$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: T5ZWJF3suu8+VUGkFRJKgyiZFBzsY2NDSaFeFFSxdcg= Subject key identifier: EB:29:7B:D2:B6:34:DF:28:32:9A:31:40:78:95:F5:B1:17:DF:7F:C7 Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0AE1 Signing time: Sat 26 Apr 2025 15:35:00 +0000 Manifest this update: Sat 26 Apr 2025 15:35:00 +0000 Manifest next update: Sat 03 May 2025 15:35:00 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: I8TvpP8nIJjRfB566R51f0Pvnwyv8SzMwpOs1WMBvFw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Apr 26 15:35:00 2025 GMT Not After : May 3 15:35:00 2025 GMT Subject: CN=680cfd24-b15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:77:ad:5f:a4:e8:06:f9:46:56:9e:b6:56: a5:a4:8e:17:fa:68:40:9d:fd:85:ab:8e:c7:8e:df: e9:9d:35:aa:21:6f:94:4d:df:4c:eb:28:c2:c5:5e: 9c:64:01:e1:31:71:e1:ca:a3:da:c3:1f:71:3f:c2: 8b:2e:56:97:9a:79:02:ae:39:c3:2b:b0:a7:88:60: cd:ce:8b:cd:e5:20:fb:17:f8:a0:37:77:03:5a:a5: 9b:3a:14:d4:b0:ee:ea:3d:51:eb:91:49:6d:04:b6: 73:9b:f4:cd:43:cc:08:3c:e5:37:82:b9:b8:d6:04: 7e:90:75:77:85:e8:ca:5e:65:02:62:9c:78:e3:e3: 0c:c7:ad:e2:ac:6d:7a:3b:1b:0b:32:33:8c:73:30: 92:af:5e:0c:20:e4:3f:28:39:57:e8:f3:c1:de:c4: 3d:cb:fa:e6:7d:08:cb:f2:c8:d9:87:3e:1e:60:10: 6f:50:c5:9a:21:f6:06:f8:5f:59:05:a3:8d:e8:ec: 05:a7:5e:d0:f6:14:cc:56:81:d5:24:e5:db:e1:ee: 43:cc:79:a5:5d:7b:d0:b6:58:9f:fc:46:50:73:03: 29:a2:5d:c6:ce:2b:c2:9a:71:77:c2:18:1c:ac:61: ba:34:fb:56:76:fe:c2:1e:2f:bd:97:ad:90:9e:c4: a4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:29:7B:D2:B6:34:DF:28:32:9A:31:40:78:95:F5:B1:17:DF:7F:C7 X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b3:03:24:38:a2:80:51:34:52:34:5d:a0:22:d1:ec:af:c5: ec:bc:55:99:22:65:b0:6f:a9:0d:e2:89:84:c7:75:93:d2:04: cd:73:f7:41:7f:76:5d:d7:91:1f:c9:fb:38:5a:67:27:ea:57: 34:1f:37:aa:a6:2e:c8:a0:3c:f8:62:af:3c:bf:9b:28:a9:cd: 60:bd:53:9a:23:95:93:17:bf:91:48:f8:60:9b:78:2a:6a:1b: 5c:1b:fd:a6:11:07:a0:3b:a8:6b:5b:b9:e5:76:e1:79:b8:cf: 1c:23:c6:54:ac:ed:83:d1:bc:e9:df:64:5c:a8:af:15:46:bd: 2a:da:3d:96:ab:7d:6b:66:90:cd:67:21:22:83:e0:38:18:3b: 7c:4f:25:92:72:68:06:ba:22:a5:70:d5:56:06:dc:db:38:d1: 2c:90:b0:32:09:3d:42:bf:2a:de:70:fc:05:11:b8:ff:b8:32: 2b:ea:2a:ce:4d:62:51:b4:d3:21:9c:ec:c0:6a:84:05:d0:7c: 3e:7d:a9:73:38:d5:d8:1f:6e:d1:2d:04:5c:33:d7:47:07:3d: f2:81:6c:97:13:3d:2d:d3:8b:6b:08:0d:eb:7c:88:e7:c8:dd: 41:e8:69:a8:ed:3d:32:7b:22:32:96:82:2e:ae:d9:de:59:c8: 33:0e:1d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjUwNDI2MTUzNTAwWhcNMjUwNTAzMTUzNTAwWjAYMRYwFAYD VQQDEw02ODBjZmQyNC1iMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruZ3rV+k6Ab5RlaetlalpI4X+mhAnf2Fq47Hjt/pnTWqIW+UTd9M6yjCxV6c ZAHhMXHhyqPawx9xP8KLLlaXmnkCrjnDK7CniGDNzovN5SD7F/igN3cDWqWbOhTU sO7qPVHrkUltBLZzm/TNQ8wIPOU3grm41gR+kHV3hejKXmUCYpx44+MMx63irG16 OxsLMjOMczCSr14MIOQ/KDlX6PPB3sQ9y/rmfQjL8sjZhz4eYBBvUMWaIfYG+F9Z BaON6OwFp17Q9hTMVoHVJOXb4e5DzHmlXXvQtlif/EZQcwMpol3GzivCmnF3whgc rGG6NPtWdv7CHi+9l62QnsSkgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOspe9K2 NN8oMpoxQHiV9bEX33/HMB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9swMkOKKAUTRSNF2gItHsr8XsvFWZImWwb6kN4omEx3WT0gTNc/dB f3Zd15Efyfs4Wmcn6lc0Hzeqpi7IoDz4Yq88v5soqc1gvVOaI5WTF7+RSPhgm3gq ahtcG/2mEQegO6hrW7nlduF5uM8cI8ZUrO2D0bzp32RcqK8VRr0q2j2Wq31rZpDN ZyEig+A4GDt8TyWScmgGuiKlcNVWBtzbONEskLAyCT1CvyrecPwFEbj/uDIr6irO TWJRtNMhnOzAaoQF0Hw+falzONXYH27RLQRcM9dHBz3ygWyXEz0t04trCA3rfIjn yN1B6Gmo7T0yeyIyloIurtneWcgzDh2c -----END CERTIFICATE-----Generated at Sat Apr 26 18:20:28 2025 by rpki-client on console.sobornost.net