$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: 7NGZmKAk9bxDL23BtVDErqM7+gZ1E5HmQUFaUlJidMQ= Subject key identifier: 49:3F:FD:10:7E:51:0D:FB:E7:0B:93:FE:48:FF:AB:56:51:1C:51:5F Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0B1D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0B1D Signing time: Fri 22 Aug 2025 15:39:12 +0000 Manifest this update: Fri 22 Aug 2025 15:39:11 +0000 Manifest next update: Fri 29 Aug 2025 15:39:11 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: irag0LchyVl4R1a7N84FR3fSQVWZ4ZwyCrNSAG+Xdiw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2845 (0xb1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Aug 22 15:39:11 2025 GMT Not After : Aug 29 15:39:11 2025 GMT Subject: CN=68a88f1f-e579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:a3:57:89:cf:c0:20:70:5d:36:7c:de:71: 37:0d:f2:81:7d:30:f8:c0:ac:3c:ea:a9:9d:59:5d: 3d:a4:c2:5b:4c:48:c2:88:08:41:6c:56:77:5e:20: ea:70:09:3c:8a:a2:5a:36:f6:74:bb:8f:13:f9:51: d3:f0:ca:0e:62:0f:2d:e3:8e:3d:77:5d:eb:8e:43: f7:f0:77:54:32:67:1f:d3:01:ce:f2:cb:d7:d4:b1: 43:e3:f6:31:f8:6c:2d:f6:cd:d4:64:c0:aa:47:da: 59:6d:52:aa:7a:f4:28:ab:55:73:1a:b5:79:f0:ca: ca:12:a2:c5:72:27:d9:b9:c3:04:89:77:0d:f2:08: d0:bb:cf:45:5d:a3:6b:5b:36:b6:89:9a:1d:40:54: 61:ed:26:21:b3:d3:fb:0c:3f:4d:54:63:a6:7d:c2: d6:7e:22:ca:8a:9e:76:cf:4a:6d:9e:84:59:53:cd: 7c:82:11:76:ba:b3:d7:cc:4d:f2:72:bb:83:ea:81: fb:28:a3:31:bd:dd:4b:c7:70:88:17:25:64:33:9d: ee:e9:ff:05:f1:9b:a8:cc:da:c3:96:e6:f9:59:28: 5d:13:45:4e:f1:48:c2:78:07:17:f4:bd:a4:49:db: 44:1c:38:6c:51:f7:a7:30:b1:63:fd:41:2a:7c:74: ea:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3F:FD:10:7E:51:0D:FB:E7:0B:93:FE:48:FF:AB:56:51:1C:51:5F X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5f:90:b4:72:cd:bf:5e:ad:27:3f:d4:13:76:73:e4:99:6e: 00:60:f1:08:d2:cd:4f:20:2d:59:f2:87:e4:0f:f6:07:41:49: 7c:72:fe:18:5d:8c:5c:ce:b0:6e:50:07:59:ac:bd:8c:d3:48: 2d:33:3d:b8:86:74:21:67:73:43:da:99:43:9b:fb:51:db:fd: 8e:96:56:7e:ad:2c:4b:dc:54:b4:21:a1:d0:fb:bc:17:90:67: 28:a3:e5:41:c6:91:b3:ed:10:7d:f7:e6:ee:2a:59:72:73:b5: c8:b8:56:f5:61:2d:c8:4f:58:f4:1c:93:f9:f6:d3:4d:81:e6: aa:0a:c0:66:13:b3:46:4e:5e:9e:bc:02:94:30:a9:2a:f8:62: d2:ef:6a:ea:aa:98:9d:6d:5b:0d:6b:74:b7:87:45:f3:4a:9b: 6e:1e:e6:9d:a5:12:2f:56:7a:23:f7:f5:4e:3a:3d:c1:44:6f: 16:c8:e5:98:b6:da:32:73:c6:bf:19:07:b4:eb:ba:18:13:9c: 04:e5:fe:a8:72:e8:56:f8:84:e3:1f:17:13:fb:56:0f:2d:e8: 0f:88:28:80:b2:f0:f7:d5:e2:98:29:50:5e:e6:51:e2:73:8f: fe:38:e5:a3:2a:39:14:be:ca:f2:be:75:0b:f4:2d:10:f4:4b: 7d:9b:26:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwODIyMTUzOTExWhcNMjUwODI5MTUzOTExWjAYMRYwFAYD VQQDEw02OGE4OGYxZi1lNTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDWjV4nPwCBwXTZ83nE3DfKBfTD4wKw86qmdWV09pMJbTEjCiAhBbFZ3XiDq cAk8iqJaNvZ0u48T+VHT8MoOYg8t4449d13rjkP38HdUMmcf0wHO8svX1LFD4/Yx +Gwt9s3UZMCqR9pZbVKqevQoq1VzGrV58MrKEqLFcifZucMEiXcN8gjQu89FXaNr Wza2iZodQFRh7SYhs9P7DD9NVGOmfcLWfiLKip52z0ptnoRZU818ghF2urPXzE3y cruD6oH7KKMxvd1Lx3CIFyVkM53u6f8F8ZuozNrDlub5WShdE0VO8UjCeAcX9L2k SdtEHDhsUfenMLFj/UEqfHTqKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEk//RB+ UQ375wuT/kj/q1ZRHFFfMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcX5C0cs2/Xq0nP9QTdnPkmW4AYPEI0s1PIC1Z8ofkD/YHQUl8cv4Y XYxczrBuUAdZrL2M00gtMz24hnQhZ3ND2plDm/tR2/2OllZ+rSxL3FS0IaHQ+7wX kGcoo+VBxpGz7RB99+buKllyc7XIuFb1YS3IT1j0HJP59tNNgeaqCsBmE7NGTl6e vAKUMKkq+GLS72rqqpidbVsNa3S3h0XzSptuHuadpRIvVnoj9/VOOj3BRG8WyOWY ttoyc8a/GQe067oYE5wE5f6ocuhW+ITjHxcT+1YPLegPiCiAsvD31eKYKVBe5lHi c4/+OOWjKjkUvsryvnUL9C0Q9Et9myY5 -----END CERTIFICATE-----Generated at Sun Aug 24 06:32:18 2025 by rpki-client