZvAFQre1FwLfYJEG7yThfMXySKjicIF9 qa/fFpyyWpSYRSEnjMC0bSvFMpMtmg+b -----END CERTIFICATE-----Generated at Fri Jul 4 21:54:20 2025 by rpki-client