$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: BQ4ZIb5502fTyHAZ6s4gKrJkdboyDla72AWRJ+FKrYc= Subject key identifier: D9:C8:C5:CF:EC:83:E1:0A:DD:30:A5:CE:52:1E:40:D7:4B:19:72:11 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B3A Signing time: Sat 18 Oct 2025 15:48:39 +0000 Manifest this update: Sat 18 Oct 2025 15:48:38 +0000 Manifest next update: Sat 25 Oct 2025 15:48:38 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: 275OWdZzjXssKueXwUQ/KlniEFZGQvOFQajuew1zVv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Oct 18 15:48:38 2025 GMT Not After : Oct 25 15:48:38 2025 GMT Subject: CN=68f3b6d6-50d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:74:38:e3:b6:10:89:d6:1f:84:6e:e4:e7: 1e:a0:c1:10:7f:a5:80:5a:6a:47:ad:78:dc:32:fe: fb:ab:4e:45:9e:ef:38:44:30:bd:9a:ef:58:ae:01: b0:57:54:79:48:08:6e:32:97:68:be:ac:e7:01:08: 66:7f:28:df:c7:f5:3f:59:f6:d6:c4:b3:94:48:56: b9:5c:de:b7:dc:71:25:07:f3:0e:8c:dd:17:93:9b: af:49:47:94:d8:6f:4e:e2:1a:ba:43:1f:20:6c:6a: 79:cf:e0:3f:bf:9d:f5:34:94:c1:6b:9d:52:94:e5: 09:fe:e9:c0:d9:cc:24:d0:68:fd:b5:69:91:de:10: 8e:4d:ee:48:3b:c3:c7:a9:9e:ae:10:0e:42:95:5f: 12:5a:08:42:80:e9:c0:fa:2f:ff:8f:ac:e5:c7:f5: a4:8b:95:17:c9:f6:7a:0b:80:91:5b:ca:d1:95:97: 12:7e:bc:cc:02:15:16:1a:71:68:0f:67:47:c2:b3: 08:a0:19:ac:9b:87:3e:39:5a:7d:de:bb:54:c7:e4: ef:0d:2d:bd:58:85:86:57:b0:d7:c4:bc:64:10:88: 44:28:c0:ee:e9:2b:3f:2a:a4:e1:65:d0:e6:d0:b9: e1:5c:8d:e8:59:16:d5:9d:38:7b:0b:69:8a:70:de: 1c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C8:C5:CF:EC:83:E1:0A:DD:30:A5:CE:52:1E:40:D7:4B:19:72:11 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cc:e4:3c:f3:f4:ef:51:aa:80:a8:c3:b8:7a:43:a4:ef:b4: 59:38:c0:77:0f:6e:32:cf:45:df:84:30:76:6f:d4:32:6e:43: 90:04:07:0c:f3:2a:2c:91:37:c1:f7:94:4a:f0:6a:1c:22:89: 82:ac:e5:17:a0:fb:46:5c:8d:d5:25:50:ba:27:f9:24:db:6a: cd:ea:e3:17:41:0a:ed:0a:da:34:09:3f:99:4c:95:0b:d5:9f: 2c:52:01:41:37:e8:5f:c1:e6:4a:9a:a0:cf:57:14:85:9c:db: b3:d7:85:2e:33:80:7f:15:9b:c5:7e:57:34:55:41:2f:8c:6e: b2:1e:fa:a6:c4:25:db:ad:69:a6:60:54:df:38:59:ee:58:de: 27:be:fe:e8:21:8e:c8:d6:99:4b:00:53:7d:b4:6f:91:bc:47: 97:25:d5:dd:2f:0c:fe:fb:4b:04:c8:fd:2d:23:9e:a8:88:4b: d6:76:23:10:79:e2:91:7a:1f:64:ed:e3:ef:ba:1c:18:59:15: 49:05:5d:ed:11:05:7a:00:69:a9:0f:c9:fe:19:d9:68:81:d5: c0:7c:63:e6:3a:a3:21:c0:4e:86:8e:4c:23:0b:33:0b:e9:5f: 72:d3:9d:65:e5:f9:ee:38:60:67:9b:c1:be:89:50:6d:b0:e0: a9:d0:ce:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUxMDE4MTU0ODM4WhcNMjUxMDI1MTU0ODM4WjAYMRYwFAYD VQQDEw02OGYzYjZkNi01MGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6550OOO2EInWH4Ru5OceoMEQf6WAWmpHrXjcMv77q05Fnu84RDC9mu9YrgGw V1R5SAhuMpdovqznAQhmfyjfx/U/WfbWxLOUSFa5XN633HElB/MOjN0Xk5uvSUeU 2G9O4hq6Qx8gbGp5z+A/v531NJTBa51SlOUJ/unA2cwk0Gj9tWmR3hCOTe5IO8PH qZ6uEA5ClV8SWghCgOnA+i//j6zlx/Wki5UXyfZ6C4CRW8rRlZcSfrzMAhUWGnFo D2dHwrMIoBmsm4c+OVp93rtUx+TvDS29WIWGV7DXxLxkEIhEKMDu6Ss/KqThZdDm 0LnhXI3oWRbVnTh7C2mKcN4cdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnIxc/s g+EK3TClzlIeQNdLGXIRMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPzOQ88/TvUaqAqMO4ekOk77RZOMB3D24yz0XfhDB2b9QybkOQBAcM 8yoskTfB95RK8GocIomCrOUXoPtGXI3VJVC6J/kk22rN6uMXQQrtCto0CT+ZTJUL 1Z8sUgFBN+hfweZKmqDPVxSFnNuz14UuM4B/FZvFflc0VUEvjG6yHvqmxCXbrWmm YFTfOFnuWN4nvv7oIY7I1plLAFN9tG+RvEeXJdXdLwz++0sEyP0tI56oiEvWdiMQ eeKReh9k7ePvuhwYWRVJBV3tEQV6AGmpD8n+GdlogdXAfGPmOqMhwE6GjkwjCzML 6V9y051l5fnuOGBnm8G+iVBtsOCp0M55 -----END CERTIFICATE-----Generated at Mon Oct 20 13:59:28 2025 by rpki-client