$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft File: GHL5iLZXI3g3mSN-VU28xuSdFLA.mft (raw, json) Hash identifier: KEfw44OEbkb41ENO7FdaJsdKmfo2HHun3c7OCETbRE4= Subject key identifier: 23:6A:2B:36:98:E2:6A:14:E7:97:85:4F:94:AA:30:40:2D:DA:39:7C Authority key identifier: 18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 Certificate issuer: /CN=A919986F/serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft Manifest number: 0BD3 Signing time: Tue 28 Jul 2026 15:40:53 +0000 Manifest this update: Tue 28 Jul 2026 15:40:52 +0000 Manifest next update: Tue 04 Aug 2026 15:40:52 +0000 Files and hashes: 1: GHL5iLZXI3g3mSN-VU28xuSdFLA.crl (hash: fUFVIySZAOtNL/NVBZ/bIf5+N+jK3LsFmKpcFcZERyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=1872F988B65723783799237E554DBCC6E49D14B0 Validity Not Before: Jul 28 15:40:52 2026 GMT Not After : Aug 4 15:40:52 2026 GMT Subject: CN=6a68cd85-f707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:03:55:f9:81:9b:b4:37:65:20:35:8d:80: 71:60:56:ba:ad:b0:26:5d:5a:a2:ce:92:93:87:ae: 15:c7:23:c2:28:c7:90:a5:6c:d8:22:02:ce:17:56: c8:23:16:13:27:0c:44:af:eb:fc:96:44:28:17:b9: 38:f7:ec:3b:ea:cf:b6:2c:4c:a8:3c:a1:0a:30:84: c4:73:37:fc:a3:49:3a:6e:d2:e0:7f:a7:b0:61:ce: c1:a0:9a:c8:0a:0f:b3:5b:81:e3:49:3c:a0:90:95: 6b:35:be:e2:0a:11:23:31:ae:25:c8:ce:78:42:ad: 3e:5c:96:73:49:f0:d9:be:d3:7f:07:88:c9:97:71: ef:f2:ec:69:ec:26:94:d3:66:27:5d:49:34:e9:42: a3:78:d8:10:25:79:25:f9:94:22:95:b8:f7:50:99: 39:0d:11:8d:77:bd:d0:c9:1f:b9:14:0a:44:b5:59: 7d:90:0b:bb:19:85:f6:cf:80:db:9a:65:94:2d:c4: dc:2a:7d:2b:a4:53:05:0b:1d:79:4b:21:c1:46:a6: 38:77:35:b1:84:73:36:5f:cc:13:6d:38:d7:8c:01: ba:67:eb:db:42:a4:8e:76:d9:ea:cb:56:38:47:a6: 5b:e1:0b:f2:a3:ad:8c:38:6c:da:75:bd:04:00:43: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6A:2B:36:98:E2:6A:14:E7:97:85:4F:94:AA:30:40:2D:DA:39:7C X509v3 Authority Key Identifier: keyid:18:72:F9:88:B6:57:23:78:37:99:23:7E:55:4D:BC:C6:E4:9D:14:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/GHL5iLZXI3g3mSN-VU28xuSdFLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/A61DF1DA466A11EAA007EF1FC4F9AE02/GHL5iLZXI3g3mSN-VU28xuSdFLA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:af:ac:4a:ae:8d:c5:06:13:cb:8e:64:3a:21:b6:2a:04:3b: 33:97:67:68:d6:d1:5e:f1:cf:5a:fc:e6:a2:57:0f:e4:c3:91: e7:51:32:fb:1e:bb:51:c7:f1:4c:de:4b:4b:d9:da:e1:23:b3: b2:d4:13:ef:ff:e5:22:8c:2f:ba:bd:45:6a:88:64:5a:dd:91: 67:4a:ed:aa:eb:95:89:ef:0d:d3:07:e6:fa:d5:2f:99:02:74: b9:9e:b9:35:82:d5:44:54:c1:40:e6:0b:ee:45:2c:97:4e:fe: d9:62:53:c0:49:44:9d:e2:88:a5:0f:e8:17:84:73:3d:05:c4: 6e:de:73:b2:3d:47:f4:b6:cd:05:ab:13:52:ac:27:1f:85:d0: 5a:ba:1b:85:a0:a7:19:84:8f:c7:0e:c7:e3:e4:04:3c:88:47: a6:26:ea:b9:f2:b1:bd:fd:15:60:99:77:0c:6e:49:e5:ca:60: 91:f7:90:cc:f4:77:33:a6:28:ae:89:3a:39:27:89:61:7d:61: 8c:41:ce:7e:5f:80:dd:a1:f6:8b:19:5a:0b:04:5f:78:b8:17: 1f:f1:00:e7:96:4c:e1:4f:d1:0f:40:42:31:fe:a3:24:0c:6f: 53:af:dd:e1:73:01:48:74:cb:c2:cf:07:87:55:77:da:07:45: e4:e7:4e:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKDE4NzJGOTg4QjY1NzIzNzgzNzk5MjM3RTU1NERCQ0M2 RTQ5RDE0QjAwHhcNMjYwNzI4MTU0MDUyWhcNMjYwODA0MTU0MDUyWjAYMRYwFAYD VQQDEw02YTY4Y2Q4NS1mNzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmtsDVfmBm7Q3ZSA1jYBxYFa6rbAmXVqizpKTh64VxyPCKMeQpWzYIgLOF1bI IxYTJwxEr+v8lkQoF7k49+w76s+2LEyoPKEKMITEczf8o0k6btLgf6ewYc7BoJrI Cg+zW4HjSTygkJVrNb7iChEjMa4lyM54Qq0+XJZzSfDZvtN/B4jJl3Hv8uxp7CaU 02YnXUk06UKjeNgQJXkl+ZQilbj3UJk5DRGNd73QyR+5FApEtVl9kAu7GYX2z4Db mmWULcTcKn0rpFMFCx15SyHBRqY4dzWxhHM2X8wTbTjXjAG6Z+vbQqSOdtnqy1Y4 R6Zb4Qvyo62MOGzadb0EAEPLdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNqKzaY 4moU55eFT5SqMEAt2jl8MB8GA1UdIwQYMBaAFBhy+Yi2VyN4N5kjflVNvMbknRSw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9BNjFERjFEQTQ2 NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkzZzNtU04tVlUyOHh1U2RG TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL0dITDVpTFpYSTNnM21TTi1WVTI4eHVTZEZMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9BNjFERjFEQTQ2NkExMUVBQTAwN0VGMUZDNEY5QUUwMi9HSEw1aUxaWEkz ZzNtU04tVlUyOHh1U2RGTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKK+sSq6NxQYTy45kOiG2KgQ7M5dnaNbRXvHPWvzmolcP5MOR51Ey+x67Ucfx TN5LS9na4SOzstQT7//lIowvur1FaohkWt2RZ0rtquuVie8N0wfm+tUvmQJ0uZ65 NYLVRFTBQOYL7kUsl07+2WJTwElEneKIpQ/oF4RzPQXEbt5zsj1H9LbNBasTUqwn H4XQWrobhaCnGYSPxw7H4+QEPIhHpibqufKxvf0VYJl3DG5J5cpgkfeQzPR3M6Yo rok6OSeJYX1hjEHOfl+A3aH2ixlaCwRfeLgXH/EA55ZM4U/RD0BCMf6jJAxvU6/d 4XMBSHTLws8Hh1V32gdF5OdOng== -----END CERTIFICATE-----Generated at Wed Jul 29 11:00:35 2026 by rpki-client